Privacy Policy

The information we collect depends on how you interact with Fabrica.

It may include:

Identity and contact information

Your name, date of birth, email address, phone number, address and other information required to identify or communicate with you.

Information you provide when exploring Fabrica

This may include information provided through our website, fit checks, pre-qualification processes, enquiries, forms or conversations with our team.

For example:

• what has brought you to Fabrica;
• your health, performance or longevity goals;
• areas of your health you are interested in understanding or improving;
• your expectations and preferences;
• information relevant to determining whether Fabrica may be appropriate for you; and
• your readiness to engage with our services.

Completing an initial fit check or enquiry does not establish a clinician-patient relationship or guarantee that Fabrica will be appropriate for you.

Health information

If you progress through Fabrica, we may collect health information necessary to assess, coordinate and deliver services.

Depending on the services involved, this may include:

• medical and health history;
• current and previous health conditions;
• medications, treatments and interventions;
• pathology and laboratory results;
• diagnostic and imaging information;
• physiological measurements;
• genetic or genomic information where relevant;
• lifestyle, nutrition, sleep and exercise information;
• information from wearable devices or connected health services;
• clinical notes and assessments;
• treatment plans, protocols and recommendations;
• information provided by clinicians, laboratories or other health providers; and
• information generated through your ongoing interaction with Fabrica.

We aim to collect health information that is reasonably necessary for the purpose for which it is being collected.

Financial and transaction information

Where you purchase services, we may collect information relating to your transaction, billing and payment status.

Payment card information may be processed directly by our payment providers rather than stored by Fabrica.

Technical information

When you use our website or digital services, we may collect information such as:

• IP address;
• browser and device information;
• operating system;
• pages viewed;
• referring pages;
• interaction and usage information;
• cookies and similar technologies; and
• diagnostic and security information.

We may use this information to operate, secure and improve our digital services and understand how they are being used.

We collect personal information for purposes connected with providing and operating Fabrica.

These may include:

• responding to enquiries;
• determining whether Fabrica may be appropriate for you;
• arranging introductory conversations and consultations;
• establishing and managing your relationship with Fabrica;
• verifying identity;
• coordinating assessments, diagnostics and testing;
• supporting clinical assessment and decision-making;
• developing and managing personalised health plans;
• coordinating care and services;
• communicating with you;
• monitoring progress and outcomes;
• providing our digital services;
• processing payments;
• maintaining clinical and operational records;
• improving the quality, safety and performance of our services;
• preventing fraud, misuse and security incidents;
• meeting professional, regulatory and legal obligations; and
• exercising or defending legal rights.

Where information is collected for a particular purpose, we will generally use it for that purpose or for another purpose permitted by law.

Health information requires particular care.

Where the Health Information Privacy Code 2020 applies, Fabrica will handle health information in accordance with its requirements.

We seek to collect health information directly from you where practicable.

There may be circumstances where information is obtained from another source. For example, with appropriate authority or where otherwise permitted by law, information may come from a clinician, laboratory, diagnostic provider, pharmacy, health service, connected device or another person involved in your care.

Where required, we will tell you about information collected about you from another source.

Fabrica is technology-enabled and may use software, automation and artificial intelligence to help organise information, support workflows, identify patterns, prepare information for review and assist our team in delivering services.

Where these systems process personal or health information, we apply appropriate privacy, security and access controls.

Technology may assist Fabrica’s team and clinicians. It does not replace the professional responsibilities of a qualified health practitioner where clinical judgement is required.

We do not treat the use of artificial intelligence as permission to use your information for unrelated purposes.

We do not sell your personal or health information.

We may share information where reasonably necessary with organisations or people involved in providing, supporting or operating Fabrica’s services.

These may include:

• health practitioners involved in your care;
• laboratories and diagnostic providers;
• pharmacies and dispensing providers;
• specialist and allied health providers;
• technology and infrastructure providers;
• communications providers;
• payment providers;
• professional advisers;
• contractors and service providers working on Fabrica’s behalf; and
• regulators, courts, government agencies or other parties where disclosure is required or permitted by law.

We seek to limit information shared with another party to what is appropriate for the purpose.

Where another organisation processes information on our behalf, we expect appropriate confidentiality, privacy and security protections to apply.

Some technology or service providers used by Fabrica may process or store information outside New Zealand.

Where personal or health information is disclosed to an overseas person or organisation, Fabrica will take steps required under applicable New Zealand privacy law to ensure the disclosure is permitted and that appropriate protections apply.

This may include assessing the privacy protections applying to the recipient, establishing contractual safeguards or obtaining authorisation where required.

The location of technology infrastructure may change as our providers and services develop.

Fabrica takes reasonable safeguards to protect personal and health information against loss, unauthorised access, use, modification, disclosure and other misuse.

Depending on the system and information involved, safeguards may include:

• access controls;
• authentication;
• encryption;
• role-based permissions;
• secure infrastructure;
• logging and monitoring;
• restricted administrative access;
• supplier security requirements; and
• internal policies and procedures.

No internet-connected system can be guaranteed to be completely secure. We design our systems and processes according to the sensitivity of the information involved and the risks associated with holding it.

We retain personal information only for as long as it is required for the purposes for which it was collected, or where retention is required or permitted by law.

Different retention requirements may apply to health and clinical records.

When information is no longer required, we may securely delete, destroy or de-identify it, subject to applicable legal and professional requirements.

You may ask us to provide access to personal information that we hold about you.

You may also ask us to correct information if you believe it is inaccurate, incomplete or misleading.

These rights are subject to the Privacy Act 2020, the Health Information Privacy Code 2020 where applicable, and any lawful grounds on which access or correction may be limited.

To make a request, contact us using the details below.

We may need to verify your identity before providing access to information.

If you provide your contact details, we may communicate with you about your enquiry, assessment, services or relationship with Fabrica.

Where you have agreed to receive marketing or other optional communications, you may unsubscribe from those communications at any time.

Service, clinical, security and administrative communications may still be sent where necessary.

Our website may use cookies and similar technologies to operate the site, remember preferences, understand how the site is used, measure performance and improve the experience.

Some of these technologies may be provided by third parties.

Where required, we will provide appropriate choices concerning non-essential cookies or similar tracking technologies.

You can also control certain cookies through your browser settings.

We may create information from which individuals cannot reasonably be identified.

We may use genuinely de-identified or aggregated information to understand outcomes, improve services, analyse performance, conduct research or develop Fabrica’s systems and services.

We take reasonable steps to prevent information described as de-identified from being used in a way that identifies an individual.

If a privacy or security incident affects personal information, we will investigate and respond to it.

Where a privacy breach meets the notification requirements of the Privacy Act 2020, we will notify the Office of the Privacy Commissioner and affected individuals as required by law.

Our website or services may contain links to websites or services operated by other organisations.

Their privacy practices are governed by their own policies. Fabrica is not responsible for the privacy practices of third-party services that operate independently of us.

Fabrica may update this Privacy Policy as our services, technology and legal obligations develop.

The current version will be published on our website with the date it was last updated.

Where a change materially affects how we handle existing personal or health information, we will take additional steps where required by law.

If you have a question about this Privacy Policy, want to access or correct your information, or wish to raise a privacy concern, please contact:

We will respond to privacy requests and concerns in accordance with our obligations under New Zealand law.

If you are not satisfied with our response, you may also make a complaint to the Office of the Privacy Commissioner of New Zealand.