Privacy Policy

Commercial Occupational health services Ltd access both data controller and data processor, we are committed to protecting the rights of the individual and assure you that any personal data that we handle will be processed in accordance with the new general data protection regulations (GDPR) 2018.

Our data controller can be contacted at contact at the

The following data may be collected held and shared by COHS Ltd

  • Personal information and characteristics
  • Contact details
  • Medical history
  • Occupational history
  • Health surveillance data

This data may be collected from your employer, manager, human resources, occupational health practitioners’ notes, consultations and reports.

The data could be collected from;

  • email communication
  • verbal communication
  • by post
  • in a face-to-face appointment

The data is collected for the purpose of and taking undertaking our duties as occupational health provider to your employer. It is also used for audit research and training within the company.
The lawful basis for processing the above data is under article 9(2)(h) authorising data processing in special category data. It is processed for the purposes of legitimate interest as defined under article 6(1)(f)

All data stored in accordance with the GDPR 2018. We will not share any information about you with third parties without your consent, unless the law obliges us to do so.

Your personal data will be stored for the period required by law in support of the company’s legitimate interests.

Subject Access
You have the right to request to see any information we hold about you within your occupational health record. A request should be made in writing and will be responded to within 28 days. Please request information from