Privacy policy
How we collect, use and protect your personal and health information.
Smile JK Clinic Limited, trading as Smile Chiropractic ("we", "us", "our"), collects and holds personal and health information about the people we care for. We handle that information in accordance with the Privacy Act 2020 and the Health Information Privacy Code 2020, which sets additional rules for health agencies.
This policy covers both the information we hold as a clinic and the information handled through this website.
Who to contact
Our privacy officer is responsible for how we handle your information and for answering any request or concern you raise.
Privacy officer: William Jang, Smile JK Clinic Limited
Email: info@smilechiropractic.co.nz
Phone: 09 390 2643
Post: 110 Carlton Gore Road, Newmarket, Auckland 1023
What we collect
The information we collect depends on the care you receive. It generally includes:
- Contact and identity details — your name, date of birth, address, phone number and email address.
- Health information — your reason for visiting, health and medical history, pregnancy and birth details where relevant, examination and assessment findings, treatment provided, clinical notes, and your progress over time.
- Information about children we treat — the child's health information, together with the name and contact details of the parent or guardian who brings them.
- Claim and payment details — ACC claim information, health insurer details where you claim through them, and payment records.
- Home visit details — your address and any access or parking information needed for the visit.
- Workshop registrations — the name and contact details of participants, and any information you choose to tell us about your circumstances.
How we collect it
Most information comes directly from you, or from a parent or guardian when we treat a child. We may also collect information:
- from other health professionals involved in your care, such as your GP, midwife or specialist, where you have authorised us to request it;
- from ACC, in connection with a claim;
- from your health insurer, in connection with a claim.
Why we collect it
We collect and use your information to:
- assess your condition and decide whether and how we can help;
- provide chiropractic care, rehabilitation and related education;
- keep accurate clinical records, which we are required by law to maintain;
- contact you about appointments, including reminders and changes;
- process ACC and health insurance claims, and manage payment;
- refer you to another health professional, or respond to a referral, where that is appropriate for your care;
- run our practice, including accounts and administration;
- organise and run workshops you have registered for.
You do not have to give us your information. However, if you choose not to provide information we need, we may not be able to assess your condition properly or provide care safely, and in some cases we may not be able to treat you or claim on your behalf.
Who we share it with
We do not sell your information or use it for advertising. We may share it:
- with other health professionals involved in your care — for example when we refer you, or when your GP or midwife asks for information — where you have authorised this or where the Health Information Privacy Code otherwise permits it;
- with ACC, where you are treated under an ACC claim;
- with your health insurer, where you claim through them. We are registered for Southern Cross Easy-claim, which involves sending claim details to Southern Cross;
- with our practice management software provider, which stores our records on our behalf (see "Information held overseas" below);
- with our professional advisers, such as our accountant, where necessary and only so far as needed;
- where the law requires or allows it, including to a court, a regulator, or the New Zealand Chiropractic Board;
- in an emergency, where sharing information is necessary to prevent or lessen a serious threat to someone's life or health, or to public health or public safety.
Information held overseas
We use Cliniko, a practice management system operated by Red Guava Pty Ltd in Australia, to manage bookings and clinical records. This means your information is stored on Cliniko's servers in Australia, outside New Zealand. Cliniko holds this information on our behalf and does not use it for its own purposes. We remain responsible for it under New Zealand law, and we have taken steps to ensure it is stored securely.
When you book an appointment through our online booking link, you are entering your details directly into Cliniko's system, which is also subject to its own privacy terms.
How we store and protect it
We take reasonable steps to keep your information safe from loss, misuse and unauthorised access. Clinical records are held in our practice management system, which is access-controlled, and any paper records are kept secured at the clinic. Only our practitioners and administrative staff who need your information in order to do their work can see it.
How long we keep it
We are required to keep health information for at least 10 years from the day we last provided you with services, under the Health (Retention of Health Information) Regulations 1996. In practice we often keep records for longer, because an older record can be important to your ongoing care. Information we no longer need and are not required to keep is securely destroyed.
Your right to see and correct your information
You have the right to:
- ask whether we hold information about you;
- ask for a copy of that information;
- ask us to correct it if you think it is wrong.
To make a request, contact our privacy officer using the details above. We will usually respond within 20 working days. There is normally no charge. In the limited cases the Health Information Privacy Code allows, such as a repeat request for the same information within 12 months, we may charge a reasonable fee, and we will tell you before we do. Occasionally the law allows us to withhold some information — if that applies we will explain why.
If we do not agree to correct something, you can ask us to attach a statement of the correction you sought to your record, and we will do so.
Children and young people
Where we treat a child, we normally deal with their parent or guardian, who can usually request access to the child's information and ask for it to be corrected. We may decline a request where releasing the information would not be in the child's best interests. As a young person gets older they may be able to make their own decisions about their health information and ask for it themselves. We assess this individually, taking into account the young person's age and understanding.
This website
This site is deliberately simple:
- We do not use cookies, analytics or advertising trackers. We do not build a profile of your visit.
- There is no form on this site. If you email or call us, we hold what you send us.
- Fonts are loaded from Google Fonts, which means Google receives your IP address when a page loads. Google handles that under its own privacy policy.
- Our web host keeps standard server logs, which may include IP addresses, as part of running and securing the site.
- Links to other services — our online booking, Instagram page and map links take you to sites we do not control. Their own privacy policies apply once you leave this site.
Privacy breaches
If something goes wrong and your information is lost or accessed without authorisation, we will act to contain it. Where a breach is likely to cause you serious harm, we are required to notify you and the Office of the Privacy Commissioner, and we will do so.
If you have a concern
Please raise it with our privacy officer first — most issues are resolved quickly once we know about them.
If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner: 0800 803 909, or privacy.org.nz. If your concern is about the care you received rather than your information, you can contact the Health and Disability Commissioner: 0800 11 22 33, or hdc.org.nz.
Changes to this policy
We may update this policy from time to time. The current version is always on this page, with the date it was last updated shown below.
Last updated: 3 November 2026