PRIVACY POLICY
Effective Date: May 2026 | Last Updated: May 2026
Work Health Strategy (“Company”, “we”, “our”, or “us”) is committed to protecting personal data and maintaining the highest standards of privacy, confidentiality, and data protection. This Privacy Policy explains how we collect, use, process, store, and protect personal information in connection with our website, consulting services, occupational health services, workplace wellbeing programs, corporate communication, and related professional activities.
Legal & Regulatory Compliance
This Privacy Policy has been prepared in accordance with:
- the European Union General Data Protection Regulation (“GDPR”)
- the Swiss Federal Act on Data Protection (“FADP” / “DSG”)
- applicable international privacy and confidentiality standards
The GDPR establishes rules regarding the processing and free movement of personal data within the European Union. gdpr.eu. Switzerland maintains an independent and modernized data protection framework through the revised FADP. edoeb.admin.ch.
1. Company Information
Work Health Strategy
Email: [email protected]. Website: www.workhealthstrategy.com. For questions regarding this Privacy Policy or data protection matters, please contact us using the information above.
2. Scope of This Privacy Policy
- Website Visitors: website visitors
- Corporate Clients: corporate clients
- Business Partners: business partners
- Employees: employees of client organizations
- Webinar Participants: webinar participants
- Individuals Contacting Work Health Strategy: individuals contacting Work Health Strategy
- Professional Consulting Engagements: professional consulting engagements
- Occupational Health & Workplace Wellbeing Services: occupational health and workplace wellbeing services
This Privacy Policy applies to all interactions conducted online, electronically, or in the course of professional business activities.
3. Commitment to Privacy and Confidentiality
Work Health Strategy recognizes that trust, confidentiality, and responsible handling of information are essential components of professional occupational health and consulting services.
- processing personal data lawfully and transparently
- limiting data collection to necessary information
- maintaining appropriate technical and organizational safeguards
- protecting confidentiality
- preventing unauthorized access, misuse, disclosure, or loss of personal data
4. Categories of Personal Data We Collect
4.1 Identification Information
Depending on the nature of the professional relationship, we may collect limited categories of personal information including:
- first name
- last name
- date of birth
4.2 Professional Information
- company name
- job title or position
- professional contact information
- business communication details
4.3 Communication Information
Information voluntarily provided through:
- email communication
- website contact forms
- online meetings
- professional networking platforms
- business inquiries
4.4 Technical and Website Information
When visiting our website, certain technical information may be automatically collected, including:
- IP address
- browser type
- operating system
- device information
- website usage statistics
- session information
- date and time of website access
This information is used primarily for security, operational, and website performance purposes.
5. Data We Generally Do Not Collect
Work Health Strategy generally does not collect or process:
- detailed medical records
- medical diagnoses
- psychotherapy documentation
- sensitive clinical health records
- biometric data
- highly sensitive personal information unrelated to professional service delivery
Any limited wellbeing-related information voluntarily shared during professional consultations is treated with strict confidentiality and processed only where necessary for legitimate professional purposes.
6. How Personal Data Is Collected
Personal data may be collected through:
- direct communication
- corporate client onboarding
- website inquiries
- professional meetings
- webinars and training sessions
- business networking interactions
- consulting engagements
- occupational health consultations
We collect information directly from individuals or authorized corporate representatives.
7. Purposes of Processing
Personal data may be processed for the following legitimate business and professional purposes:
7.1 Professional Service Delivery
Including:
- occupational health consulting
- workplace wellbeing programs
- organizational health initiatives
- leadership wellbeing services
- psychosocial workplace assessments
- professional communication and coordination
7.2 Client Relationship Management
Including:
- responding to inquiries
- scheduling meetings
- maintaining business relationships
- administrative coordination
- customer support
7.3 Business Administration
Including:
- invoicing
- accounting
- legal compliance
- internal reporting
- operational management
- risk management
7.4 Website Operations and Security
Including:
- maintaining website functionality
- monitoring cybersecurity
- improving website performance
- ensuring operational stability
8. Legal Basis for Processing (GDPR)
Where GDPR applies, personal data is processed on one or more of the following legal grounds:
8.1 Legitimate Interests
Including:
- professional business operations
- client relationship management
- communication
- service improvement
- operational security
8.2 Contractual Necessity
Processing necessary for:
- consulting agreements
- service delivery
- professional engagements
- contractual obligations
8.3 Legal Obligations
Processing necessary to comply with:
- tax obligations
- accounting requirements
- regulatory obligations
- legal claims or dispute resolution
8.4 Consent
Where required by applicable law, consent may be obtained for:
- marketing communication
- newsletters
- cookies
- optional participation activities
Consent may be withdrawn at any time.
9. Confidentiality and Professional Standards
All information shared with Work Health Strategy is handled in accordance with professional confidentiality principles. Access to personal information is restricted to authorized individuals who require access for legitimate professional or operational purposes. We maintain internal safeguards designed to protect confidentiality, integrity, and appropriate handling of personal data.
10. Data Sharing and Third Parties
Work Health Strategy does not sell personal data.
Personal information may be shared only where necessary with carefully selected service providers supporting:
- IT infrastructure
- website hosting
- communication systems
- scheduling systems
- accounting services
- legal advisory services
- cybersecurity and operational support
Third-party providers are expected to maintain appropriate confidentiality and data protection standards.
11. International Data Transfers
As an international consulting business personal data may occasionally be processed outside the country of origin.
Where personal data is transferred internationally, Work Health Strategy implements appropriate safeguards designed to ensure adequate protection in accordance with:
- GDPR requirements
- Swiss FADP requirements
- recognized international transfer mechanisms
The European Commission recognizes Switzerland as providing an adequate level of data protection. ec.europa.eu.
12. Data Retention
Personal data is retained only for as long as reasonably necessary for professional service delivery, legitimate business purposes, legal compliance, dispute resolution, and contractual obligations. When information is no longer required, appropriate measures are taken to securely delete or anonymize the data.
13. Cookies and Website Technologies
Our website may use cookies and similar technologies for:
- website functionality
- operational performance
- analytics
- security
- user experience optimization
Users may configure browser settings to refuse non-essential cookies where permitted. Where legally required, cookie consent mechanisms may be implemented.
14. Data Security Measures
Work Health Strategy implements reasonable technical and organizational safeguards designed to protect personal data against unauthorized access, accidental loss, misuse, disclosure, destruction, or alteration.
- secure systems
- restricted access controls
- password protection
- encrypted communication where appropriate
- software maintenance and monitoring
Despite reasonable efforts, no digital system can guarantee absolute security.
15. Rights of Individuals Under GDPR
Where GDPR applies, individuals may have the right to:
- request access to personal data
- request correction of inaccurate information
- request deletion of personal data
- object to processing
- request restriction of processing
- request data portability
- withdraw consent where applicable
Requests may be submitted using the contact information listed below. Individuals also have the right to lodge a complaint with a competent supervisory authority within the European Union.
16. Swiss Data Protection Notice
For individuals located in Switzerland, personal data is additionally processed in accordance with the Swiss Federal Act on Data Protection (FADP/DSG).
- information regarding personal data processing
- correction of inaccurate information
- deletion where legally applicable
- clarification regarding processing activities
The Swiss Federal Data Protection and Information Commissioner supervises compliance with Swiss data protection requirements. edoeb.admin.ch.
17. Third-Party Websites
Our website may contain links to external websites or third-party services. Work Health Strategy is not responsible for third-party privacy practices, external website content, or external security standards. Users should independently review the privacy policies of third-party websites.
18. Updates to This Privacy Policy
Work Health Strategy reserves the right to update or modify this Privacy Policy at any time to reflect legal developments, operational changes, regulatory updates, or technological improvements. The most current version will always be available on our website.
19. Contact Information
Work Health Strategy. For any privacy-related inquiries, requests, or concerns, please contact us directly via email.
