Privacy Policy

Last Updated: July 3, 2025

This Privacy Policy explains how Health Initiatives collects, uses, and protects your personal data.

  1. Who We Are

Health Initiatives

Forrest House Forrest House, 346c Felixstowe Road, Ipswich, Suffolk, England, IP3 9AA

Company number 05332342

  1. Data We Collect

We collect personal data you provide directly to us or that we receive from your employer (with your consent) to deliver our services. This includes:

  • Identity & Contact Data: Name, date of birth, company name, site/location, job title, position start date, mobile phone number, landline phone number, email address.
  • Health & Professional Data: Physical health information, mental health information, occupational health information, and career/job role-based data. Due to its sensitive nature, we will only process your health information with your explicit consent or where permitted by law for occupational health purposes.
  1. How We Use Your Data

We use your data to:

  • Provide our occupational health and wellness services.
  • Communicate with you about our services.
  • Manage our internal records and operations.
  • Comply with legal and regulatory obligations.

Our legal bases for processing include your consent (especially for sensitive health data), necessity for performing our services (contract), legitimate interests, or legal obligations.

  1. How We Share Your Data

We may share your data with:

  • Your employer: With your explicit consent, to provide necessary reports or information related to our services.
  • Service Providers: Third parties who assist us in delivering our services (e.g., IT support), under strict confidentiality.
  • Legal Authorities: When legally required or necessary to protect our rights.

We do not sell or rent your personal data.

  1. Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal and accounting requirements. Specific retention periods apply for health records.

  1. Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure.

  1. Your Rights

Under data protection law, you have rights regarding your personal data, including the right to:

  • Access your data.
  • Request correction of inaccurate data.
  • Request erasure of your data.
  • Object to or restrict certain processing.
  • Withdraw your consent at any time.

To exercise these rights, please contact us using the details above.

  1. Cookies

Our website may use cookies to improve your Browse experience. Please refer to our website for more details on our cookie usage.

  1. Changes to This Policy

We may update this policy periodically. Any changes will be posted on this page with an updated “Last Updated” date.

  1. How to Complain

If you have concerns about our data practices, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) in the UK: www.ico.org.uk.