Last updated: 28 September 2026
This Data Processing Agreement ("DPA") forms part of the agreement under which a client business (the "Client", as controller) uses Lola Dispatch, operated by Lola Health Ltd (Company No. 15961806, registered office 167-169 Great Portland Street, 5th Floor, London W1W 5PF) as processor ("we", "us"). Where the Client has signed a separate data processing agreement with us, that agreement takes priority.
We process personal data of the Client's patients or customers, including contact details, visit details and health information needed for a visit, to arrange and carry out blood collection visits the Client books, for as long as the Client uses Lola Dispatch. We process it only on the Client's documented instructions, given through its use of the platform and this DPA, unless the law requires otherwise, and will tell the Client if we believe an instruction breaks data protection law. The Client is responsible for having a lawful basis for the processing it instructs.
Collection partners who carry out a visit act as independent controllers for the data they receive.
The Client gives general written authorisation for us to engage sub-processors. We impose equivalent data protection obligations on them and remain responsible for their performance. Our current list is available on request. We will tell the Client about any intended addition or replacement, and the Client may object.
Where data is transferred outside the UK we use safeguards permitted by UK data protection law.
When the Client stops using Lola Dispatch we will, at its choice, return or delete its personal data, except where the law requires us to keep a copy.
This DPA is governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction.