As part of a global organisation which manufactures, markets and distributes a range of quality healthcare products throughout the world, Fisher & Paykel Healthcare Corporation Limited and each of its subsidiaries (“F&P Healthcare”, “we”, “our” or “us”) recognise the importance of the personal information you trust us with.
Care drives our commitment to privacy. We endeavour to provide transparency and choice in relation to the collection and processing of personal information. We recognise that we have obligations of care for our end-users, customers, employees, shareholders, research participants and job seekers who seek to join our company. We are committed that the approach we take to personal information reflects and upholds our values.
We may update this statement from time to time so please check our online Global Privacy Statement for the most recent version. This statement is regularly reviewed to ensure it reflects our current practises.
Translations may be provided as a courtesy. If discrepancies exist, the English version will prevail.
This Global Privacy Statement outlines how and why we collect, use, share and protect personal information. It applies to all interactions you may have with us and our products and services.
This statement reflects our group business activities involving personal information, therefore only parts of this policy may apply to the personal information we collect from you, or apply to a lesser extent. This depends on which country you interact with us in and local legal requirements. Please contact us if you have any questions and would like to learn more. More specific information about how we handle your personal information and impacts to your privacy may also be provided in the applicable terms and conditions, disclosures and privacy notices you are provided with when you interact with us.
We need to collect and process a range of information in the course of our business. Common categories of information, and examples of specific personal information that we collect, include:
Fisher & Paykel Healthcare Limited
15 Maurice Paykel Place
East Tamaki, Auckland
Fisher & Paykel Healthcare
17400 Laguna Canyon Road, #300
Toll-free phone (US): 877-541-0483
Fisher & Paykel Healthcare
10 Avenue du Québec
Fisher & Paykel Healthcare
Fisher & Paykel Healthcare
Unit 16, Cordwallis Park
Berkshire SL6 7BU
Fisher & Paykel Healthcare
19-31 King Street, Nunawading, Victoria
PO Box 159, Mitcham, Victoria
This section generally applies to End-users and Customers.
Our products fall into two main categories: hospital devices and homecare devices. Hospital devices are generally multi-user devices that do not collect any identifiable information. These devices collect anonymised operational data only. Homecare devices generally relate to single-user owned medical devices that can be used in the personal home and may collect End-user health information which is stored on the device. Some of our homecare devices may support therapy monitoring. In addition to our devices, we may also provide complementary mobile applications to support your therapy and device use.
Our products are provided to End-users by Healthcare Providers, homecare providers or sleep laboratory (collectively known as “Healthcare Providers”).
2.1 What we collect
Hospital and Homecare devices. Our devices may log operating data such as End-user temperatures, air flows and device alarms. Operating data is not collected by, or shared with, us. Operating data is usually only recorded on the device unless you choose share it (e.g. via Bluetooth or USB or you connect your homecare device to InfoSmart Web™). Performance and diagnostic device information may be collected to support effective device monitoring and support, including performance metrics, usage, sensor measurements, firmware update status. This may be collected and used by your Healthcare Provider to support administration of the device. Limited performance and diagnostic information may also be shared with us to support these activities and product improvement (e.g. firmware updates). Information shared with us is anonymised and managed securely. Our devices have varying capabilities and options. You should refer to your device manual and guides for more specific information.
Hospital devices. We may collect anonymised health information relating to our hospital devices for diagnostic purposes only to support the provision of medical therapies and to support device and product improvements e.g. firmware updates. The information collected by our hospital devices is only kept for a limited period before being automatically deleted on each device. This is controlled by your Healthcare Provider.
Homecare devices We may collect your personal information gathered from your use of a monitored homecare devices to ensure the efficacy of your device and support the therapy treatment you requested from your Healthcare Provider. This is controlled by your Healthcare Provider. We may collect and process information for the purpose of providing your Healthcare Provider with the InfoSmart Web™ platform, providing you with our mobile phone applications, and any other relevant information or services.
Where applicable, your Healthcare Provider will collect your consent or provide you with a privacy notice regarding your use of our devices. If you are an End-user and have concerns regarding your privacy, you should consult your Healthcare Provider in the first instance as to how and why your personal information is being processed.
2.3 How we collect and use it
Hospital devices.Information may be generated and collected by our hospital devices for performance and diagnostic purposes. The anonymised information collected by hospital devices is automatically deleted within a short period of time, typically within 2-3 days. Depending on the hospital device you use, information from the hospital device may be shared via Bluetooth, a secure USB device (the process is password protected) or internet connectivity. Therapy information may be collected by Healthcare Providers to support your therapy. Diagnostic performance data generated by the hospital device may be used by Healthcare Providers for medical device administration and management.
Homecare devices. End-user information from monitored homecare devices is collected by the homecare device and through your interactions with your Healthcare Provider, which they may record through InfoSmart Web™. Depending on which homecare device you use, information from your homecare device may be shared via Bluetooth, a secure USB device (the process is password protected) or internet connectivity. Your information is stored and managed by F&P Healthcare and may be securely shared with your Healthcare Provider to access and use. Diagnostic performance data generated by the homecare device may be used by Healthcare Providers for medical device administration and management.
Hospital and Homecare devices. Some of our devices may be able to record performance and diagnostic data generated during their use. This data may be collected by, or shared with, F&P Healthcare to (1) further support your Healthcare Provider’s administrative purposes or (2) support our product and service improvement and support. Performance and diagnostic data that we collect for these purposes is de-identified according to our policies to support privacy by design.
2.4 What we share
Hospital devices. The information recorded on our hospital devices is used and shared by Customers to effectively treat End-users. Healthcare Providers may provide details of hospital devices and their diagnostic information to us alongside identifiable personal information for post market monitoring, product support and complaint information. For more information on how we collect post market monitoring information, please see the Customer Care section of this statement.
Homecare devices. If you are an End-user using one of our monitored homecare devices, we will collect, process and manage your personal information as instructed and authorised by your Healthcare Provider. In some cases, we may also share information with your insurers, if required by your insurer to enable payments to be made for the use of your device and/or authorised by you. All insurer authorisation requests are vetted and follow an identification process before an insurer of a Healthcare Provider is approved through InfoSmart Web™.
We do not sell your personal information to any third parties.
This section generally applies to End-users and Customers.
3.1 What we collect
InfoSmart WebTM is an online platform that allows authorised Healthcare Providers to access and view their End-users’ therapy information related to their use of our monitored healthcare devices. It is available in selected countries only.
If you are a Healthcare Provider registering to use the InfoSmart WebTM platform, we will collect your contact and login information in order to create an account. If you are an End-user, we will collect and process your personal information on behalf of your authorised Healthcare Provider(s) to create a End-user record. Your Healthcare Provider controls what End-user personal information is collected and used. This information may include name and contact information, national health identifiers, device information, medical therapy progress, medical/health monitoring, therapy history and lifestyle information.
3.2 Why we need to collect it
We collect Healthcare Provider and End-user personal information to provide InfoSmart WebTM services. This includes administering accounts and supporting therapy use and analysis to support Healthcare Providers to provide End-users with requested healthcare services.
3.3 How we collect and use it
Information collected and stored in InfoSmart WebTM services may be collected from our devices, information you provide to your Healthcare Provider, and/or your interactions with one of our apps. Please refer to the information provided with your device, such as the product manual, for what information may be used to support InfoSmart WebTM services and how information is collected and shared with the platform.
Personal information may be kept for as long as necessary for your Healthcare Provider to provide the services you require, and for us to comply with our legal and regulatory obligations. Healthcare Providers control how long End-user records may be stored as part of their Customer account. We will store and retain personal information in accordance with the Terms and Conditions agreed with Healthcare Providers (as Customers) when requesting InfoSmart WebTM services. Customer accounts and associated records are deleted once accounts become inactive. This depends on your country location and agreement with your Healthcare Provider. Records may be retained for up to five (5) or seven (7) years after account inactivity, or as otherwise requested by your Healthcare Providers or permitted by local law.
Depending on your country of residence as an End-user, your personal information will be held in secure servers according to applicable laws and requirements including, but not limited to, New Zealand, Australia, France, the Netherlands, Japan, China (for Chinese residents), and Russia (for Russian residents). We endeavour to only retain your information for as long as necessary to fulfil the purposes for which the information was collected.
3.4 What we share
If you are an End-user, we may share your personal information with your authorised Healthcare Provider(s) as part of the healthcare services you have requested from them. In some cases, we may also share information with your insurer, as required by your insurer to enable payments to be made for the use of your device. All insurer authorisation requests are vetted and an identification process is followed before an insurer of a Healthcare Provider is approved through the InfoSmart WebTM. We do not sell your personal information to any third parties.
We may also share your personal information within our group companies for InfoSmart WebTM service provisioning and support, Customer support, and to enable effective management and efficacy of our monitored homecare devices and therapies in order to provide you with the products and services you requested.
We provide training and education services and resources for our Customers to help them, and Customer Staff, feel more comfortable using our devices and to help ensure devices are correctly set up for their intended use. To provide you with relevant learning and educational services and resources requested by you or your employer, we need to collect certain personal information about you to register an account. We may need to record your employer, so we can provide you applicable services, material and resources that are relevant to your place of work or your role.
Device support and professional education.For ongoing training and education support provided for our devices, or to support other professional certifications, we usually retain information relating to your training or education as a Customer Staff for two (2) years after your training account becomes inactive. For records necessary to support Customer obligations and records, records may be retained as part of our Customer records, and for as long as the Customer account remains active.
We may share your personal information within our group companies for training and education service provisioning and support in order to provide you with the products and services you requested. In some circumstances or locations, we may share information with service providers who help provide these services.
To provide customer care services, we may collect Customer information such as Customer name and account and applicable location. If you contact Customer Care on behalf of your employer as Customer Staff, we may request information about your name, role, contact information and reason(s) for contacting us.
For support relating to device use and incidents, we may also collect End-user information including age, medical or health conditions before and after incident, pathology, specialist reports and images, video and audio relating to the applicable product, End-user or Customer and the reported incident. We may also collect information you share about your experience with our products publicly online or in other media.
We do not require or collect identifiable End-user personal information unless we otherwise advise you and request this information. If identifiable information is shared and received by us (such as images or videos), we expect Customers have obtained relevant End-user authorisation and consent. Where possible, we endeavour to de-identify unnecessary and sensitive information shared with us. However, please note, we may have obligations that require us to keep all information received in its original form.
Generally, we collect personal information to identify, investigate and/or report product incidents to relevant authorities and comply with our regulatory and legal obligations. We may also use personal information to contact you regarding complaints or queries you have submitted us. We will retain your information for as long as necessary to answer your queries and to comply with applicable regulatory or legal obligations. This may vary according to the nature of the query or issue.
If you participate in any of our surveys or provide us any feedback, we may use information you choose to share for product development, product improvement and Customer support. The specific information about information collected and used from surveys or feedback we may request is provided to you when you engage with us. If you provide personally identifiable information or contact information, we may use your information to contact you for more information and to meet our legal or regulatory obligations.
We may share your personal information internally to manage feedback, complaints and inquiries you may have. We may share information with other group companies for support, to manage product investigations, for reporting and support to manage our compliance obligations. We do not sell your personal information to any third parties.
We host and sponsor educational events throughout the year. These include in-person conferences and education events around the globe. If you register for these events, we may collect your name, email address and contact information to provide access, catering and updates about the event. If catering is provided, we also ask for your relevant dietary requirements or special assistance needs to cater the event which may infer additional sensitive information about you.
For some educational events which are eligible for continuing professional education (CPE) credit, we may collect your necessary industry or professional membership details to administer this. Please refer to section 4. Training and education for more information.
If we attend an event or conference provided by a third-party, we may receive your name, role, organisation and contact information as an attendee if you have authorised the third-party to share it with us. We may also receive your industry or professional membership details. Otherwise, we may request this from you during the event. During or after the event or conference, we may use this information for your feedback about the event you participated in, to provide additional information requested or ask if you are interested in learning more from us.
We need to collect your personal information to register your interest and attendance in our events or conferences, provide relevant information about the event, and provide applicable catering or special assistance requests. If you choose, we may provide updates on further information on upcoming events you may find relevant.
We may collect your information to request your feedback about our event, products or services or to provide the opportunity to receive educational and marketing information that may be of interest to you.
We may collect your event registration information through our representatives or your Clinical Educators, our corporate website or other online events portals. We may use trusted third-party tools to facilitate this. In some cases, we may receive your information from third-party events providers who you have authorised to share your information with us.
We endeavour to store registration and event information for a reasonable period of time only to host the event. We may retain your information for a short period after an event to support necessary follow up based on the nature of our interaction with you at the event, or your interactions with the third-party event host which provides them authority to share your information with us to contact you again. If you are not interested in further information after an event, we will not retain your information for further use and will delete it.
Use of personal information and retention may vary according to the nature of the event and country location. This includes the event host’s terms and conditions, your consent to share information with us, or local legal requirements.
Your information may be shared within our group companies and with our relevant trusted third parties to support and cater for the event or conference. We do not sell any of your personal information and only share information with third parties as required and necessary for the purposes for which it was collected.
We may collect your personal and health information if you volunteer to participate in a clinical trial, usability study or research project. Participation in clinical trials and research is completely voluntary. We collect this information with your express consent only. During a clinical trial or research process, we will collect information relating to the clinical trial or research, as outlined in the specific privacy notice and consent form for your clinical trial or research. If you provide support as an external investigator, we need to collect your name, contact information and resume. Research Participant information involved in the clinical trial or research varies based on the nature of the research and may include demographic data, your name, age, sex, patient/participant code and information relating to the purpose of the clinical trial or research which could directly or indirectly infer or reveal medical or health information. Other information may include observations about you and your use of our products, audio and video recordings, interview notes, photos, videos and clinical outcomes.
We recognise personal information relating to clinical trials and research can be sensitive and we endeavour to anonymise, de-identify or pseudonymise trial and research information within our clinical process design.
With your express consent, we may record your contact information, and other relevant information you may consent to us storing, so that we may invite you and pre-screen you for upcoming opportunities to participate in our clinical investigations.
7.2 Why we need to collect it
We conduct clinical trials to improve and develop our products with the aim of better health outcomes, to test the quality and safety of our products, to comply with our regulatory obligations and, most importantly, to ensure your health and welfare during our clinical trials and research at all times. Participation is voluntary and you can withdraw at any time.
Depending on how clinical investigations and research are performed, we may collect and use your personal information directly from you with your consent. Otherwise, we may partner with or support other third-party clinics, laboratories or other healthcare facilities or sites (“Clinical Sites”) to perform clinical investigations or research which involve our devices or supporting services. We may or may not be a sponsor of these investigations, but depending on the specific arrangement we have with Clinical Sites for the clinical investigation, we may receive some information or outcomes relating to the investigation or research. In these cases, the Clinical Site usually controls and is responsible for personal information and should have informed you of this. Please refer to the specific privacy notice, consent forms and other research participation information you are provided whenever you agree to participate in clinical investigations or research to understand how your personal information may be collected, used (including the involvement of any other third parties), or otherwise shared. Personal information collected for other purposes (e.g. F&P product information, Infosmart Web™ information, Sales or Customer care) is not re-used for clinical investigations or research and development purposes. Information is collected separately. We collect and use personal information only for the purposes notified to you at the time of collection and for which you have provided consent.
We are required to retain the results of clinical trials to comply with our regulatory requirements. This will be for at least fifteen (15) years after the trial has been completed and/or the is product supported in the market. We endeavour to store and retain only de-identified information, and only publish anonymous results and outcomes. When clinical information is no longer required to be identifiable for legal or regulatory purposes, we may delete identifiable information and retain anonymous information and outcomes only.
If you consent to us contacting you to invite you to participate in future clinical investigations and research, we collect this information directly from you. Additional information you choose to share will be used for the purpose of evaluating your eligibility to participate in clinical investigations, otherwise we may request that you participate in a pre-assessment of your suitability if necessary.
We may be obligated to share information with relevant Ethics Boards, District Health Boards, or other auditors, regulatory or governmental bodies as necessary to perform and facilitate a clinical trial or research project and assure the welfare of Research Participants. We endeavour to anonymise personal information, de-identify or pseudonymise it. We do not sell your personal information to any third parties. We may publish papers or articles detailing the outcome of the clinical trial or research project.We may also share results of any research or clinical trial at conferences or other F&P Healthcare events. We will not identify you in any publication unless you have given us your explicit consent. If you have any concerns and would like to object to the use of your information in this way, please contact the clinical investigation listed in your participation consent form in the first instance.
This section applies anyone who may visit our physical premises.