1. Introduction
Usafety provides health and safety consultancy, ergonomic services, and training to a wide range of organisations across the public and private sectors in Ireland.
In the course of delivering our services and operating our website, we process personal data. Usafety is committed to protecting personal data and ensuring that it is processed lawfully, fairly, and transparently in accordance with the General Data Protection Regulation and the Data Protection Act 2018.
2. Who We Are
For the purposes of this Data Protection Statement, Usafety acts as the data controller in respect of the personal data described in this notice, except where otherwise stated.
3. Contact Details
If you have any questions about this Data Protection Statement or how your personal data is used, please contact:
Data Protection Officer
Usafety
Unit 1-2B Glenrock Business Park
Ballybane Industrial Estate
Galway, H91 FF25
Email: info@usafety.ie
Telephone: +353 91 485580 (Galway) | +353 1 2118680 (Dublin)
4. Purpose of this Statement
This Data Protection Statement explains how Usafety collects, uses, stores, shares, and protects personal data relating to:
business contacts (including customers, suppliers, and prospective clients); and
users and visitors to our website.
Personal data means any information relating to an identified or identifiable natural person.
5. Personal Data We Collect
We may collect personal data:
directly from you;
from your employer or organisation;
through our website;
from publicly available sources; or
from third parties where appropriate and lawful.
We only collect personal data that is necessary and proportionate for the purposes outlined in this Statement.
6. Categories of Personal Data
Identification Data
Name, title, and other identifying details where required.
Contact Data
Email address, telephone number, postal address, and business contact details.
Commercial and Service Data
Training records, booking information, job role, and client account details.
Communication Data
Emails, phone calls, messages, video calls, and correspondence.
Marketing Data
Preferences relating to marketing communications.
Financial Data
Billing details, payment records, and relevant financial information.
Website and Technical Data
IP address, browser type, device information, and website usage data.
Health-Related Assessment Data
Limited information relating to discomfort, aches, pains, symptoms, or functional difficulties reported during ergonomic or Display Screen Equipment assessments, where necessary to assess workplace needs and provide recommendations.
7. How We Use Personal Data
Service Delivery
to provide consultancy, ergonomic services, and training;
to carry out Display Screen Equipment assessments, including recording limited health-related or symptom information where necessary;
to manage client relationships and provide support;
to process bookings and registrations;
to issue service updates and communications;
to fulfil contractual and legal obligations;
to manage payments and accounts.
Marketing and Business Development
to send relevant updates, newsletters, and event information where lawful;
to maintain and develop business relationships.
Website Operation
to respond to enquiries submitted via the website;
to improve website functionality and performance;
to support analytics, security, and troubleshooting.
Administration and Compliance
to manage complaints and queries;
to maintain records;
to comply with legal and regulatory obligations;
to protect our legal rights.
8. Display Screen Equipment Assessments and Health-Related Information
As part of Display Screen Equipment and ergonomic assessments, Usafety may record limited information relating to discomfort, aches, pains, symptoms, or functional difficulties reported by the individual where this is necessary to assess workstation suitability and provide appropriate recommendations.
Such information may constitute data concerning health and is treated as special category personal data under the General Data Protection Regulation. This information is processed only where there is a lawful basis under Article 6 GDPR and a valid condition under Article 9 GDPR.
Usafety applies the following safeguards:
only necessary and relevant information is collected;
reports focus on functional impact and ergonomic requirements rather than detailed medical information;
unnecessary medical history, diagnoses, or sensitive detail are not included;
where reports are shared with a manager or coordinator, only information required to implement recommendations is included;
access to such information is restricted to authorised individuals with a legitimate need to know;
appropriate technical and organisational measures are in place to ensure confidentiality and security.
Where possible, reports describe issues in functional terms (for example, discomfort during prolonged screen work or difficulty maintaining posture) rather than including clinical detail.
Coordinator and Manager Visibility: Where an assessment report is provided to a workplace coordinator, manager, or referring contact, the report will be limited to information necessary to explain the ergonomic issues identified and the measures recommended. Unnecessary medical or other sensitive personal detail will not be disclosed.
9. Legal Basis for Processing
We process personal data under the following legal bases:
Contract
Where processing is necessary to fulfil a contract or take steps prior to entering into a contract.
Legal Obligation
Where processing is required to comply with legal or regulatory requirements.
Legitimate Interests
Where processing is necessary for the operation and improvement of our services, provided this does not override your rights.
Consent
Where required, we rely on your consent. You may withdraw consent at any time by contacting info@usafety.ie.
10. Website and Cookies
We may collect technical and usage data through our website to improve services and performance. Further details are provided in our Cookie Notice.
11. Disclosure of Personal Data
We may share personal data with:
service providers supporting our operations (IT systems, hosting providers, communication platforms, payment processors);
accreditation bodies such as SOLAS, QQI, PHECC, and IHFES;
professional advisers, auditors, and consultants;
analytics providers supporting website optimisation;
public authorities where required by law.
All third parties are required to process personal data securely and only for specified purposes.
12. Hosting and International Transfers
Our website and application are hosted on secure cloud infrastructure within the European Economic Area. Personal data is stored on secure servers with appropriate access controls and encryption.
Where personal data is transferred outside the European Economic Area by any of our service providers, appropriate safeguards are applied in accordance with data protection legislation, including Standard Contractual Clauses or adequacy decisions where applicable.
13. Security Measures
We implement appropriate technical and organisational measures to protect personal data from unauthorised access, loss, or misuse.
Access to personal data is limited to authorised personnel and secure systems are used to protect data during storage and transmission.
14. Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including legal, contractual, and regulatory requirements.
Retention periods are determined based on the nature of the data, the purpose of processing, and legal obligations. A more detailed retention schedule may be provided on request.
15. Communication with You
We may contact you by email, telephone, text message, or post where necessary for service delivery, administration, or where lawful for marketing purposes.
16. Your Rights
You have the following rights under data protection law:
Right of access — request a copy of the personal data we hold about you;
Right to rectification — ask us to correct inaccurate or incomplete personal data;
Right to erasure — ask us to erase your personal data in certain circumstances;
Right to restrict processing — ask us to restrict processing in certain circumstances;
Right to data portability — request your data in a structured, machine-readable format;
Right to object — object to processing based on legitimate interests or direct marketing;
Right not to be subject to automated decision-making — where the law gives you that protection.
To exercise your rights, contact info@usafety.ie.
17. Complaints
If you are unhappy with how we process your personal data, you have the right to lodge a complaint with the Data Protection Commission in Ireland or with the supervisory authority in the European Union Member State where you live, work, or believe an infringement has occurred.
18. Updates to this Statement
We may update this Data Protection Statement from time to time. Changes will be published on our website and will take effect from the date of publication.
19. Contact
For any queries or requests regarding your personal data:
Email: info@usafety.ie
Telephone: +353 91 485580 (Galway) | +353 1 2118680 (Dublin)