Privacy Notice GDPR 2018

Rob Jones Consultancy provides Health & Safety Advice to Construction related companies in order that they comply with the Health and safety at Work Act 1974.


In providing this service we inspect personal training records, health surveillance records and personal addresses in order to check the competency of individuals to carry out their work.


Because we collect this information from businesses in order that they [the clients under contract terms] can be checked and verified as working within the law, we process personal data and have an obligation to inform our clients and their employees, contractors and workers how we use this data, how we store and what we intend to do with it. 


  1. Who we are, and what do


Rob Jones Consultancy provide a consultancy service to small and medium sized business based in construction to ensure their compliance under Law.


We gather information on safety systems and individuals and assess their competency levels to carry out their working duties safely and with minimum risk of injury to themselves and others that may affected by their work. 


We share this information with the employers and other competency agencies such as trainers and training organisations to provide further training and education.  Depending on the company and its registration requirements there may be a requirement to share some personal data with accreditation bodies under the Safety Systems in Procurement Scheme (SSiP) e.g. CHAS, SMAS or Constructionline. 


In the event of an accident or incident that is reportable to the Health and Safety Executive (HSE) under the Reporting of Disease and Dangerous Occurrence Regulations (RIDDOR) we will share individual’s data who are involved, as is required under the Management of Health and Safety at Work Regulations.


    2.Whose and What Personal information do we hold?


We hold a variety of information on Employees, Contractors and Workers on behalf of our Clients, such as: 


  • Name, Date of Birth and Gender

  • Unique Reference Numbers from Training Organisations

  • National Insurance Numbers

  • Director Information from Companies House

  • Language information

  • Educational History

  • Specific Industry Qualifications

  • Non-Conformance information

  • Disciplinary and Employee Records



   3. Where does the information come from?


Our Clients, under our contract terms provide us with all necessary information for Rob Jones Consultancy to ensure the company’s compliance to the Health and Safety at Work Act 1974 and associated legislation.


   4. What we will do with your personal information?


We will use this information for the following purposes:


  • To support our contracted clients in their continued compliance to the Health and Safety at Work Act 1974

  • To report accidents and incidents under RIDDOR to the HSE

  • To ensure training and education systems are up to date

  • To ensure the health surveillance of client’s employees, contractors and workers

  • To report areas of non-compliance to our clients


   5. What is the legal basis for the use of this information?


Data Protection Law states: [we] are allowed to use and share personal information only where we have a proper and lawful reason for doing so.


Our lawful basis for processing personal information is to undertake our duties under The Health and Safety at Work Act 1974 and the Management of Health & Safety Regulations as well as contract terms with our clients. 


   6. Does the organisation share your personal information ?


In order for the company to carry out its legal duties in the event of an accident or incident under RIDDOR we will share your information with the Health and Safety Executive. 


   7. How long will we retain your information?


We are obligated to keep records for a minimum of seven years on a rolling basis for as long as the business has a relationship with the employer, contractor or Government agency such as the HSE. 


   8. Your information, Your rights


The General Data Protection Regulation (GDPR) gives you important rights, including the right to access the personal information the company holds about you. 


You can request access to your records by contacting us via our contact page: