AmaCura Health Services – Privacy Notice (SEQOHS-Aligned)
AmaCura Health Services is a data controller and is committed to protecting the personal information we hold. We comply with the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018, and relevant regulatory guidance.
This notice explains how we collect, use, store, and share personal information, and outlines your rights in relation to that information.
Our Commitment to Data Protection
AmaCura Health Services aims to:
- Process personal information lawfully, fairly, and transparently.
- Protect the confidentiality, integrity, and availability of the information we collect, process, and share.
- Collect and use personal information only for specific, explicit, and legitimate purposes.
- Clearly explain why information is required and how it will be used.
- Share personal information internally within AmaCura Health Services and externally with other organisations only where appropriate consent has been provided or where there is a legal or professional obligation to do so.
- Ensure individuals can exercise their rights to access, correct, restrict, erase, or transfer their personal information, and to withdraw consent where applicable.
- Retain personal information only for as long as necessary to meet clinical, legal, regulatory, or contractual requirements.
AmaCura Health Services processes special category personal data, including health information, in accordance with Article 9(2)(h) of GDPR for the purpose of providing occupational health services and meeting health and safety obligations.
We apply appropriate technical and organisational security measures to protect personal information. These include secure storage of paper records, secure electronic systems, encrypted devices, password protection, role-based access controls, and the use of secure portals for data transfer.
AmaCura Health Services has a designated lead for information governance and confidentiality, operating in line with Caldicott Principles and good clinical governance.
| Purpose of Processing | Personal Data Used | Lawful Basis | Additional Information |
| Delivery of occupational health services | Name, contact details, health data, employment information | Consent / Contract | Consent is obtained where required; processing supports service delivery |
| Health surveillance and fitness-for-work assessments | Medical records, test results, immunisation data | Legal Obligation | Required under health and safety legislation |
| Clinical record keeping and professional governance | Clinical notes, reports, correspondence | Legitimate Interests | Necessary for continuity of care and audit |
| Quality assurance, audit, and service improvement | Anonymised or pseudonymised data | Legitimate Interests | Data used cannot identify individuals |
| Website usage and analytics | IP address, usage data | Consent | Used to improve website performance and usability |
Information Sharing
Where necessary, personal information may be shared with employers, referring clinicians, laboratories, or regulatory bodies. Information is shared only where there is a lawful basis to do so and in accordance with professional, ethical, and legal obligations.
Your Rights
Under data protection law, you have the right to:
- Request access to the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request erasure of personal data where applicable
- Withdraw consent at any time (where consent is the lawful basis)
- Request restriction or objection to processing
- Request transfer of your information to another provider
If you have concerns about how your information is handled, you are encouraged to raise this with AmaCura Health Services in the first instance.
You also have the right to make a complaint to the Information Commissioner’s Office (ICO)
Data Retention
Personal and clinical records are retained in accordance with the NHS Records Management Code of Practice, occupational health guidance, and legal requirements. Records are securely destroyed when no longer required.
Contact AmaCura Health Services
If you wish to discuss how your information is used, request access to your data, or raise a concern, please contact us:
Telephone: 02033724073
Address: AmaCura Health Services Ltd, Sunley House, 4 Bedford Park, Croydon, CR0 2AP
Email: info@amacura.co.uk
Cookie Policy
What are cookies?
Cookies are small text files stored on your device that help websites function effectively and improve user experience. Cookies may also be used to analyse website traffic and usage patterns.
You can manage cookie preferences through your browser settings. Blocking some cookies may limit website functionality.
How we use cookies
AmaCura Health Services uses cookies to:
- Monitor website performance and usage
- Understand visitor behaviour
- Improve website content and accessibility
| Cookie Type | Purpose | Duration |
| Strictly necessary | Enable core website functionality | Session |
| Performance | Monitor website performance and usage | Persistent |
| Functionality | Remember user preferences | Persistent |
| Analytics | Analyse anonymised visitor data | Persistent |
How to control cookies Below are links to instructions on how to control Cookies in the mainstream browsers: Google Chrome:
https://support.google.com/chrome/answer/95647?hl=en-GB Microsoft Internet Explorer: https://support.microsoft.com/en-us/kb/278835 Microsoft Edge: https://support.microsoft.com/en-gb/products/microsoft-edge Safari (macOS): https://support.apple.com/kb/PH21411?viewlocale=en_GB&locale=en_GB Safari (iOS): https://support.apple.com/en-gb/HT201265 Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-Cookies-website-preferences Android: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DAndroid&hl=en rewrite
Concerns or Complaints
If you have concerns about how your personal information is handled, you may contact AmaCura Health Services directly using the details above.
You also have the right to raise concerns with the Information Commissioner’s Office.