Legal
Privacy policy
This policy explains how Hey32 collects, uses, stores and shares personal information. Hey32 is the trading name of Orthodontic Technologies Limited, a New Zealand company based in Auckland. We are subject to the New Zealand Privacy Act 2020, and where we provide services to practices in Australia and Canada we also work within the Privacy Act 1988 (Australia), PIPEDA and applicable provincial law (Canada), as set out in each practice's services agreement.
Two kinds of information
We handle information in two very different roles.
- As a business, on hey32.com and in our own dealings with orthodontic practices. This policy covers that directly.
- As an agent or service provider for client practices, when the Hey32 platform runs a practice's website, patient portal, forms, agreements, payment plans and messaging. In that role the practice is the agency responsible for its patients' information; Hey32 processes it on the practice's instructions under the services agreement. Patients should contact their practice about their own information; the practice can call on us to help.
What we collect on hey32.com
- Information you give us in the get-started, onboarding and agreement forms: your name, role, practice name and locations, email address, phone number, market, and the details needed to prepare a launch plan or services agreement, including a drawn signature where you sign digitally.
- Email you send to hey@hey32.com or hello@hey32.com.
- Technical information collected automatically when you visit: pages viewed, approximate location from your IP address, device and browser type, and referring page. If web analytics are enabled on the site, this is collected through Google Analytics with IP anonymisation.
How we use it
- To reply to you, prepare a launch plan or proposal, and provide the services you ask for.
- To prepare, send and store a signed services agreement, including a sealed PDF record with an integrity hash, for as long as the agreement and our legal obligations require.
- To run, secure and improve hey32.com and the Hey32 platform.
- To send you information about Hey32 that you have asked for or that relates to a service you use. You can opt out of marketing email at any time by replying or using the link in the email.
We do not sell personal information, and we do not share it with third parties for their own marketing.
Who we share it with
Service providers who help us run the business, each bound to use information only to provide their service to us: website hosting and content delivery, transactional email delivery, cloud storage and databases, payment processing for our own invoices, and professional advisers. Some of these providers store data outside New Zealand, including in Australia and the United States, and we choose providers that apply protections comparable to the Privacy Act 2020. Client practices' patient data is stored in the region set out in their services agreement (Australasian infrastructure for New Zealand and Australian practices, infrastructure in Canada for Canadian practices).
We may also disclose information where the law requires it, or to protect the rights, property or safety of Hey32, our clients or others.
How long we keep it
Enquiry information is kept while we are in contact with you and for a reasonable period after, then deleted. Signed agreements and related records are kept for the life of the agreement plus seven years to meet New Zealand tax and company record-keeping obligations. Analytics data is retained according to the analytics provider's settings, which we keep at the shortest practical period.
Security
Hey32 uses encrypted connections (HTTPS) everywhere, access controls and audit logging on the platform, tamper-evident sealing of signed agreements, and reputable infrastructure providers. No system is perfectly secure; if we become aware of a privacy breach that is likely to cause serious harm, we will notify affected people and the Office of the Privacy Commissioner as the Privacy Act 2020 requires.
Cookies
hey32.com uses only the cookies needed for the site to work and, if enabled, analytics cookies from Google Analytics to understand how the site is used. We do not use advertising cookies on hey32.com. You can block cookies in your browser without losing access to the site.
Your rights
You can ask us for a copy of the personal information we hold about you and ask us to correct it. Email hey@hey32.com and we will respond within 20 working days as the Privacy Act 2020 requires. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz. Practices in Australia and Canada, and their patients, have equivalent rights under their own law, and the services agreement sets out how we support them.
Changes and contact
We will update this policy as the business and the law change, and note the date at the top. Questions go to hey@hey32.com, or by post to Orthodontic Technologies Limited, Auckland, New Zealand.