1. Medi-Map NZ Limited (“we”) are committed to protecting and respecting your privacy and will comply at all times with relevant privacy laws including but not limited to:

New Zealand  the Privacy Act 2020;

1. the Health Information Privacy Code 2020 issued by the Office of the Privacy Commissioner;
2. to the extent applicable, any legislation from time to time in force in New Zealand affecting privacy, personal information (including health records and information) or the collection, handling, storage, processing, use or disclosure of data; and
3. any ancillary rules, binding guidelines, orders, directions, directives, codes of conduct, or other instruments made or issued by a government agency under an instrument identified in paragraphs (i) to (iii) above.

2 SCOPE OF POLICY

1. This policy (together with our terms and conditions as set out at medimap.co.nz and medimap.com.au  Terms and Conditions and conditions and any separate written agreements we require you enter into for use of any particular Software (as defined below) of ours (including without limitation any “Software As A Service Agreements”), constitute the legal agreement (“Licence Agreement“) between you and us that applies to your use of the following via any mobile telephone or other electronic device (“Device”):
1. MEDI-MAP mobile application software, the data supplied with it, and the associated media (“Medi-Map Mobile App”);
2. MEDI-MAP MY MEDS mobile application software, the data supplied with it, and the associated media (“Medi-Map My Meds”);
3. Medi-Map Web Service (accessible at https://medi-map.co.nz,https://medi-map.com.au) (“Medi-Map Web Service); and
4. Any of the services accessible through the Software (“Services”).

Medi-Map Mobile App, Medi-Map My Meds and Medi-Map Web Service are together referred to as the “Software”.

2. This policy sets out the basis on which any personal data we collect from you, or that you provide to us, through or in relation to the Software or the Services, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. It is important that you read this Privacy Policy carefully because anytime you use our Software or Services, you consent to the practices we describe in the Licence Agreement (including this Privacy Policy). If you do not agree to the practices described in the Licence Agreement, you should not use the Software or the Services.
3. By using the Software or any of the Services, you consent to us collecting and using technical information about the Devices and related software, hardware and peripherals for Services that are internet-based or wireless to improve our products and to provide any Services to you.
4. Certain Services will make use of location data sent from the Devices. You can turn off this functionality at any time by turning off the location services settings for the Software on the Device. If you use these Services, you consent to us and our affiliates’ and licensees’ transmission, collection, maintenance, processing and use of your location data and queries to provide and improve location-based products and services. You may withdraw this consent at any time by turning off the location services settings on your device.

3. INFORMATION WE MAY COLLECT FROM YOU

1. We may collect and process the following data about you:
1. Information you give us (Submitted information): You may give us information about you through registration of and use of the Software, or by corresponding with us (for example, by e-mail or chat). This includes information you provide when you download or register any Software, subscribe to or use any of our Software or Services, or link to any other healthcare providers or family members with regard to services associated with your healthcare, and when you report a problem with any Software or our Services. The information you give us may include your name, address, e-mail address and phone number, the Device’s phone number, age, username, password and other registration information, personal description and medicine information.
2. Information we collect about you and your device. Each time you use the Software we may automatically collect the following information:
1. technical information, including the type of mobile device you use, a unique device identifier (for example, your Device’s IMEI number, the MAC address of the Device’s wireless network interface, or the mobile phone number used
   by the Device), mobile network information, your mobile operating system, the type of mobile browser you use, time zone setting, (“Device Information”);
2. information stored on your Device, including login information, digital content, check ins related to your use of the Software, medicine information, medicine compliance information, repeat requests to pharmacy, your description of your feeling and language preference (“Content Information”);
3. details of your use of any of the Software including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access (“Log Information”); and/or
4. Location information. We may also use GPS technology or other location technology available through your Device to determine your current location. Some of our location-enabled Services require your personal data for the feature to work. If you wish to use those features, you will be asked to consent to your data being used for this purpose. You can withdraw your consent at any time by turning off the location-enabled services settings on your device but doing so may affect your ability to use some Services or features of the Software.
3. Information we receive from other sources (“Third Party Information”). We may receive information about you from publicly and commercially available sources (as permitted by law), which we may combine with other information we receive from or about you.
4. If you contact us, we may keep a record of that correspondence.
5. Unique application numbers: when you install or uninstall any Software containing a unique application number or when a Service searches for automatic updates, that number and information about your installation, for example, the type of operating system, may be sent to us.

4. COOKIES

1. We use cookies to distinguish you from other users of the Software. This helps us to provide you with a good experience when you use the Software or browse any of the sites and allows us to improve the Software and our sites.
2. Cookies are small files that are placed on your browser or device by the website or app you’re using or ad you’re viewing. Pixel tags (also called clear GIFs, web beacons, or pixels) are small blocks of code on a webpage or app that allow them to do things like read and place other cookies and transmit information to us or our partners. The resulting connection can include information such as a device’s IP address, the time a person viewed the pixel, an identifier associated with the browser or device and the type of browser being used. Local storage is a technology that allows a website or app to store and retrieve data on a person’s computer, mobile phone or other device. Some examples include device or HTML5 local storage and caching.
3. We use the following types of cookies:
1. Persistent cookies – used to recognise you when you return to our website. This assists with our security services, and enables us to personalise our content for you, greet you by name and remember your preferences (for example, your region) and provide personalised features such as start page, or deliver ads that are relevant to you.
2. Session cookies – used as an integral part of the identification process for our services. This is for security purposes to determine that you are who you say you are and to provide you with your confidential account information during a session. No personal information is kept in the cookie and the cookie is not written to your Device. When you log out of your session the cookie is no longer valid and is discarded when you close your browser.
3. Analytical/performance cookies – They allow us to recognise and count the number of visitors and to see how visitors move around our Software when they are using it. This helps us to improve the way the Software works, for example, by ensuring that users are finding what they are looking for easily.
4. Essential cookies – These are cookies that are required for the operation of our website. They include, for example, authentication cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services. For example, they help protect your account from being accessed by anyone other than you and let us know when several people have logged in from the same computer. With login approvals if someone logs into your account from a browser you’ve never used before, we may block them and ask for more information. They also help us implement login notifications, so you can be alerted when your account is accessed and disable any active sessions.
5. Functionality cookies – These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your region). For example, we may store information in a cookie that is placed on your browser or device so you will see the site in your preferred language.
6. Targeting cookies – These record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose but will never share any information which enables you to be identified.
4. You can block cookies if you wish by activating settings on your Device to refuse cookies.  However, if you block or refuse all cookies:
1. you may not be able to access all parts or features of the Software, or the Software may operate more slowly and require you to re-enter data previously entered on other occasions;
2. we still use some cookies if you don’t have an account or have logged out of your account. For example, if you have logged out of your account, we use cookies to help:
3. Identify and disable the accounts of spammers;
4. Recover your account if you ever lose access to it;
5. Provide extra security features like login notifications and login approvals;
6. Prevent people who are underage from signing up with a false birth date;
7. Identify public computers so that we can discourage people from using ‘Keep me logged in’ and putting their account at risk; and
8. Generate insights about the people who interact with our website, any services we provide, and the websites of our advertisers and partners; and
9. Third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These are likely to be analytical/performance cookies or targeting cookies.
5. Except for Essential cookies, all cookies we use will expire after they are no longer required for their original purpose.

5. USES MADE OF THE INFORMATION

1. We use information held about you in the following ways:
1. Submitted Information: To ensure the correct identifiers are used to identify your linked medicine information.
2. Device information: To identify use of the Software and storage of data.
3. Content Information: To ensure that your doctor and pharmacy or care organisation has up to date information on your medicine list and medicine use. This may include repeat of prescriptions and mood statements.
4. Log information: To ensure appropriate use of the Software.
5. Location information: For clarification of your location.
6. Third Party Information: For notifications on missed medicine events and non-compliance notifications.
7. Unique application numbers: To ensure the [UUID] of the device is linked to the correct patient medicine data in the Services.
2. We may associate any category of information with any other category of information and will treat the combined information as personal data in accordance with this policy for as long as it is combined.
3. We do not disclose information about identifiable individuals to advertisers.
4. You acknowledge and agree that:
1. we may derive or create data and information about the use of the Software and/or the Services by you and your authorised users (“Use Data”) and we may use the Use Data order to improve the Software and/or the Services; and
2. we may obtain and aggregate technical and other data about your use of the Software and/or the Services (excluding any personally identifiable data with respect to you or your authorised users) (“Aggregated Anonymous Data“), and we may use the Aggregated Anonymous Data to analyse, improve, support and operate the Software and/or the Services and otherwise for any business purpose, during and after the term of the Licence Agreement, including without limitation to generate industry benchmarks or best practices guidance, recommendations or similar reports for distribution to and consumption by you. For the avoidance of doubt, this clause 6.4 does not give us the right to identify you as the source of any Aggregated Anonymous Data.

6. DISCLOSURE OF YOUR INFORMATION

1. We may disclose your personal information to any member of our company as defined in the Companies Act 1993.
2. We may share your information with selected third parties including:
1. Business partners, suppliers and sub-contractors who we engage to perform functions on our behalf. They will have access to your personal information as necessary to perform their functions but may not use it for other purposes. They must also process the personal information in accordance with this Privacy Policy and as permitted by applicable data protection laws;
2. Other vendors in the health industry including but not limited to  Pharmacy Dispense software,  medical practitioner software, HNZ or MHO. We may provide them with resident demographic data and medication data.
3. We may disclose your personal information to third parties:
1. In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
2. If we are substantially acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
3. If we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation or request.
4. In order toenforce or apply the Licence Agreement and other agreements or to investigate potential breaches; or protect the rights, property or safety of us, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.  

7. WHERE WE STORE YOUR PERSONAL DATA

1. The data that we collect from you may not be transferred to, and stored at, a destination not New Zealand or Australia. It may be processed by staff operating within New Zealand and Australia who work for us or for one of our suppliers. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
2. All information you provide to us is stored on our secure servers.  Where we have given you (or where you have chosen) a password that enables you to access certain parts or features of the Software, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
3. Unfortunately, the transmission of information via the internet is not completely secure. Although we will use reasonable physical and technical measures to protect your personal data, we cannot guarantee the security of your data transmitted to via our Software – any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access, including shielded [VMs] and having the minimum number of administrators.
4. Certain Services may include social networking, chat room or forum features. Ensure when using these features that you do not submit any personal data that you do not want to be seen, collected, or used by other users.Medi-Map does not use any social media channels.

8. YOUR RIGHTS

1. You can always choose not to provide us with any information, or to disable cookies although this may affect your ability to access or use the Software and/or the Services or any particular features of them, and we may not be able to process transactions with you.

9. EUROPEAN UNION AND EUROPEAN ECONOMIC AREA RESIDENTS’ RIGHTS

1. In addition to the above-listed rights, the General Data Protection Regulation 2016/679 provides individuals within the European Union and the European Economic Area with enhanced rights in respect of their personal data. These rights may include, depending on the circumstances surrounding the processing of personal data:
1. the right to object to decisions based on profiling or automated decision making that produce legal or similarly significant effects on you;
2. the right to request restriction of processing of personal data or object to processing of personal data carried out pursuant to (i) a legitimate interest or (ii) performance of a task in the public interest (including processing for direct marketing purposes);
3. in certain circumstances, the right to data portability, which means that you can request that we provide certain personal data about you that we process in a machine-readable format; and
4. in certain circumstances, the right to erasure, which means that you can request deletion or removal of certain personal data we process about you.
2. Note that we may need to request additional information from you to validate a request relating to the exercise of any of the rights above.

10. ACCESS TO INFORMATION

1. You have the right to access information held about you. Your right of access can be exercised in accordance with that Act. If permitted by law, we may charge you a small fee for providing you with this ability. We may decline to process requests that are unreasonably repetitive, require disproportionate technical effort, jeopardize the privacy of others, are extremely impractical, or for which access is not otherwise required by local law. If you would like to make a request to access your information, please contact our customer service department at office@medimap.co.nz.

11. DATA RETENTION

1. We take reasonable steps to ensure that we retain information about you only for so long as is necessary for the purpose for which it was collected, or as required under any contract or by applicable law.

12. CHANGES TO PRIVACY POLICY

1. Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail or when you next start the Software. By using the Software and Services after such changes, you also confirm your agreement to the new practices identified in the update.  The current version of this Privacy Policy will always be available. You can check the “effective date” posted at the top to see when this Privacy Policy was last updated.

13. COMPLIANCE WITH OTHER APPLICABLE PRIVACY REQUIREMENTS

1. We will take all reasonable steps to ensure that we comply with all applicable legal requirements relating to collection and use of personal data or information.
2. We specifically confirm that the Software and Services are not targeted at children, that we will comply at all times with the requirements of the Children’s Online Privacy Protection Act and that we do not knowingly collect any information from anyone under 13 years of age.
3. Because we value your privacy, we have taken the necessary precautions to be in compliance with the California Online Privacy Protection Act.

14. THIRD PARTY WEBSITES AND SERVICES

1. The Software and the Services may link to third-party websites and services that are outside our control.  We are not responsible for the security or privacy of any information collected by websites or other services not operated by us. You should exercise caution and review the privacy statements applicable to any third-party websites and services you use.

15.CONTACT

1. Questions, comments, and requests regarding this privacy policy are welcomed and should be addressed to office@medimap.co.nz.