Last Updated: June 2026
Prime Patient (“we”, “us”, “our”) operates prime-patient.com and provides lead follow-up automation services to medical clinics in New Zealand. We are committed to protecting personal information in accordance with the New Zealand Privacy Act 2020.
This Privacy Policy explains how we collect, use, disclose, and protect information in two distinct contexts:
· As a business, when you visit our website, enquire about our services, or become a client of Prime Patient.
· As a service provider (agent), when we process patient lead data on behalf of our clinic clients, in accordance with Section 11 of the Privacy Act 2020. In this context, the clinic remains the agency responsible for that information, and Prime Patient processes it solely on the clinic’s instructions.
1. Information We Collect
The personal information we collect depends on the context in which it is collected:
Account Data
When you engage with Prime Patient directly as a client or prospective client, we collect business contact details such as your name, email address, and work phone number.
Service Data (Lead Data)
When delivering our automation services, we process personal information relating to our clients’ patients and leads, including names, contact details, and enquiry details (which may include information about procedures requested). This information is collected and processed on behalf of, and at the direction of, our clinic clients, who remain responsible for it under the Privacy Act 2020.
Usage Metadata
We collect operational data such as timestamps, response times, and system logs, used to monitor and report on the performance of the automation workflows we provide (for example, tracking response times against agreed targets).
2. How We Use Your Information
We use the collected information to:
● Deliver, test, and manage our lead follow-up automation services.
● Communicate with you regarding onboarding, system setup, and handover sessions.
● Respond to inquiries and provide technical support.
3. Storage and Security
We take all reasonable steps to ensure your personal information is stored securely. As an online business based in Auckland, your information is stored digitally using secure, industry-standard cloud-based services and CRM tools.
4. Disclosure of Information
We do not sell, rent, or trade your personal information. We only share information with trusted third-party software providers (such as calendar tools, CRMs, or email platforms) to the extent necessary to execute your automation workflows.
5. Privacy Officer
Prime Patient has appointed a Privacy Officer responsible for ensuring our compliance with the Privacy Act 2020. If you have any questions, concerns, or complaints about how we handle personal information, or wish to exercise privacy rights, please contact:
Privacy Officer
Email: kashmir@prime-patient.com
We will acknowledge your enquiry as soon as practicable and respond within the timeframes required under the Privacy Act 2020.
6. Notifiable Privacy Breaches
If a privacy breach occurs that involves your personal information and is likely to cause serious harm, we will:
· Assess the breach in accordance with the Privacy Act 2020.
· Notify the Office of the Privacy Commissioner and any affected individuals as soon as practicable, where required.
· Where the breach involves lead data processed on behalf of a clinic client, notify that clinic client promptly so they can meet their own reporting obligations as the agency responsible for that information.
If you believe your personal information has been involved in a privacy breach, please contact our Privacy Officer at kashmir@prime-patient.com.
7. Your Rights Under the NZ Privacy Act 2020
You retain full control over your data. You have the right to:
● Request access to the personal information we hold about you.
● Request the immediate correction of any inaccurate personal information.
To exercise these rights, please contact us via the support channels on our website.