Formerly Medi2data we have rebranded to Lalu, delivering the next phase of our growth strategy.

Privacy policy

Please find our privacy policy here. If you have any questions regarding the information within this document or wish to speak to us regarding our privacy policy, please email us at dpo@lalu.co.uk, call us on 03333055774 or write to us at the applicable address set out in clause 2 of this policy.

Together with our partners including...

Any questions?

Lalu uses robust technical and organisational security measures, including data encryption, restricted access controls, confidentiality obligations, and secure systems to protect personal data.

Yes. Lalu processes personal data in accordance with UK GDPR, the Data Protection Act 2018, and other applicable privacy regulations. Visit our Home Page for more information on our security and governance accreditations.

Lalu only retains personal data for as long as necessary to provide services and meet legal, regulatory, and contractual obligations. In most cases, information is retained for six years unless instructed otherwise by the relevant Data Controller or where a longer retention period is required by law.

Lalu processes medical records and reports using secure healthcare technology, strict access controls, data encryption, and regulatory-compliant procedures. Medical information is handled in accordance with UK GDPR requirements and healthcare industry best practices to ensure confidentiality, integrity, and security throughout the medical records retrieval and reporting process.