Partner - Terms and Conditions
Last Updated: 23 June 2026
Effective Date. These Terms take effect from the date the Partner first uses Lola Health Ltd's ("Lola Health") platform or upon mutual written agreement. If the Partner has already been using the platform, or if the partnership has been established in writing, these Terms apply from the date of first use or the date agreed in writing.
1. Definitions
1.1 Confidential Information: Any proprietary or sensitive information shared between Lola Health and the Partner, including business processes, client information, financial data, and technical data.
1.2 Services: Activities and responsibilities agreed between Lola Health and the Partner under these Terms.
1.3 Partner Portal: The platform provided by Lola Health that allows Partners to access services and tools.
1.4 Partner: An individual or entity, such as a clinic, practitioner, employer, creator, or pharmacy, that collaborates with Lola Health to provide or promote health-related services, including blood testing, wellness programmes, and health awareness initiatives.
1.5 Data Sharing Agreement (DSA): The controller-to-controller data sharing agreement between the Parties, summarised in Schedule 1 and published in full at lolahealth.com/pages/partner-data-sharing-agreement.
2. Scope of Work
2.1 Partner Responsibilities
The Partner shall collaborate with Lola Health to provide blood testing and related services under these Terms. Where applicable, the Partner is responsible for ensuring that all samples are correctly collected, labelled, and transported in accordance with clinical and regulatory standards, and must follow best practices to minimise processing delays or errors.
2.2 Lola Health Responsibilities
Lola Health shall provide the Partner with access to the Partner Portal and the resources necessary to facilitate the Partner's agreed responsibilities.
2.3 Agreement on Responsibilities
The specific responsibilities of both Parties, along with any financial arrangements, shall be outlined in writing where applicable.
2.4 Result Review Responsibilities
For Self-Reviewing Partners:
- The Partner is fully responsible for reviewing all test results, including those flagged as priority or urgent, and for taking appropriate action. A self-reviewing Partner acts as an independent controller of the results it reviews and assumes full clinical responsibility for patient communication and any necessary medical intervention.
- Priority/Urgent-flagged results (as flagged by the system, Lab, and/or reviewer) must be reviewed and acted upon within 24 hours.
- All other results must be reviewed as soon as possible and within 72 hours. Any delays exceeding 24 hours must be communicated to both the patient and Lola Health.
- Lola Health doctors will not have access to self-reviewed partner results.
For Results Reviewed by Lola Health Doctors:
- Results will be processed within 72 hours, except for urgent cases, which require immediate action.
- Any delays exceeding 24 hours must be communicated to the patient.
2.5 Priority/Urgent-flagged Results
- The system will flag significantly abnormal results with a "potential urgent/abnormal result" label.
- If the Lab flags a result as abnormal or urgent, it will notify Lola Health directly, and Lola Health is then responsible for informing the Partner.
- If the Partner is self-reviewing, the Partner must take full responsibility for acting on these results and contacting the patient within 24 hours of receiving notification from Lola Health.
- If Lola Health doctors are reviewing, they will handle urgent results in accordance with the agreed review timelines.
2.6 Bank Holidays & Weekends
- If Lola Health doctors are reviewing: the 72-hour timeframe excludes weekends and UK public holidays unless flagged as urgent. Any delays beyond 24 hours (including weekends/holidays) must be communicated to the patient.
- If the Partner is self-reviewing: the Partner remains fully responsible for reviewing results within the 24-hour (priority) and 72-hour (routine) timeframes, even on weekends and public holidays, unless otherwise agreed. Any delays beyond 24 hours must be communicated to the patient.
3. Non-Disclosure
3.1 Obligations:
(a) Confidential Information must be maintained in strict confidence.
(b) Use of Confidential Information is restricted to purposes of collaboration with Lola Health.
(c) Disclosure to third parties is prohibited without prior written consent.
3.2 Exclusions: Confidential Information does not include information that is (a) publicly available at the time of disclosure; (b) made public through no fault of the receiving Party; (c) independently developed without reliance on disclosed Confidential Information; or (d) required to be disclosed by law, with prompt notice given to the disclosing Party.
3.3 Duration: The confidentiality obligations survive termination indefinitely for trade secrets and for five (5) years for all other Confidential Information.
4. Legal Compliance
4.1 Both Parties shall comply with all applicable laws and regulations, including the UK GDPR and the Data Protection Act 2018.
4.2 The Partner warrants that it is legally authorised to act under these Terms and, where it provides clinical services, that it and its personnel hold all necessary professional registrations and regulatory authorisations.
4.3 All marketing and public communications shall comply with applicable UK advertising standards and consumer protection laws.
4.4 Data Protection — Independent Controllers. The Partner and Lola Health each act as independent controllers of the personal data they hold. Where Lola Health discloses patient test results or related personal data to the Partner, the Partner determines its own purposes and means for processing that data after disclosure and is an independent controller of it. The Parties are not joint controllers, and the Partner does not process this data on Lola Health's behalf. The sharing of personal data between the Parties is governed by the Data Sharing Agreement summarised in Schedule 1 and published in full at lolahealth.com/pages/partner-data-sharing-agreement, which the Partner agrees to by registering for or continuing to use the Partner Portal. The Partner warrants that it will: (a) maintain a valid lawful basis under Article 6 and an appropriate Article 9 condition, and satisfy the common law duty of confidentiality, for receiving and using the data; (b) provide its own privacy information to data subjects; (c) keep the data secure using appropriate technical and organisational measures; (d) handle data-subject requests relating to data it holds; and (e) notify Lola Health without undue delay and within 24 hours of becoming aware of any personal data breach affecting data shared under these Terms.
5. Term and Termination
5.1 Term: These Terms remain in effect unless terminated by either Party as described below.
5.2 Termination:
(a) Either Party may terminate these Terms with 30 days' written notice.
(b) Lola Health may terminate immediately in cases of: (i) breach of confidentiality by the Partner; (ii) non-compliance with applicable laws or these Terms by the Partner; or (iii) breach of the Partner's data protection obligations under these Terms or the Data Sharing Agreement.
5.3 Effects of Termination:
(a) Access to the Partner Portal will be revoked, and Lola Health will stop sharing further patient data with the Partner.
(b) All Confidential Information must be returned or destroyed.
(c) The Partner must immediately cease using Lola Health branding, marketing materials, or any references to Lola Health in promotional content.
(d) Outstanding payments or obligations must be settled within 30 days of termination, and any prepaid service fees will be refunded on a pro-rata basis unless termination is due to a material breach by the Partner.
(e) Patient data already lawfully provided to the Partner may be retained by the Partner as part of its own records to the extent required by its clinical and legal obligations; the confidentiality obligations in Section 3 survive termination.
6. Indemnity
6.1 The Partner agrees to indemnify and hold Lola Health harmless from any claims, damages, fines, penalties, or liabilities arising from the Partner's breach of these Terms, the Partner's breach of its data protection obligations as an independent controller, or the Partner's non-compliance with applicable laws. If a sample needs to be recollected due to a Partner error, the Partner must arrange a replacement collection at no additional cost to the patient or Lola Health, handle any related patient complaints, and take reasonable steps to prevent recurrence. Where the Partner is responsible for reviewing/approving a result and fails to do so within 24 hours of the result being created, Lola Health is not responsible for any claims arising from that delay.
6.2 Lola Health agrees to indemnify and hold the Partner harmless from any claims, damages, or liabilities arising from Lola Health's own breach of these Terms or legal violations.
7. Limitation of Liability
7.1 Liability Cap: Except for liability arising from wilful misconduct, fraud, breaches of confidentiality, or unauthorised disclosure of patient data, neither Party shall be liable for damages exceeding the total fees paid under these Terms in the last 12 months prior to the claim. The cap does not apply to fines, penalties, or liabilities arising from a Party's failure to comply with applicable data protection laws.
7.2 Exclusion of Indirect Damages: Neither Party shall be liable for indirect, incidental, special, or consequential damages, including lost profits or business opportunities.
8. Governing Law
The laws of England and Wales govern these Terms, and any disputes are subject to the exclusive jurisdiction of the courts of England and Wales.
9. Entire Agreement
These Terms, together with the Data Sharing Agreement, represent the entire agreement between the Parties and supersede any prior agreements on the subject matter. If any provision is found to be invalid or unenforceable, the remaining provisions remain in full effect.
10. Operational Responsibilities
Lola Health: (a) provide access to the Partner Portal and ensure its functionality; (b) offer training and support; (c) communicate timely updates regarding services or systems.
Partner: (a) use the Partner Portal solely for the purposes agreed; (b) maintain accurate records and provide timely reporting; (c) ensure compliance with all applicable healthcare regulations, data protection laws, and these Terms.
Both Parties shall collaborate to resolve issues and improve service delivery and shall protect the confidentiality and security of shared data. Nothing in this section makes the Parties joint controllers.
11. Company Information
Lola Health is the trading name of Lola Health Ltd, a company registered in England and Wales under Company Number 15961806, with its registered office at 167-169 Great Portland Street, 5th Floor, London W1W 5PF.
By continuing to use Lola Health's platform or upon mutual written agreement, the Partner acknowledges and agrees to these Terms and Conditions. Questions or concerns: [email protected].
Schedule 1 — Data Sharing Agreement (Controller-to-Controller)
1. Purpose. This Schedule governs the sharing of personal data, including special category health data, between Lola Health and the Partner. Each Party is an independent controller of the data it holds and is responsible for its own compliance with the UK GDPR and the Data Protection Act 2018.
2. Roles. The Parties are independent controllers, not joint controllers, and neither processes the shared data on behalf of the other. Where the Partner separately acts only as a processor for Lola Health for a specific defined activity, that activity will be covered by a separate Article 28 processor agreement and is not governed by this Schedule.
3. Lawful basis and transparency. Each Party is responsible for ensuring it has a lawful basis under Article 6 and an appropriate Article 9 condition for its processing, for satisfying the common law duty of confidentiality, and for providing its own privacy information to data subjects.
4. Data security. Each Party shall implement appropriate technical and organisational measures to protect the shared data against accidental loss, alteration, or unauthorised access.
5. Personal data breaches. The Partner shall notify Lola Health without undue delay and within 24 hours of becoming aware of any breach affecting data shared under these Terms, providing details of the breach, the data affected, and the mitigation taken, and shall cooperate with Lola Health. Each Party is responsible for making its own regulatory and data-subject notifications.
6. The Partner's own processors. Where the Partner engages a processor to process the shared data, the Partner remains fully responsible for that processor and shall ensure it is bound by Article 28-compliant terms.
7. Data subject rights. Each Party shall handle, and provide reasonable assistance to the other in relation to, data-subject requests concerning the data it holds.
8. Retention and deletion. Each Party shall retain the shared data only for as long as necessary for its own lawful purposes and in line with its legal and clinical record-keeping obligations, and shall securely delete or anonymise it when no longer required.
9. Governing law. England and Wales.
This Schedule summarises the Data Sharing Agreement. The full Data Sharing Agreement is published at lolahealth.com/pages/partner-data-sharing-agreement and is incorporated into these Terms; by registering for or continuing to use the Partner Portal, the Partner agrees to it. Where the Partner has signed a separate executed copy, that copy prevails in the event of conflict.