Privacy Policy how we use your data

Workplace Welfare (“we”, “our”, “us”) is committed to protecting your privacy and handling your personal data in a fair, transparent, and lawful manner. This Privacy Policy explains how we collect, use, store, and protect your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We may collect and process the following types of information:

• Personal details (e.g., name, email address, phone number, job title)
   
• Business information (e.g., company name, role, workplace needs)
   
• Health-related information (only where necessary for assessments and with explicit consent)
   
• Technical data (e.g., IP address, browser type, and usage data from our website)
   

We process personal data for the following purposes:

• To provide our workplace welfare services (e.g., workstation assessments, health consultations)
   
• To respond to enquiries and provide customer support
   
• To comply with legal and regulatory obligations
   
• To maintain business records and manage client relationships
   
• With your consent, to send you updates or information about our services
   

We only process sensitive health data with your explicit consent and strictly for the purposes agreed with you.

We rely on the following lawful bases under the UK GDPR:

• Contract – to deliver our services to you or your business
   
• Legal obligation – to comply with health and safety or regulatory requirements
   
• Consent – where we process health information or send marketing communications
   
• Legitimate interests – to manage and improve our business operations
   

We will not sell or rent your personal data. We may share information with:

• Service providers and partners who support our business (e.g., IT and hosting providers)
   
• Regulators or legal authorities where required by law
   
• With your consent, healthcare professionals or third-party specialists relevant to your case
   

We retain personal data only for as long as necessary to fulfil the purposes outlined above, comply with legal obligations, and resolve disputes. Health data is kept securely and deleted once no longer required.

Under the UK GDPR, you have the right to:

• Access your personal data
   
• Request correction of inaccurate data
   
• Request deletion of your data (“right to be forgotten”)
   
• Restrict or object to processing
   
• Request data portability
   
• Withdraw consent at any time (where processing is based on consent)
   

To exercise these rights, please contact us (details below).

We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse, or disclosure.

Our website may use cookies and analytics to improve user experience and monitor site usage. You can adjust your browser settings to refuse cookies.

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Workplace Welfare
Email: dpo@workplace-welfare.co.uk
Address: A1 Optimum Business Park, Optimum Way, Swadlincote, Derbyshire DE11 0WT

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk.