Legal

Data requests

Last updated 15 October 2026View source and history
On this page · 6 sections

Under the New Zealand Privacy Act 2020, the Health Information Privacy Code 2020 and the Australian Privacy Act 1988, you have the right to request access to the personal information held about you, or to request that it be deleted. We will respond to New Zealand requests within 20 working days, and to Australian requests within 30 days.

To submit a request, copy the relevant template below, fill in your details, and email it to privacy@addison.nz.

If You Are a Client of a Practice Using Addison

Your practitioner or practice is the agency responsible for your records, and Addison holds them on their behalf. Requests to access, correct or delete your client records should go to your practitioner or practice directly, as they hold the record and are the ones able to act on it.

If you send a request to us instead, we will not act on it ourselves. We will refer it to the relevant practice and let you know we have done so. Use the templates below only for information Addison holds about you in its own right, such as an enquiry you sent us or a newsletter subscription.

Request Access to Your Data

Use this template to request a copy of the personal information Addison holds about you.

Subject: Data Access Request

To the Addison Privacy Team,

I am writing to request access to the personal information you hold about me under the [New Zealand Privacy Act 2020 / Australian Privacy Act 1988: delete as applicable].

My details:
  Full name:
  Email address associated with my account:
  Account type (practitioner / client):

Please provide a copy of all personal information held about me, including any booking records, contact details and account information.

If you require any further information to verify my identity or process this request, please contact me at the email address above.

Thank you.

Export Your Practice Data

If you are a practitioner, you can request a full export of the practice data held in your Addison account at any time, not only when you are closing it. Exports are currently prepared manually by our team, so allow a few working days.

Export before you delete. Appointment and session history forms part of the health record you are required to retain, generally for 10 years from the date of the most recent service under the Health (Retention of Health Information) Regulations 1996. Deletion in Addison is permanent, and our retention periods are shorter than your professional obligation. If you are closing your account, request your export before the 90-day deletion window ends. See How long we keep information for the full detail.

Subject: Practice Data Export Request

To the Addison Privacy Team,

I am requesting an export of the practice data held in my Addison account.

My details:
  Full name:
  Practice / organisation name:
  Email address associated with my account:

Please include:
  Client records (names, contact details and status)
  Appointment and session history
  Allocation and funding records

Reason for request (optional, e.g. account closure, record retention, migration):

I understand the export will be provided in a machine-readable format and that I am responsible for storing it securely once I receive it.

Thank you.

Request Deletion of Your Data

Use this template to request that we delete the personal information we hold about you.

Subject: Data Deletion Request

To the Addison Privacy Team,

I am writing to request the deletion of the personal information you hold about me under the [New Zealand Privacy Act 2020 / Australian Privacy Act 1988: delete as applicable].

My details:
  Full name:
  Email address associated with my account:
  Account type (practitioner / client):

I request that you permanently delete all personal information held about me, including any booking records, contact details and account information.

I understand that deletion may result in the closure of my account and that some information may be retained where required by law (for example, financial records).

If you require any further information to verify my identity or process this request, please contact me at the email address above.

Thank you.

What Happens Next

  • We will acknowledge your request within 2 business days.
  • We will respond in full within 20 working days (New Zealand) or 30 days (Australia) of receiving your request.
  • We may ask you to verify your identity before we process your request.
  • If we are unable to fulfil your request, we will explain why.

Questions

If you have any questions about your privacy rights or how we handle your data, please review our Privacy Policy or contact us at privacy@addison.nz.