Privacy Notice

Introduction

Clarity Occupational Health Ltd (“we”, “us”, “our”) provides occupational health services to employers and their employees, and operates this website.

This privacy notice explains how we collect, use, and protect your personal data when you:

  • Use our website
  • Engage with our services
  • Are referred to us for occupational health support

Occupational health services are independent clinical services. We maintain confidential clinical records separately from your employer.

Who We Are

Clarity Occupational Health Ltd is the data controller for the personal data we process.

Where we provide occupational health services, we act as an independent data controller. Your employer is a separate data controller in relation to your employment records.

What Information We Collect

We may collect and process the following categories of personal data:

Website users:

  • Name and contact details (if you contact us)
  • Website usage data (via cookies)

Occupational health services:

  • Personal information (e.g. name, address, date of birth, job role)
  • Employment information (e.g. referral details)
  • Health information (special category data), including medical history, symptoms, and treatment
  • Occupational health records (clinical notes, assessments, reports)
  • Administrative information (appointments and correspondence)
How We Collect Your Data

We collect your data from:

  • You directly (e.g. consultations, enquiries)
  • Your employer (as part of an occupational health referral)
  • Our website
  • Other healthcare professionals (where appropriate and with your knowledge)
How We Use Your Data

We use your data to:

  • Provide occupational health services
  • Assess your fitness for work
  • Provide advice and recommendations to support workplace health
  • Respond to enquiries
  • Improve our services
  • Meet legal, regulatory, and professional obligations
Lawful Basis for Processing

We process personal data under:

  • Article 6(1)(f) – Legitimate Interests
  • Article 9(2)(h) – Occupational Health

This allows us to process health data for preventative or occupational medicine, assessment of working capacity, and medical advice.

Consent for Disclosure (Occupational Health Services)

We will ask for your consent before sharing any occupational health report or medical information with your employer.

You will be given the option to:

  • Review the report before it is shared; or
  • Agree for it to be shared at the same time

If you do not provide consent, no report will be shared with your employer.

Only relevant and necessary information is disclosed.

Sharing Your Data

We treat your occupational health records as confidential clinical information.

We may share data:

  • With your employer (in the form of a report, and only with your consent)
  • With third-party healthcare providers (e.g. physiotherapy or counselling), with your authorisation
  • Where required by law

Your employer does not have access to your full clinical record.

Transfer of Records

Where occupational health services transfer to another provider:

  • Records relating to employees may be transferred to support continuity of care, where lawful and appropriate and in accordance with legal and data protection requirements
  • All transfers are carried out securely.
How Long We Keep Your Data

We retain occupational health records in line with legal, regulatory, and clinical requirements.

This may include:

  • Retention during your employment
  • Retention for several years after employment ends
  • Longer retention (up to 40–50 years) where required by legislation (e.g. COSHH)
Use of Data for Reporting

There will be some occasions where your personal and special category data is used to create trend reports. In these instances, all personal and special category data will be anonymised.

Website Cookies

We use technology on our website to collect information that helps us enhance your experiences and our products and services. We and our partners may use various techniques to collect and store information when you use our Services, and this may include using cookies and similar tracking technologies on our Websites, such as pixels and web beacons, to analyse trends, administer the website, track users’ movements around the website and gather demographic information about our user base as a whole. Users can control the use of cookies at the individual browser level. We partner with third parties to display advertising on our website or to manage the administration and development of our website. For more information about our use of cookies, please refer to our Cookie Statement.

Marketing Communications

If you choose to receive communications from us, we will use your contact details to send occupational health-related updates.

You can opt out at any time.

Your Rights

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request restriction of processing
  • Object to processing (where applicable)

You do not have an absolute right to erasure where processing is required for occupational health purposes.

If you wish to access your data, you can make a request by contacting our Data Protection Officer. We will respond within one calendar month. Where requests are complex, this may be extended in accordance with data protection law.

Security

We implement appropriate technical and organisational measures to protect your personal data, including secure systems, restricted access, and confidentiality controls.

Contact Details
DPO Name:Julie Richardson
Address:Clarity Occupational Health Ltd, The Key Group, 15-16 The Embankment, River View, Heaton Mersey, Stockport, SK4 3GN
Landline Telephone Number:0161 443 0060
E-Mail:dpo@clarityocchealth.co.uk
Complaints

If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you can complain to the Information Commissioner’s Office https://ico.org.uk/

 

For EU Residents: Please contact our EU Representative at eurep@clarityocchealth.co.uk. 
Alternatively, they can be reached by post:

The DPO Centre Europe Ltd,

Alexandra House,

3 Ballsbridge Park,

Dublin,

D04C 7H2,

Ireland.

Updates to This Notice

We may update this privacy notice from time to time to reflect changes in our services or legal requirements.