Privacy policy

Hairmop NZ Limited trading as “Moshy” and “Mosh” (we, us, our) complies with the New Zealand Privacy Act 2020 (Privacy Act) and the Health Information Privacy Code 2020 (HIPC) when dealing with personal information. This policy sets out how we will collect, use, disclose and protect your personal information.

Mosh and Moshy are health platforms that provide and facilitate confidential consultations with registered doctors (“Doctors”) and health practitioners such as nurse practitioners and registered nurses (“Practitioners”). We also facilitate the supply by mail of medications by pharmacies (“Pharmacies”) which use the platform.

By providing Personal Information to us, you consent to our collection, use and disclosure of your Personal Information in accordance with this Privacy Policy and any other arrangements that apply between us. We may change our Privacy Policy from time to time by publishing changes to it on our Site (as that term is defined below). We encourage you to check our Site periodically to ensure that you are aware of our current Privacy Policy.

Where you engage with Mosh or Moshy, Doctors, Practitioners and Pharmacies may also collect, use and disclose your Personal Information (including your Health Information) in accordance with this Privacy Policy. Doctors, Practitioners and Pharmacies must uphold professional standards for the protection of your Personal Information and must comply with this Privacy Policy. While we don't interfere in the way Doctors, Practitioners and Pharmacies provide health care services, we require all those who use the platform to comply with applicable privacy-related laws and standards and professional obligations relating to patient confidentiality and not to use your Personal Information or Health Information other than in connection with your use of Mosh or Moshy. To the extent that you separately provide your personal information or health information to a Doctor, Practitioner or Pharmacy, outside of your engagement with Mosh or Moshy, then the Doctor, Practitioner or Pharmacy’s own privacy policy will apply to your personal information or health information.

We care about your privacy:

We will never rent, trade or sell your email address to anyone.

We will never publicly display your email address or other personal details that identify you.

1. Definitions

In this Privacy Policy the following capitalised terms have the following meanings:

1. Personal Information means any information about an identifiable individual and includes the information described in detail in clause 3 and Health Information;
2. Health Information includes, but is not limited to, information about height, weight, medical history, diagnosis, prescriptions, treatments as well as your National Health Index (NHI) number, health care card details and health insurance information;
3. Site means moshy.co.nz;
4. Privacy Act means Privacy Act 2020.
5. NZ Spam Act means the Unsolicited Electronic Messages Act 2007.

2. How do we collect your Personal Information?

We may collect the Personal Information you directly give us through some of the following means:

1. when you make an inquiry or order in relation to goods or services through our Site;
2. when you attend an online consultation with a Doctor or Practitioner through our Site (note that your treating practitioner will make, hold and maintain your medical records within Mosh or Moshy's system (as applicable). Doctors, Practitioners and Pharmacies may also create and hold medical records in their own systems and will hold such records in accordance with the Privacy Act and Health Information Privacy Code);
3. in administering and performing any contracts with service providers;
4. when you contact us;
5. from any correspondence with us or on our platforms (including electronically);
6. through any mobile applications provided by us;
7. while conducting customer satisfaction and market research surveys; and
8. when administering any of our services.

We may also collect Personal Information from publicly available sources and third parties, such as suppliers, recruitment agencies, contractors, our clients and business partners and your relatives and representatives.

3. What Personal Information do we collect?

The type of Personal Information we may collect can include (but is not limited to), your name, postal address, email address, phone numbers, date of birth, billing and shipping information, your device ID, IP address, statistics on page views, traffic, standard web log-in information, details of the services and products you make enquiries about, and, if applicable, employment information.

We will collect and hold Health Information about you, such as your height, weight and medical history and any information you provide to a Doctor or Practitioner. That information may also include your National Health Index (NHI) number, health care card details and health insurance information.

Where you do not wish to provide us with your Personal Information, we may not be able to provide you with requested goods or services or do the other things described in the next section.

4. Why do we collect, use and disclose Personal Information?

We may collect, hold, use and disclose your Personal Information for the following purposes:

• to enable you to access and use our website and services;
• to provide facilities to Doctors, Practitioners and Pharmacies who work with or use Mosh or Moshy so that they can arrange consultations with you and provide services and goods to you;
• to communicate with you in the event that any services requested are unavailable or if there is a query or problem with a scheduled consultation or an order for goods, or with your subscription;
• to operate, protect, improve and optimise our website and services, business and our users' experience, such as to perform analytics, conduct research (including in relation to de-identified Personal Information) and quality assurance activities, and for advertising and marketing;
• to send you service, support and administrative messages, reminders, technical notices, updates, security alerts, and information requested by you;
• to maintain and update our records including medical records. We aim to provide users with continuity of care which requires that records from one consultation or order are available to Doctors, Practitioners and Pharmacies who subsequently provide you with services or goods;
• subject to our legal obligations and your rights to unsubscribe, to send you marketing messages and other information that may be of interest to you, including information sent by, or on behalf of, our business partners that we think you may find interesting;
• to comply with our legal obligations, exercise and defend our legal rights, resolve disputes, and perform and enforce our agreements. Some of the laws under which our obligations and rights in respect of collection of Personal Information arise include the Human Services (Medicare) Act, Healthcare Identifiers Act and National Health Act; and
• to otherwise manage our business.

We are committed to responsible data handling practices. When we de-identify personal information for research or analytical purposes, we employ robust techniques to ensure that individuals cannot be reasonably re-identified.

5. To whom do we disclose your Personal Information?

We may disclose Personal Information for the purposes described in this Privacy Policy to:

• our employees, contractors and related bodies corporate;
• third party suppliers and service providers, and other providers for the operation of our websites and/or our business or in connection with providing our products and services to you (including for the purposes of delivering goods to you);
• professional advisers, dealers and agents;
• payment systems operators (e.g. merchants receiving card payments);
• Doctors, Practitioners and Pharmacies (including pharmacists and Pharmacy staff);
• anyone to whom our assets or businesses (or any part of them) are transferred, or other parties involved in asset and business transfers (or prospective transfers);
• specific third parties authorised by you to receive information held by us;
• should a Doctor or Psychologist form the professional opinion that a user is at imminent risk of harm, including self-harm, and where it is consistent with his or her professional and ethical obligations to do so, to contact emergency services (such as an Ambulance Service) to request a welfare check or similar intervention; and/or
• other persons, including government agencies, regulatory bodies and law enforcement agencies, or as required, authorised or permitted by law.

6. Prescriptions

Where a prescription is issued to you by a Doctor, Mosh and Moshy offer a range of options for facilitating the dispensing to you of the relevant medications. The manner in which your Personal Information relating to the prescription is managed will depend on the option you select.

Where a prescription is issued to you by a Doctor, Mosh or Moshy may facilitate the secure transfer of the prescription to a pharmacy with your consent. This may involve secure messaging or other electronic means in accordance with the New Zealand ePrescription Service (NZePS) and applicable regulations. If the prescription is transferred electronically, you may request a copy for your records, and you may instruct us to send it to a specific pharmacy, or retain it securely until it is dispensed. Where permitted, we may hold prescriptions for repeat dispensing and manage their release upon your direction.

Mosh, Moshy, Doctors, Practitioners, Pharmacies and third parties may collect, use and disclose information about your prescriptions in accordance with the options you select and the directions you give us as described above.

7. Using our website and cookies

We may collect Personal Information about you when you use and access our website.

While we do not use browsing information to identify you personally, we may record certain information about your use of our website, such as which pages you visit, the time and date of your visit and the internet protocol address assigned to your computer.

We may also use 'cookies' or other similar tracking technologies on our website that help us track your website usage and remember your preferences. Cookies are small files that store information on your computer, TV, mobile phone or other device. They enable the entity that put the cookie on your device to recognise you across different websites, services, devices and/or browsing sessions. You can disable cookies through your internet browser but our websites may not work as intended for you if you do so.

In some cases, third parties may place cookies through this Site. For example:

1. Google Analytics, one of the most widespread and trusted website analytics solutions, may use cookies de-identified data about how long users spend on this Site and the pages that they visit;
2. Google AdSense, one of the most widespread and trusted website advertising solutions, may use cookies to serve more relevant advertisements across the web and limit the number of times that a particular advertisement is shown to you; and
3. third party social media applications (eg, Facebook, X, LinkedIn, Pinterest, YouTube, Instagram, etc) may use cookies in order to facilitate various social media buttons and/or plugins in this Site.

8. Security

We are committed to protecting the security of your information. In order to mitigate against unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online. We store data online and use Secure Sockets Layer to provide users secure and private access.

Mosh and Moshy are primarily hosted in Australia. From time to time we may engage overseas recipients to provide services to us, such as cloud-based storage solutions. Please note that the use of overseas service providers to store Personal Information will not always involve a disclosure of Personal Information to that overseas provider. We will only disclose your personal information to parties in another country where we are reasonably satisfied that the recipient is required to protect the personal information in a way that, overall, provides comparable safeguards to those in the Privacy Act or where you have or where you have otherwise authorised us to do so.

However, by providing us with your Personal Information, you consent to the provision of such information to overseas recipients (such as servers located in Australia or the United States of America) and acknowledge that overseas recipients may not be bound by the Privacy Act.

9. Links

Our Site may contain links to websites operated by third parties. Those links are provided for convenience and may not remain current or be maintained. Unless expressly stated otherwise, we are not responsible for the privacy practices of, or any content on, those linked websites, and have no control over or rights in those linked websites. The privacy policies that apply to those other websites may differ substantially from our Privacy Policy, so we encourage individuals to read them before using those websites.

10. Accessing or correcting your Personal Information

Subject to certain grounds for refusal set out in the Privacy Act, you may request access to, or correction of, the personal information we hold about you. Please contact us using the details below. We may also need to verify your identity to confirm you are the individual to whom the personal information relates. We will deal with your request in accordance with the Privacy Act.

11. Do we use your Personal Information for direct marketing?

We and/or our carefully selected business partners may send you direct marketing communications and information about the services offered on our Site but only if you have provided consent to receive such communications. This may take the form of emails, SMS, mail or other forms of communication, in accordance with the NZ Spam Act and the Privacy Act. You may opt-out of receiving marketing communications from us by contacting us using the information below, or by using the opt-out facilities provided in the communication (e.g. an unsubscribe link).

12. Retention

We may retain your Personal Information as long as you are registered to the Site. You may close your account by contacting us. However, we may retain Personal Information for an additional period as is permitted or required under applicable laws including health retention laws. Even if we delete your Personal Information it may persist on backup or archival media for an additional period of time for legal, tax or regulatory reasons or for legitimate and lawful business purposes.

13. Making a complaint

If you think we have breached the Privacy Act, or you wish to make a complaint about the way we have handled your Personal Information, you can contact us using the details set out below. Please include your name, email address and/or telephone number and clearly describe your complaint. We will acknowledge your complaint and respond to you regarding your complaint within a reasonable period of time. If you think that we have failed to resolve the complaint satisfactorily, we will provide you with information about the further steps you can take.

If you think that we have failed to resolve the complaint satisfactorily, you may contact the Office of the New Zealand Privacy Commissioner via https://www.privacy.org.nz/your-rights/making-a-complaint/.

14. Contact Us

For further information about our Privacy Policy or practices, or to access or correct your Personal Information, make a complaint or unsubscribe from marketing communications, please contact us at hello@getmosh.com.

Last updated: 2nd July 2025