Effective Date: 31 August 2026
CareFlex Healthcare Staffing Limited (“CareFlex”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal information you provide to us.
This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit or use **careflex.co.nz**, contact us, request healthcare staffing services, apply to join our healthcare professional network, or otherwise interact with CareFlex.
CareFlex is a New Zealand healthcare staffing company providing flexible workforce solutions to aged care, healthcare and community care facilities.
By using our website or providing personal information to us, you acknowledge that you have read and understood this Privacy Policy.
1. Our Privacy Responsibilities
CareFlex handles personal information in accordance with applicable New Zealand privacy laws, including the **Privacy Act 2020** and, where applicable, the **Health Information Privacy Code 2020**.
The Health Information Privacy Code contains specific requirements for organisations in the health sector concerning the collection, use, storage and disclosure of identifiable health information.
We aim to collect only information that is reasonably necessary for legitimate business, staffing, employment, compliance, administrative and service-related purposes.
2. Information We Collect
Depending on how you interact with CareFlex, we may collect information including:
Information you provide to us
This may include:
- Full name
- Email address
- Telephone or mobile number
- Address or location information
- Company or facility details
- Job title or professional role
- Employment and work history
- Qualifications and professional registrations
- Availability and preferred shifts
- CV or résumé information
- References and referee information
- Information submitted through staff registration or application forms
- Information provided when requesting healthcare staff
- Information provided when contacting us by email, telephone or through our website
- Any other information you voluntarily provide to us
Where necessary for staffing, recruitment, compliance or healthcare-related purposes, we may also collect information relating to professional suitability, qualifications, registrations, work eligibility, training, certifications, screening and other information required to assess or manage a healthcare professional’s engagement.
Information collected automatically
When you visit our website, certain technical information may be collected automatically, such as:
- IP address
- Browser type and version
- Device type
- Operating system
- Pages visited
- Date and time of visits
- Referring website or source
- Website interactions and general usage information
- Cookies and similar technologies
This information is generally used for website functionality, security, analytics, performance measurement and advertising measurement.
3. How We Collect Information
We may collect personal information:
- Directly from you when you complete a form or contact us
- When you request staffing services
- When you apply or register to work with CareFlex
- When you communicate with us by telephone, email or other channels
- From your employer or a healthcare facility where appropriate
- From referees or other authorised representatives
- From publicly available sources where legally permitted
- From service providers assisting us with recruitment, staffing, technology, communications or administration
- Automatically through cookies, analytics tools and website technologies
Where we collect personal information from another person or organisation rather than directly from you, we will handle that information in accordance with applicable privacy requirements.
New Zealand’s privacy framework generally requires organisations to be transparent about why personal information is collected, who may receive it and the individual’s rights to access and correct it.
4. How We Use Personal Information
We may use personal information for purposes including:
- Responding to enquiries
- Providing and managing healthcare staffing services
- Matching healthcare professionals with appropriate staffing opportunities
- Processing applications and registrations
- Verifying qualifications, experience and professional registrations
- Conducting screening and reference checks
- Communicating with healthcare professionals and healthcare facilities
- Managing shifts, staffing requests and workforce requirements
- Managing our business relationship with customers and workers
- Maintaining business and administrative records
- Processing payments where applicable
- Improving our website, services and user experience
- Monitoring website performance and security
- Preventing fraud, misuse or unauthorised access
- Complying with legal and regulatory obligations
- Resolving disputes and handling complaints
- Sending service-related communications
- Sending marketing communications where permitted by law
- Measuring the effectiveness of our advertising and marketing
- Creating reports and statistics using aggregated or de-identified information
We will not use personal information for purposes that are incompatible with the purpose for which it was collected unless permitted or required by law.
5. Healthcare and Sensitive Information
Because CareFlex operates in the healthcare staffing sector, some information provided to us may be sensitive or health-related information.
We recognise that health information requires particular care.
Where health information is collected, used or held by CareFlex in circumstances covered by the Health Information Privacy Code 2020, we will handle that information in accordance with the applicable requirements of the Code.
We will:
- Collect health information only where it is necessary for a lawful purpose connected with our functions or activities
- Take reasonable steps to explain why information is being collected and how it may be used
- Take reasonable steps to protect health information against loss, unauthorised access, use, modification or disclosure
- Limit access to authorised personnel and service providers who reasonably need the information
- Use and disclose health information only for appropriate purposes permitted by law
- Provide applicable rights to access and correction
- Retain information only for as long as reasonably necessary or as required by law
The Health Information Privacy Code specifically requires health agencies to consider the purpose of collection, transparency, security, access, correction, use and disclosure of health information.
6. Sharing and Disclosure of Information
We do not sell or rent your personal information.
We may disclose personal information where reasonably necessary to operate our business and provide our services, including to:
- Healthcare facilities and organisations where necessary for staffing purposes
- Prospective or current employers or clients where authorised and appropriate
- Referees and professional registration or verification bodies
- Recruitment, screening and verification providers
- IT, hosting, website and cloud service providers
- Email, communications and customer management providers
- Accounting, payment and administrative service providers
- Professional advisers such as lawyers, accountants or auditors
- Government agencies, regulators or law enforcement authorities where required or permitted by law
- Other parties where you have authorised the disclosure or where disclosure is otherwise permitted by applicable law
Where we use third-party service providers to process personal information on our behalf, we take reasonable steps to ensure that appropriate privacy and security safeguards are in place.
Health information is subject to additional restrictions under the Health Information Privacy Code. Identifiable health information will not be disclosed except where authorised or otherwise permitted by applicable law.
7. Google Ads, Analytics and Advertising Technologies
We may use Google and other advertising or analytics technologies to understand website usage, measure advertising performance and improve our marketing.
These technologies may include:
- Google Analytics
- Google Ads conversion tracking
- Google Tag
- Google advertising cookies or similar technologies
- Other analytics, conversion measurement or advertising technologies
These services may collect information such as browser information, device information, IP address, website interactions, pages visited and advertising-related events.
Where applicable, this information may be used to:
- Measure conversions generated by our advertising
- Understand how visitors interact with our website
- Improve our advertising campaigns
- Measure advertising effectiveness
- Create audiences or deliver advertising in accordance with applicable Google policies and privacy requirements
CareFlex does not intentionally send personally identifiable information, such as names, email addresses, telephone numbers or other directly identifying information, to Google through advertising tags unless this is specifically permitted, appropriately configured and legally compliant.
Google’s advertising policies prohibit advertisers from sharing personally identifiable information with Google through remarketing or conversion-tracking mechanisms in ways that violate its policies.
Where Google Ads features involve customer data or enhanced conversions, CareFlex will use customer information only in accordance with applicable Google Ads policies and applicable privacy laws.
8. Cookies
Our website may use cookies and similar technologies.
Cookies are small files stored on your device that can help websites remember information about your visit.
We may use cookies for:
- Essential website functionality
- Security
- Website analytics
- Performance monitoring
- Understanding website usage
- Advertising measurement
- Conversion tracking
- Improving website functionality and user experience
You can usually control or disable cookies through your browser settings.
Disabling certain cookies may affect the functionality or performance of parts of our website.
Where legally required, we will seek appropriate consent before using non-essential cookies or similar technologies.
9. Marketing Communications
If you provide your contact details, we may contact you regarding:
- Services you have requested
- Staffing opportunities
- Recruitment or employment-related matters
- Updates relating to our services
- Other information relevant to your relationship with CareFlex
Where required by law, we will obtain your consent before sending electronic marketing communications.
You may unsubscribe from marketing communications at any time by using the unsubscribe facility provided in the communication or by contacting us.
Unsubscribing from marketing communications will not necessarily stop essential service, transactional, administrative or recruitment-related communications.
10. Data Security
We take reasonable steps to protect personal information against:
- Loss
- Misuse
- Unauthorised access
- Unauthorised disclosure
- Unauthorised alteration
- Destruction
Security measures may include access controls, authentication procedures, secure hosting, encryption where appropriate, restricted staff access and other technical and organisational safeguards.
However, no method of electronic transmission or storage can be guaranteed to be completely secure.
Google Ads requires appropriate security measures when personal information is collected, and certain categories of sensitive information must be transmitted using secure SSL/HTTPS connections.
You should therefore avoid sending unnecessary sensitive information through ordinary website forms or unsecured communications.
11. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:
- Providing services
- Managing staffing relationships
- Recruitment and workforce administration
- Meeting legal and regulatory requirements
- Resolving disputes
- Maintaining appropriate business records
- Protecting our legitimate business interests
When personal information is no longer required, we will take reasonable steps to securely delete, destroy or de-identify it, subject to applicable legal, regulatory and contractual retention requirements.
12. Overseas Disclosure and Service Providers
Some third-party technology, hosting, communications, analytics or business service providers we use may store or process information outside New Zealand.
Where personal information is disclosed or transferred overseas, CareFlex will take reasonable steps to ensure the disclosure is handled in accordance with applicable New Zealand privacy requirements.
We may also use international service providers where appropriate safeguards or lawful grounds for the transfer apply.
13. Accessing Your Personal Information
You may request access to personal information we hold about you, subject to applicable legal exceptions.
If you would like to request access to your information, please contact us using the details below.
We will take reasonable steps to verify your identity before providing access to personal information.
14. Correcting Your Personal Information
You may request that personal information we hold about you be corrected if you believe it is inaccurate, incomplete or out of date.
If you believe information held by us is incorrect, please contact us and identify the information you would like corrected.
We will consider your request and take reasonable steps to correct information where appropriate.
The Privacy Act 2020 provides individuals with rights relating to access to and correction of personal information.
15. Privacy Complaints
If you believe CareFlex has mishandled your personal information or has not complied with this Privacy Policy, please contact us first so that we can investigate and attempt to resolve your concern.
Please provide sufficient information for us to understand the issue, including the nature of your concern and any relevant details.
You also have the right to contact the **Office of the Privacy Commissioner** if you have concerns about how your personal information has been handled.
16. Children’s Privacy
Our website and services are not specifically directed towards children.
We do not knowingly collect personal information from children except where it is lawful and necessary for a legitimate purpose and appropriate safeguards apply.
If you believe a child has provided personal information to us in circumstances where it should not have been collected, please contact us.
17. Third-Party Websites
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices, content or security of third-party websites.
We recommend reviewing the privacy policy of any third-party website before providing personal information.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes to our services
- Changes to technology
- Changes to our data practices
- Changes to applicable laws or regulations
- Changes to advertising or analytics services
The updated version will be published on this page with a revised effective date.
We encourage you to review this Privacy Policy periodically.
19. Contact Us
If you have questions about this Privacy Policy, want to request access to or correction of your information, or wish to make a privacy complaint, please contact:
CareFlex Healthcare Staffing Limited
Website: https://www.careflex.co.nz/
Email: info@careflex.co.nz
Phone: 022 016 2556
Location: Christchurch,
New Zealand
For privacy-related enquiries, please include “Privacy Request” or “Privacy Complaint” in the subject line of your email where appropriate.
