Working-Health Consulting

GDPR: Client Privacy Policy

July 2020

Working Health Consulting Ltd is the data controller. This means we decide how your personal data is processed and for what purposes.

Our contact details are Working Health Consulting Ltd, 7 Gatley Drive, Guildford, GU4 7JJ, We are committed to protecting and respecting your privacy.


What We Hold

We hold special categories personal data, as defined by the General Data Protection Regulations (GDPR). This information includes name, date of birth, home address, email address, telephone number, work address, manager details, work hours, medical history, personal history, medication history. This list is not exhaustive.

Your data is not disclosed or passed onto any individual or company but a third party, such as a Remote Receptionist or IT Support Technician, might on rare occasions see it. We do not transfer personal data outside the European Economic Area (EEA). We do not use any form of automated decision making.


Why We Hold It

Our lawful basis for processing your special categories personal data is that it is essential for undertaking role as a physiotherapy or occupational health provider. You will have provided your informed consent prior to us obtaining this information and for any of this information to be sent to your employer or medical professionals.


Where We Hold It

We hold your data either in paper form in locked filing cabinet in our offices, or securely on an encrypted computer, backed up on two encrypted removable hard drives.


How Long We Hold It For

We hold data about our physiotherapy clients only for 8 years after contact with you ceases, as required by the Health and Care Professions Council (HCPC) codes of practice. We hold data about our occupational health clients for 40 years after contact with you ceases.


Your Data, Your Rights

You have the following rights with respect to your personal data:

  • The right to request a copy of the personal data which we hold about you;
  • The right to request that we correct any personal data if it is found to be inaccurate or out of date;
  • The right to request your personal data is erased where it is no longer necessary to retain such data;

To exercise all relevant rights, queries, or complaints please in the first instance contact our Data Representative on 07718 541 554, by post to Working Health Consulting Ltd, 7 Gatley Drive, Guildford, GU4 7JJ or by email to


Policy Review Date: July 2021.