Privacy Policy

Last updated: 7 May 2026 Effective from: 15 January 2025

At NZ Roids (“we”, “us”, “our”), your privacy is something we take seriously. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information and health information when you visit our website at www.nzroids.co.nz, use our online services, or interact with our pharmacy in New Zealand.

We comply with the Privacy Act 2020, the Health Information Privacy Code 2020 (HIPC), the Medicines Act 1981, the Misuse of Drugs Act 1975, the Pharmacy Council of New Zealand’s Code of Ethics, and the Unsolicited Electronic Messages Act 2007.

By using our website or services, you agree to the practices described in this policy.

1. Who we are

NZ Roids is a registered pharmacy operating in New Zealand.

  • Trading name: NZ Roids
  • Legal entity: NZ Roids Limited, NZBN 9429051234567
  • Registered address: 142 Ponsonby Road, Ponsonby, Auckland 1011, New Zealand
  • Pharmacy licence number: PL-2025-0142
  • Privacy Officer: Te Aroha Williams, reachable at privacy@nzroids.co.nz

2. What personal information we collect

We only collect information necessary for a lawful purpose connected to our pharmacy services, in line with Rule 1 of the Health Information Privacy Code 2020.

Personal information

  • Full name, date of birth, and gender
  • Residential and delivery address
  • Phone number and email address
  • NHI (National Health Index) number, where relevant
  • Payment details (processed securely by our payment provider)
  • Account login credentials

Health information

  • Prescription details and medication history
  • Allergies, medical conditions, and clinical notes from you or your prescriber
  • Vaccinations, consultations, or pharmacist services records
  • Doctor or prescriber details
  • Information shared during medicines use reviews or other clinical services

Website and technical information

  • IP address, device type, browser, and operating system
  • Pages visited, time spent, and referring URLs
  • Cookies and similar tracking technologies (see Section 9)

3. How we collect your information

  • Directly from you when you create an account, place an order, upload a prescription, fill out a form, contact us, or visit our pharmacy.
  • From your prescriber or another health agency when a prescription or referral is sent to us, in line with Rule 2 of the HIPC.
  • From third parties such as Te Whatu Ora (Health New Zealand), the Ministry of Health, or your previous pharmacy, where you have authorised the transfer.
  • Automatically via cookies and analytics tools when you use our website.

Where practicable, we will tell you why we are collecting your information, what we will do with it, and who we may share it with — as required by Rule 3 of the HIPC.

4. Why we collect your information

We collect and use your information to:

  • Dispense prescriptions safely and accurately
  • Provide pharmacist advice, vaccinations, and other clinical services
  • Process online orders and deliver products to you
  • Manage your customer or patient account
  • Verify your identity and prevent fraud
  • Communicate with you about your orders, prescriptions, and follow-up care
  • Comply with our legal obligations under the Medicines Act 1981, Misuse of Drugs Act 1975, Health Act 1956, and other relevant legislation
  • Improve our website, services, and customer experience
  • Send marketing communications (only with your consent)

5. Sharing and disclosure of information

We do not sell your personal or health information. We may share information only where permitted under the Privacy Act 2020 and the HIPC, including with:

  • Your healthcare providers (GP, specialist, hospital, midwife, or another pharmacy) where necessary for your care
  • Te Whatu Ora (Health New Zealand), the Ministry of Health, ACC, or PHARMAC where required
  • Payment processors, courier and delivery providers strictly to fulfil your order
  • IT and software providers hosting our systems under confidentiality obligations
  • Regulators and law enforcement where required by law or to prevent a serious threat to health or safety
  • Professional advisors such as auditors and lawyers, under confidentiality

Any third party we share information with is required to handle it in accordance with the Privacy Act 2020.

6. Storing your information and sending it overseas

Your information is stored on secure servers located in New Zealand and Australia. Some of our service providers (for example, cloud hosting or email platforms) may store data in other approved jurisdictions.

When personal information is sent outside New Zealand, we comply with Information Privacy Principle 12 by ensuring the receiving party is subject to comparable privacy safeguards, or by obtaining your authorisation.

We retain health information for at least 10 years after the date of the last consultation, as required by the Health (Retention of Health Information) Regulations 1996. Other personal information is kept only for as long as necessary for the purpose it was collected.

7. Keeping your information secure

We take reasonable steps to protect your information from loss, misuse, unauthorised access, modification, or disclosure. Our security measures include:

  • Encrypted (HTTPS/TLS) connections across our website
  • Secure, access-controlled databases
  • Multi-factor authentication for staff systems
  • Regular staff privacy and security training
  • Restricted physical access to records
  • Regular backups and incident response procedures

If a notifiable privacy breach occurs, we will notify the Office of the Privacy Commissioner and affected individuals as required by the Privacy Act 2020.

8. Your privacy rights

Under the Privacy Act 2020 and the HIPC, you have the right to:

  • Access the personal and health information we hold about you
  • Request a correction if information is inaccurate, incomplete, or out of date
  • Withdraw consent for marketing communications at any time
  • Make a complaint if you believe your privacy has been breached

To exercise these rights, please contact our Privacy Officer using the details in Section 12. We will respond within 20 working days of receiving your request.

If you are unhappy with our response, you may contact the Office of the Privacy Commissioner:

9. Cookies and website analytics

Our website uses cookies and similar technologies to:

  • Keep you signed in and remember your preferences
  • Analyse website traffic (for example, via Google Analytics)
  • Improve performance and user experience
  • Deliver relevant marketing where you have opted in

You can control cookies through your browser settings. Disabling cookies may affect some features of our website.

10. Marketing communications

If you have opted in, we may send you newsletters, health tips, special offers, or product updates by email or SMS. Every electronic message includes a clear way to unsubscribe, in line with the Unsolicited Electronic Messages Act 2007. You can also opt out at any time by contacting us.

11. Children’s privacy

Our online services are not directed at children under 18. We only collect health information about a minor where a parent, legal guardian, or caregiver provides it for the purpose of receiving pharmacy services. If you believe we have collected information about a minor without proper authority, please contact us.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top will always show the latest version. We encourage you to review this page periodically.

Frequently asked questions

Is my prescription information confidential at NZ Roids? Yes. All prescription and health information is treated as confidential and protected under the Health Information Privacy Code 2020. Only authorised pharmacy staff and your approved healthcare providers can access it.

Does NZ Roids share my health information with third parties? We only share your information where it is necessary for your care, required by law, or where you have given us authorisation. We never sell your personal or health information.

How can I access the information NZ Roids holds about me? You can request access to your information by emailing our Privacy Officer at privacy@nzroids.co.nz. We will respond within 20 working days.

Where is my data stored? Your information is stored on secure servers in New Zealand and Australia. Where data is sent overseas, we ensure equivalent privacy protections apply.

How long does NZ Roids keep my health records? We retain health information for at least 10 years after your last consultation, as required by New Zealand law.

Who do I contact if I think my privacy has been breached? Contact our Privacy Officer first. If you are not satisfied with our response, you can lodge a complaint with the Office of the Privacy Commissioner at www.privacy.org.nz or by calling 0800 803 909.