Skip to content

Privacy Policy

Effective 1 October 2023

Autonomy Health (NZ) Limited (Company number 8246473) and its related companies and affiliates (“we”, “us”, “our”) is committed to protecting and respecting your privacy.  Our contact details are set out at the end of this Privacy Policy. 

This Privacy Policy sets out the basis on which we will collect, store, use and share your Personal Information. In this Privacy Policy, “Personal Information” means information about an identifiable individual. For example, this type of information includes your name and contact details.



We may collect Personal Information from you when you communicate or interact with us such as when you:

  • make enquiries about us, our services or contact us for any other reason so that we can process, deal with, and respond to your queries or other issues including any complaints;
  • contact, register with, post to, like or follow any of our social media websites, pages, forums or blogs;
  • use or register an account with us on our website, patient management system or via our mobile app;
  • subscribe to any of our services;
  • register for and attend any of our events; or
  • subscribe to a newsletter or fill out a form or survey.

We will usually only collect Personal Information directly from you.

However, we may also collect Personal Information from third parties where it is unreasonable or impractical to collect Personal Information from you directly, where you have authorised collection from such third parties (for example, your existing registered General Practitioner, the Ministry of Health (such as in respect of your National Health Index (“NHI”) number), third party aggregators and applications described below and referring specialists (for example, cardiologists)), where those third parties are marketing service providers or data resellers whose data we use for marketing or research, or from publicly available resources.

Personal Information we collect about you

We may collect the following Personal Information about you:

  • Your name.
  • Your address, phone number, email address or other contact details.
  • Information about you that you give us by communicating with us by phone, by e-mail, via our website, patient management system or mobile app, via social media or otherwise.  It includes information you give us or that we obtain when you use our website, patient management system or mobile app, obtain or subscribe to our services, enquire about our services or contact us to report a problem (for example, your NHI number).
  • Information about your health that relate to causes of metabolic dysfunction, type 2 diabetes and cardiovascular disease.
  • Information about you from third party aggregators and applications such as MyDNA, Apple Health, GoogleFit, Fit3D, Dexcom, Libre and AiDEX.
  • Information about you from your use of our wearable devices including fitness trackers smart watches, smart phones, glucose monitors.

  • Information about you collected during doctor examinations or coaching sessions, from laboratory blood and other tests and results, from health and lifestyle questionnaires, from FIT3D scans, from vital signs monitors and from intelligent speech analysis monitors.

  • Information about events to which you are invited, and your Personal Information and preferences to the extent that this information is relevant to organising and managing those events (for example, your dietary requirements).

Log Data

Like many site operators, we collect information that your browser sends whenever you visit our website (“”). This Log Data may include information such as your computer's Internet Protocol address, browser type, browser version, the pages of our website that you visit, the time and date of your visit, the time spent on those pages and other statistics. In addition, we may use third party services such as Hubspot, Marketing Automation Platform tracking code and Google Analytics to collect, monitor and analyse this data.


A cookie is a small data file, which may include an anonymous unique identifier.  Cookies are sent to your browser from a website and stored on your computer's hard drive. Like many sites, we use cookies to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.


We collect and use your Personal Information to provide you with our services and to enable us to improve our service offering to you in the future.  Some of the things we use your Personal Information for in relation to this purpose are:

  • to contact or identify you;
  • to provide you with content that you have requested from us;
  • to set up and administer your account;
  • billing you (unless you pay by another agreed method) and collecting any debt owed to us by you;
  • to provide information to you about other our other services, which we consider may be of interest to you (but if you ask us not to provide you this information we will comply with your request);
  • evaluating and improving our customer service;
  • protecting and enforcing our rights as part of our relationship with you;
  • cyber security and information assurance purposes;
  • we may use your data on an aggregated, and non-identifiable, basis for the purposes of research and analysis or to share with third parties undertaking research any analysis (and we may receive fees, commissions or rebates for providing this non-identifiable data);
  • complying with applicable laws; and
  • for any other purposes authorised by you.

If you do not provide your Personal Information as we have requested, we may be unable to provide you with our services.

We and our agents may send you marketing messages, electronic or otherwise, about (among other things) our rewards, special offers and other promotions, and those of our agents or third parties which we consider may be of interest to you.  You may unsubscribe from receiving marketing messages from us and our agents at any time through the mobile app, getting in touch via our ‘Contact’ webpage, or using the unsubscribe facility located in the relevant marketing communication.  Once we receive your request, we will take you off our marketing list.


We may store your Personal Information physically or electronically ourselves, or with third parties that we contract to hold information for us in New Zealand and overseas.  We will act reasonably to ensure that your Personal Information is protected from unauthorised access, use, modification or disclosure.


We may use your Personal Information for the purposes set out above in this Privacy Policy.  As part of this use of your Personal Information, we may disclose your Personal Information to the following third parties: 

  • our related companies and affiliates;

  • the persons we use to provide our services to you including doctors, nurses, health coaches and members of our administration team;

  • your registered General Practitioner (in the event you have directed us to do so);

  • if you consent to take part in an Autonomy Client Group (a group of our members that meet virtually or in person to support each other’s health journey), we will provide your Personal Information to other members of the group that will identify you including name, photo and email address;

  • third party contractors that provide services to you on our behalf including cardiologists, endocrinologists, DNA profiling providers, data scientists and providers of laboratory testing services;

  • third party contractors and providers of goods and services, such as courier and delivery companies, marketing and promotion companies, training and training certification agencies and business support services like storage and handling of documents and data, and information technology service providers;

  • market research companies;

  • professional service firms providing services to us, such as legal or accountancy services; or

  • others where required by law.

We will not otherwise disclose your Personal Information unless we believe on reasonable grounds that you have provided your authorisation.  However, you should be aware that we may be required to disclose your Personal Information without your consent if such disclosure is required by law.

From time to time you may request that we do not disclose specific Personal Information relating to you with any other party.  If you wish to make such a request, please contact us via the contact details recorded in the final section of this Privacy Policy and we will send you an ‘opt-out’ form to be completed by you detailing the Personal Information you would like us to refrain from disclosing. 

Please note we may need to disclose certain Personal Information relating to you where such disclosure is essential to enabling us to provide our services to you.  Accordingly, we may be unable to provide you with our services in the event you ask us to refrain from disclosing such Personal Information in these circumstances.

Overseas Disclosures

If one or more of the third parties, related companies or affiliates referred to above is located overseas, disclosure may occur outside New Zealand to those parties.

When we disclose your personal information overseas, we will only do so in accordance with the Privacy Act 2020 and the Health Information Privacy Code 2020, and we will take all reasonable measures to ensure that your information is held, managed and accessed in accordance with appropriate standards for the handling of Personal Information.


You may request access to the Personal Information we hold about you, or request that we update or correct any Personal Information we hold about you by setting out your request in writing and sending it to us at

We will review your request as soon as reasonably practicable and in accordance with applicable laws.  If we are unable to give you access to the information you have requested, we will give you reasons for this decision in accordance with the requirements of the Privacy Act 2020 and the Health Information Privacy Code 2020 when we respond to your request.


We will only keep your Personal Information for as long as we require it for the purpose for which it was collected.  However, we may also be required to keep some of your Personal Information for specified periods of time, for example under certain laws. In addition, any aggregated, and non-identifiable, data used by us in connection with research and analysis may be retained by us even though you cease to use our services and/or your account with us is closed. 


In the event of a change of ownership of all or a portion of our business, your Personal Information may be transferred to the new owner so that the business and its affiliates or related companies can continue operations.


We may modify, amend, change or replace any of the terms, conditions or provisions of this Privacy Policy from time to time, and will notify you of any changes by posting the updated version on our website.  It is your responsibility to check this Privacy Policy periodically for changes.

Your continued use of this website, and our products and services, following notification of any changes to this Privacy Policy will be taken as acceptance of those changes.


If you have any questions, comments or concerns about our Privacy Policy, please contact us at 

You may also contact us in writing at Autonomy, Level 1, 139 Remuera Road, Remuera, Auckland 1050 or by phone at +64 9 520 8580.