Privacy Notice

FOHCUS Occupational Health is committed to protecting your privacy and ensuring that your personal information is processed lawfully, fairly and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Notice explains how we collect, use, store, share and protect personal information when you use our occupational health services, contact us, visit our website or are referred to us by your employer.

Who We Are

FOHCUS Occupational Health provides independent occupational health services to employers and employees throughout the United Kingdom.

FOHCUS is the Data Controller for the personal information processed as part of our occupational health services.

Contact details

FOHCUS Occupational Health 
The Gatehouse 
White Cross Industrial Estate 
Lancaster 
LA1 4XQ

Telephone: 01524 844011

Email: office@fohcus.co.uk

ICO Registration Number: ZA186880

What Information We Collect

Depending on the service provided, we may collect:

• Name, date of birth and contact details. 

• Employer and occupational information. 

• Medical and occupational health information. 

• Appointment records and clinical notes. 

• Occupational health reports. 

• Consent records. 

• Website enquiry information. 

• Correspondence and feedback. 

Where health information is collected, it is processed as special category personal data in accordance with UK GDPR.

How We Collect Information

Information may be obtained:

• Directly from you. 

• From your employer following an occupational health referral. 

• During occupational health consultations. 

• From healthcare professionals where you have provided consent. 

• Through our website contact forms. 

• Through email or telephone enquiries. 

Why We Use Your Information

We process personal information to:

• Deliver occupational health assessments. 

• Assess fitness for work. 

• Undertake health surveillance. 

• Provide management reports. 

• Deliver vaccinations and health screening. 

• Manage appointments. 

• Maintain clinical records. 

• Comply with legal and regulatory obligations. 

• Improve our services. 

• Respond to enquiries. 

• Recruit staff. 

Lawful Basis for Processing

We process personal information in accordance with UK GDPR.

Where health information is processed, this is undertaken only where there is an appropriate lawful basis, including occupational medicine, assessment of working capacity, health care and compliance with legal obligations.

Consent is obtained where required before occupational health reports are released.

Sharing Information

We may share personal information, where appropriate, with:

• Your employer (where consent or another lawful basis applies). 

• Healthcare professionals. 

• Laboratories. 

• Regulatory bodies. 

• Professional advisers. 

• IT service providers supporting our systems. 

FOHCUS does not sell personal information.

How We Protect Your Information

We use appropriate technical and organisational measures to protect personal information, including:

• Secure clinical record systems. 

• Restricted access controls. 

• Staff confidentiality obligations. 

• Information governance procedures. 

• Staff training. 

• Secure disposal of confidential information. 

How Long We Keep Information

Records are retained in accordance with legal requirements, professional guidance and the FOHCUS Records Retention Schedule before being securely destroyed.

Your Rights

Under UK GDPR you have the right to:

• Access your personal information. 

• Request correction of inaccurate information. 

• Request restriction of processing where appropriate. 

• Object to certain processing. 

• Request erasure where applicable. 

• Withdraw consent where consent is relied upon. 

• Lodge a complaint with the Information Commissioner’s Office (ICO). 

Some rights may be limited where legal or professional obligations apply.

Subject Access Requests

Requests to access personal information or exercise your data protection rights should be sent to:

office@fohcus.co.uk

We will normally respond within one calendar month.

Cookies

Our website uses cookies and similar technologies to support the operation of the website and, where applicable, to understand how visitors use our website and improve the services we provide.

Where non-essential cookies are used, these will only be placed with your consent. You can manage your cookie preferences through your browser settings or our website cookie banner where available.

Changes to this Privacy Notice

This Privacy Notice is reviewed periodically to ensure it remains accurate and reflects any changes to legislation, guidance or the services provided by FOHCUS.