Privacy Policy

Privacy Policy

Effective Date: 13/04/2026

The Implementation Lab (“we”, “us”, or “our”) is committed to protecting the privacy and security of your personal data. This policy explains how we collect and use your data in compliance with the UK General Data Protection Regulation (UK GDPR).

1. Data We Collect

We may collect and process the following data:

* Contact Information: Name, email address, and phone number.

* Professional Data: Job title and surgery/organisation name.

* Technical Data: Energy bills, EPC ratings, and building data provided for audits.

2. How We Use Your Data

We use your information to:

* Deliver our 30-Day Sustainability Sprints.

* Process grant applications (e.g., BUS Grant) on your behalf.

* Provide verified energy savings reports.

* Communicate regarding your project via our digital portals.

3. Data Sharing

We do not sell your data. We only share data with third parties (e.g., Grant bodies or vetted installers) with your explicit consent as part of the Procurement (P) phase of our V.I.P.ER. framework.

4. Your Rights

Under UK GDPR, you have the right to access, correct, or delete your personal data. You may also object to processing. To exercise these rights, please contact The Implementation Lab at theimplementationlabpm@gmil.com .

5. Data Security

We use secure, encrypted digital tools to ensure that your implementation data is protected from unauthorised access.

  6.   Clinical Data & Patient Privacy

At The Implementation Lab, we operate with NHS clinical empathy. We do not require, nor do we intentionally collect, any Patient Identifiable Information (PII). Our audits are strictly limited to building fabric, utility data, and operational workflows. If any clinical documents are shared with us for context, they must be redacted by the client before transmission.