Privacy Policy

The Clinical Plate — the private dietetic practice of Qaswara Affaf, New Zealand Registered Dietitian, Wellington — is the agency responsible for the information described here. Questions about privacy can be sent to qaswara@theclinicalplate.com.

Through this website:

• chevron_rightBooking requests — your name, email, phone number (if given), the session you selected, whether you want an in-person or online appointment, your preferred date and time, whether you have a referral or recent results, and anything you write in the “what would you like help with” field.
• chevron_rightEnquiries — your name, email, the topic you selected, and the content of your message.

During and after a consultation:

• chevron_rightHealth history, symptoms, medications and supplements, dietary intake, anthropometric measurements and relevant test results.
• chevron_rightClinical notes, the nutrition plans and resources prepared for you, and correspondence about your care.
• chevron_rightBilling records and receipts.

Some of this is health information, which the Health Information Privacy Code protects more strictly than ordinary personal information.

• chevron_rightTo arrange, confirm and deliver your appointments.
• chevron_rightTo assess your needs and provide safe, individualised nutrition care.
• chevron_rightTo keep the clinical records that a registered health professional is required to keep.
• chevron_rightTo invoice you and issue receipts.
• chevron_rightTo reply to your questions.

Your information is not used for marketing, sold, rented, or shared with advertisers. You will not be added to a mailing list from a booking or an enquiry.

Your information is disclosed only:

• chevron_rightTo other clinicians involved in your care — for example your GP or specialist — with your authorisation.
• chevron_rightTo service providers who help operate the practice (for example email, secure video and website hosting), who may only use it to provide that service.
• chevron_rightWhere disclosure is required or authorised by law, or is necessary to prevent a serious threat to someone's life or health.

Some service providers store data outside New Zealand. Where that is the case, providers are chosen who are subject to comparable privacy safeguards.

No credit or debit card details are entered on, processed by, or stored on this website. Payment is arranged separately by secure payment link or bank transfer once your appointment is confirmed. Only the fact and date of payment is recorded, for invoicing and receipting.

Health information is retained for at least ten years from the date of the last service provided, as required of health providers in New Zealand. Enquiries that do not result in an appointment are kept only as long as needed to respond, and are then deleted. Billing records are kept for the period required by tax law.

• chevron_rightRecords are held in access-controlled, password-protected systems.
• chevron_rightVideo consultations use a platform with encryption in transit.
• chevron_rightThis website is served over HTTPS, and form submissions are protected against cross-site request forgery.
• chevron_rightAccess is limited to what is necessary to deliver your care.

No system can be guaranteed completely secure. If a privacy breach occurs that is likely to cause serious harm, affected people and the Office of the Privacy Commissioner will be notified as required by the Privacy Act 2020.

Under the Privacy Act 2020 and the Health Information Privacy Code you may:

• chevron_rightAsk what information is held about you, and request a copy of it.
• chevron_rightAsk for information you believe is incorrect to be corrected, or to have your view recorded alongside it.
• chevron_rightWithdraw consent for a specific use or disclosure, noting that some records must be retained regardless.
• chevron_rightComplain if you believe your privacy has been breached.

Requests are responded to within 20 working days. Email qaswara@theclinicalplate.com. If you are not satisfied with the response, you may complain to the Office of the Privacy Commissioner at privacy.org.nz.

This website does not use advertising or tracking cookies, and does not build a profile of you across other sites. Only technical storage strictly necessary to serve pages and protect form submissions is used.

Fonts and icons are loaded from Google Fonts, which means your browser makes a request to Google’s servers when a page loads. Google may log the IP address of that request; it is not linked to any information the practice holds about you.

Where a consultation involves a child, information is provided by and shared with a parent or guardian. Young people aged 16 and over may consent to their own care and to how their information is handled.

This policy may be updated as the practice or the law changes. The date at the top of the page shows when it was last revised. Material changes will be highlighted on the booking page.