Privacy Policy 123OCD Psychology | Clinical Psychology Services
Last updated: 26 March 2026
This Privacy Policy explains how 123OCD Psychology (‘we’, ‘us’, or ‘our’) collects, uses, stores, and protects your personal information. We are committed to complying with the Privacy Act 2020 (New Zealand) and the Health Information Privacy Code 2020, and to upholding the highest standards of confidentiality expected in psychological practice.
By using this website or engaging with our services, you consent to the practices described in this policy.
1. Who We Are
Roslyn Hughes, registered psychologist, operates 123OCD Psychology in New Zealand. We are registered with the New Zealand Psychologists Board and bound by the Code of Ethics for Psychologists Working in Aotearoa New Zealand.
Contact details:
- Practice: 123OCD Psychology
- Address: Crawford Medical Centre, Picton Street, Howick, Auckland 2014, New Zealand
- Email: roz@123ocd.co.nz
- Phone: On Request
2. Information We Collect
2.1 Personal Information
When you contact us or use our services, we may collect:
- Full name and date of birth
- Contact information (phone number, email address, postal address)
- Emergency contact details
- General practitioner or referral source details
- Insurance or funding information (e.g. ACC claim number)
2.2 Health Information
As a psychology practice, we collect health information that is necessary to provide you with clinical care. This may include:
- Presenting concerns, mental health history, and diagnosis
- Session notes and clinical assessments
- Risk assessments and safety plans
- Correspondence with other health providers (with your consent)
- Medication details where clinically relevant
2.3 Website Usage Information
When you visit our website, we may automatically collect non-identifiable information such as your IP address, browser type, pages visited, and time spent on the site. This is used solely for improving website functionality and is not linked to your identity.
3. How We Use Your Information
We use your personal and health information to:
- Provide psychological assessment, therapy, and consultation services
- Communicate with you about appointments and treatment
- Process payments and manage ACC or insurance claims
- Coordinate care with other health professionals (with your consent)
- Meet our legal and professional obligations
- Improve the quality and safety of our services
We will not use your information for marketing purposes without your explicit consent.
4. Legal Basis for Processing
We collect and process your information under the following bases:
- To fulfil our contractual obligations in providing psychological services to you
- To comply with legal obligations under New Zealand health legislation
- With your informed consent, particularly for sharing information with third parties
- In the public interest or where required to prevent serious harm (see Section 6)
5. Disclosure of Your Information
5.1 With Your Consent
We may share your information with other health professionals (such as your GP, psychiatrist, or specialist) when clinically necessary and with your informed consent.
5.2 Without Your Consent (Limited Circumstances)
Under the Privacy Act 2020 and Health Information Privacy Code 2020, we may disclose information without consent in very limited circumstances, including:
- Where there is a serious and imminent threat to your life or safety, or to that of another person
- Where required by law (e.g. a court order or mandatory reporting obligation)
- For ACC claims processing as required by the Accident Compensation Act 2001
We will always seek to discuss such disclosures with you wherever it is safe and appropriate to do so.
5.3 Third-Party Service Providers
We may use trusted third-party providers to operate our practice (e.g. practice management software, secure email, or accounting services). These providers are required to maintain the confidentiality of your information and are prohibited from using it for any other purpose.
6. Storage and Security
Your information is stored securely in accordance with the Health Information Privacy Code 2020. We take reasonable steps to protect your personal and health information from loss, unauthorised access, use, modification, or disclosure, including:
- Encrypted digital storage and password-protected systems
- Secure physical storage for any paper records
- Staff training on privacy obligations
- Regular review of our security practices
While we take all reasonable precautions, no method of data transmission or storage is completely secure. If you have concerns about the security of your information, please contact us.
7. Retention of Records
We retain health records in accordance with the requirements of the Health (Retention of Health Information) Regulations 1996:
- Adult client records: retained for a minimum of 10 years from the date of last service
- Records relating to clients who were minors: retained until the client turns 26, or for 10 years from the last service, whichever is longer
After the applicable retention period, records are securely destroyed.
8. Your Privacy Rights
Under the Privacy Act 2020 and the Health Information Privacy Code 2020, you have the right to:
- Request access to your personal and health information held by us
- Request correction of any information you believe is inaccurate or incomplete
- Request that information not be used in certain ways (where legally permissible)
- Withdraw consent for specific uses of your information
9. Children and Young People
Where we work with clients under the age of 16, we collect information from parents or guardians as appropriate. We are mindful of young people’s developing right to privacy and will discuss confidentiality with both the young person and their caregivers at the outset of therapy.
10. Website Cookies and Third-Party Links
Our website may use cookies to improve your browsing experience. You may disable cookies through your browser settings, although this may affect certain website functionality.
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
11. Complaints
If you have concerns about how we have handled your personal or health information, please contact us in the first instance so we can address your concerns promptly.
If you are not satisfied with our response, you may contact:
- The Office of the Privacy Commissioner | www.privacy.org.nz | 0800 803 909
- The Health and Disability Commissioner | www.hdc.org.nz | 0800 11 22 33
- The New Zealand Psychologists Board | www.psychologistsboard.org.nz
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in legislation or our practices. The current version will always be available on our website. We encourage you to review this policy periodically.
This policy should be read alongside our Informed Consent and Client Information documents, which are provided at the commencement of services.
