Privacy & data security

VitalLine Infusions is a paramedic-led mobile IV therapy service operating across the Waikato region of Aotearoa New Zealand. We are the agency responsible for the personal and health information you give us through this website, our booking form, and during consultation.

• Contact details - your name, email, phone number and the address where the infusion will be administered.
• Health screening answers - the medical questions answered as part of your booking (medications, conditions, allergies, pregnancy status, recent symptoms). These are handled differently from everything else: they are never stored in our database (see "How we protect it" below).
• Booking metadata - the infusion you requested, the time slot, payment status, and any notes you or our clinicians add.
• Technical logs - minimal request logs (IP, URL, status code) used to operate the service. Personal and health fields are redacted from these logs.

• Clinically assess whether the infusion you have requested is safe and appropriate.
• Confirm the booking, contact you about the appointment, and process payment.
• Keep an accurate clinical record of what was administered, by whom, and when - as required of registered health practitioners.
• Comply with our obligations under the HPCAA 2003, Medicines Act 1981, and the Code of Health and Disability Services Consumers' Rights.

We do not sell your information or share it with anyone except as set out below. Our analytics and advertising measurement tools (see "Cookies & analytics") receive only technical usage data about site visits - never your name, contact details, or screening answers.

• Encrypted in transit. All traffic between your browser and our servers is protected by TLS (HTTPS). The connection between our servers and the database also uses TLS.
• Screening answers are never stored in our database. When you submit a booking, your medical screening is rendered into a password-encrypted PDF (AES‑256) and delivered directly to the reviewing clinician's secure inbox. Only the fact that it was delivered - a timestamp - is kept with your booking record. A read of the raw database cannot expose your medical answers, because they are not in it.
• Access controls. Only registered VitalLine Infusions clinicians can view bookings, behind a password-protected admin panel with bcrypt-hashed credentials, short-lived sessions, same-origin enforcement, and brute-force rate limiting.
• Payments. Card details are handled directly by Stripe (PCI-DSS Level 1 certified). We never see or store full card numbers.
• Backups. The database is backed up on a regular schedule by our hosting provider, with provider-managed encryption. Because screening answers are never in the database, they are never in a backup either.
• Logging. Application logs are scrubbed of names, emails, phone numbers, addresses, and screening content before they are written.

We disclose information only to:

• The registered VitalLine Infusions paramedic attending your appointment.
• Stripe - to process card payments (their privacy policy: stripe.com/nz/privacy).
• Your nominated GP or specialist, but only with your explicit consent or where a clinical safety concern requires us to refer you on.
• Regulatory or law enforcement bodies, but only where lawfully required (for example, a subpoena or a request under the Health Information Privacy Code).

Health information collected as part of a clinical record is retained for at least 10 years from the date of your last appointment, in line with the Health (Retention of Health Information) Regulations 1996. Booking and payment records are kept for 7 years to meet tax and consumer-law obligations. Once these periods expire, records are securely destroyed.

Under the Privacy Act 2020 and HIPC 2020 you may:

• Request a copy of the personal and health information we hold about you.
• Ask us to correct anything that is wrong.
• Ask us to delete information that we are no longer required to keep (we will explain if a clinical-record retention period applies).
• Withdraw consent for non-essential uses at any time.
• Make a complaint to the Office of the Privacy Commissioner if you believe we have mishandled your information.

Our website sets a session cookie only to keep clinicians signed in to the admin panel - signing in is the only time we set a cookie of our own.

The public site also uses two third-party measurement tools, which set their own cookies or identifiers:

• Google Analytics 4 - helps us understand how visitors find and use the site (pages viewed, device type, approximate region).
• Meta (Facebook) Pixel - measures whether our advertising reaches the right people. Private booking-status pages and the admin panel are excluded from Meta tracking.

These tools receive technical usage data only - never your name, contact details, or health screening answers. You can block or delete cookies in your browser settings; the site works without them.

For any privacy question or request, email admin@vitallineinfusions.co.nz with the subject line "Privacy request". We aim to respond within 5 working days.