top of page

Privacy Statement

About Us

Rockingham Occupational Health Ltd is committed to ensuring the privacy and confidentiality of the information we hold of users of our website, applicants and employees being assessed by, or utilising, our service.

This privacy statement explains what kind of information is collected by us during a visit to our web site or when an employee is referred to our service and how we use this information.

The information collected, held and used is in strict compliance with not only all current UK legislation but the confidentiality and ethical codes set out by the General Medical Council, Nursing and Midwifery Council and the Faculty of Occupational Medicine.


Data Controller

For the purpose of the current Data Protection legislation, the Data Controller is Rockingham Occupational Health Ltd, 5 Resolution Close, Boston, Lincolnshire, PE21 7TT with ICO registration number ZA009713.


Collection and processing of personal data on our website

For the purpose of system security, when you visit our web site, the web server temporarily registers the domain name or the IP address of the requesting computer as well as the date of access, the file request of the client (file name and URL), the HTTP response code and the Web site from which you are visiting us, and the number of bytes transferred during the session. We might also, in some cases, store some information in the form of 'cookies' on your PC so that we can optimise our web site according to your preferences. 

We will not collect any other personal data such as name, address, telephone number or e-mail address unless you provide this information voluntarily, for example, when completing the ‘contact us’ section.

If you choose to contact us we will process the information you share to manage your query only. We will not use the information for any other purpose. By contacting us you consent to us processing the information under the current data protection legislation so we may do this.

All information you provide to us is stored securely.  Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.


Use and forwarding of personal data on our website

We will use your personal data exclusively for the technical administration of the web site. We will not disclose any data to third parties or government agencies without your consent, except where required by law.

Our employees are obligated to treat all data as confidential and safeguard it accordingly.



We have taken technical and operational precautions to protect the data retained by us against unauthorised access, unlawful processing, accidental loss or destruction, damage or misuse.

Our security procedures are revised regularly and are adapted to reflect technological progress.


Individuals who may be referred to our service

Due to the nature of our work, we manage both personal and sensitive data, as classified under the current data protection legislation. We have developed procedures and IT security measures to ensure the protection of the data we hold. We are also governed by the Faculty of Occupational Medicine and registered with ICO, all of which have guidelines and ethical codes that we follow to ensure your confidentiality.

Rockingham Occupational Health Ltd operates within the principles set out in the current data protection legislation and best practice guidelines, these include;

  • We will process your information fairly and lawfully for the purposes of providing occupational health and treatment advice.

  • We will always gain your consent before sharing information with your employer.

  • We will only obtain personal and sensitive data to provide occupational health advice.

  • We will ensure we meet all legal requirements when processing this information and will not process the data for any other purposes, such as external marketing.

  • We will ensure all data held is ‘relevant’ and ‘appropriate’ to the purpose for which it has been obtained.

  • We will endeavour to ensure data is accurate and if it is found to not be, we will correct it, if appropriate.

  • We will not keep your data for longer than is ‘necessary’.

  • We will always process data in accordance with your rights under the current data protection legislation.

  • We take all necessary measures to protect your data against unauthorised or unlawful processing, accidental loss or destruction, and damage.

  • We will not transfer your data outside the UK or European Economic Area.


Employee guide to data protection, privacy and subject access requests

The following table sets out how we handle your personal data and our legal basis for doing so under GDPR and the Data Protection Act 2018.

What we do

Use the personal data that you provide on our web forms and questionnaires


Provide our core services of Employee Assistance and Occupational Health services.

Contact you regarding the services we provide

Retain your data under our data retention policy after your contract has expired

Personal Data

Name, postal address, email address, website, identification number, location data, online identifier – these are classed as personal data

This data may be provided by you on our web forms and questionnaires, most regularly in relation to Occupational Health services.

Our legal basis under GDPR

Article 6(1)(b) – when you provide us with your personal data, for instance to obtain a quote for our services, this is a necessary step to take at the request of the data subject prior to entering into a contract

Article 6(1)(b) – this is necessary for the performance of a contract with you, our data subject

Article 6(1)(f) – we need to contact you for our legitimate interests so that we can gather more information for the provision of our services, or to deliver those services most effectively

Article 6(1)(f) – we need to retain your personal data for only as long as necessary under the law to protect our legitimate interests


This data is provided by you on our web forms and questionnaires, either to obtain a quote from us, request a service from us or as part of a new or existing contract or enquire about the services we provide.

This data may be provided by you on our web forms and questionnaires, most regularly in relation to Occupational Health services.

The following table sets out the categories of personal data that we obtain.

You can request copies of your records, these are referred to as a ‘Subject Access Request’ or SAR. If you would like access to your records, the request should be made in writing, the letter must include your full name, address and date of birth and you must request ‘copies of your occupational health records held by Rockingham Occupational Health Ltd’. A security check will be made to verify your identity before we will release this information.


A cookie is a piece of information that a website sends to your browser (like Internet Explorer or Firefox).

This website uses Google Analytics, a web analytics service provided by Google, Inc. Google Analytics sets a cookie in order to evaluate your use of this website and compile reports for us on activity on the website. Google stores the information collected by the cookie on servers in the United States and the transfer of the data to servers in the USA is governed by the EU-US Privacy Shield framework. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. More information about Google’s compliance with GDPR can be found by clicking this link.


Your rights

The current Data Protection legislation gives you the right to access information held about you. Your right of access can be exercised in accordance with the legislation. 

If you believe that any information we hold about you is incorrect or incomplete, please email us at and we will rectify the error.


Third Parties

Our Website may, from time to time, contain links to other websites of interest. Please note, these websites have their own privacy policies and we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such websites. You should exercise caution and look at the privacy statement applicable to the website in question.


Changes to our privacy policy

Any changes we may make to our Privacy Policy in the future will be posted on this page.


Making a complaint

If you’re unhappy with any aspect of our website or this privacy statement please let us know using the email address For more information please request a copy of our Complaints Policy.

bottom of page