Empowering you through trusted information handling

At accessable, we partner with agencies like the Ministry, ACC and Te Whatu Ora to deliver
equipment, housing, and vehicle modification services across Aotearoa New Zealand.

 

1. Why we collect your information

We collect your personal and health information to:

• Assess your eligibility for services or equipment
• Ensure the timely delivery and ongoing maintenance of equipment or modifications
• We are committed to upholding our legal and contractual obligations to the agencies we
work with, including the Ministry, ACC, and Te Whatu Ora
• Ensure the well-being and safety of both yourself and all individuals engaged in your
care
• Enhance our services by through research and analytics, ensuring that all data remains
anonymized.
We ensure that we collect only the essential information required for these purposes. Should
we need to use your information for any other reasons, we will inform you in advance.

 

2. How we collect your information

Your information is provided to us by:

• Your clinical professional (e.g. Assessor)
• Your ACC Case Owner or Te Whatu Ora representative
• A nominated trusted carer, support worker, or family/whānau member
• You directly, during assessments or service delivery
While providing our services to you, we may also create internal documentation for our records.

 

3. What we collect

We may collect the following types of personal and health information:

• Full name and contact details
• Date of birth, gender, identity, ethnicity, and residency status
• National Health Index (NHI) number or ACC claim number
• Disability or medical conditions and assessment information
• Data on historical applications and services
• Photographs (e.g. property assessments)
• Information about your GP, Health District, or nominated representatives
• Call recordings and service-related correspondence
• Internally generated records (e.g. such as repairs and maintenance job requests or
service notes)
• Technical data from users of our websites and online services, which may include
information such as IP addresses, browser types, and cookie data.

 

4. How we use and share your information

We use your information solely for clearly defined purposes that are directly related to the
assessment, delivery, and ongoing support of our contracted services.

Where possible, we anonymise or aggregate your information before using it for analysis,
reporting, or enhancing our services.
We may share your information with:

• Your care team (e.g. Te Whatu Ora staff, ACC, Clinical Professionals)
• Your authorised support network (carer, support worker, family/whānau)
• Approved suppliers and subcontractors, for the provision and maintenance of
equipment supporting Ministry (EMS) services,
• Trusted third-party IT providers (e.g. for secure cloud hosting and data processing)
• Government agencies (e.g. ACC, The Ministry or Te Whatu Ora), in aggregated or
anonymised form
We are committed to respecting your privacy and will never utilise or share your personal
stories, photos, or testimonials without obtaining your explicit consent.

If an unforeseen disclosure becomes necessary, we will take appropriate measures to ensure it
is:

• Lawful – permitted under the Privacy Act or another law
• Necessary – reasonably needed for a lawful purpose
• Appropriate – aligns with our role and responsibilities

 

5. Protecting your information

We securely store your information with two cloud service providers where the information is
hosted in data centres located in Australia:

• Microsoft platforms, specifically Dynamics 365 and Azure
• Google Cloud EMEA Ltd, specifically Odoo.sh
These services comply with rigorous data security and privacy standards.
Data centre and service certifications include:
• ISO 27001 • ISO 27017
• ISO 27018 • SOC 1
• SOC 2 • SOC 3
• PCI-DSS • HIPAA
• CISPE • CSA STAR

We protect your information by:

• Restricting access to essential personnel only
• Ensuring that staff and contractors are well-trained in privacy and security best
practices
• Evaluating system access and usage for compliance and security purposes
• Ensuring data protection through the implementation of contracts, agreements, and
policies.
• Consistently evaluating our systems and practices against industry standards

We retain health information for a minimum of 10 years in accordance with health regulations.
Following this period, the information may be securely destroyed or anonymised.

6. Your rights and how to use them

You have the right to:

• Access your personal or health information
• Correct any errors or outdated details
• Request an explanation of how your information is used

To make a request, please contact:
Phone: 0508 001 002
Email: privacy@accessable.co.nz
Postal address: The Privacy Officer, Accessable, PO Box 27 804, Mount Roskill, Auckland 1440

We'll respond within 20 working days and may ask to confirm your identity first.

 

7. Cookies and website use

Our website uses cookies to personalise your online experience. Cookies help us to remember
your preferences and allow us to improve your browsing experience. You have the option to
manage or disable cookies through your browser settings. Please be aware that disabling
cookies may impact the functionality of the website.

 

8. Concerns or complaints

If you have concerns about our management of your information, please contact us directly or
use our Review and Complaints Procedure.

If we can't resolve your concerns, you can contact the Office of the Privacy Commissioner:

Website: www.privacy.org.nz

Postal address: PO Box 10-094, The Terrace, Wellington 614