Privacy notice

Lavender Medical Limited, 646 Blackhorse Road, Letchworth Garden City, SG6 1HD. Company No. 06828106.

Details of the requesting organisation, including its legal name, registration number and registered address. Contact details for the person submitting the request and the name and job title of the authorised signatory. The details of the request itself, including the amount, the programme, the educational need, the intended beneficiary groups and the selection process. Any documents you attach. The declarations you confirm, together with the date and time, the IP address and the browser user agent used to submit them.

We do not ask for bank details on this form. If a request is approved, payment details are collected separately and verified independently. We do not ask which Lavender Medical products your organisation uses or intends to buy. We do not ask for the names of proposed individual beneficiaries, and you should not supply them.

Legitimate interests — assessing, deciding and recording your request, and administering any grant that results. Our interest is in operating a documented and consistent grant process; the information asked for is limited to what that assessment requires.

Legal obligation — financial and anti-bribery record keeping, including our obligations under the Bribery Act 2010 and applicable accounting and tax law.

Submissions are received by our regulatory and finance team and are reviewed only by that team. They are not shared with Lavender Medical sales representatives, and representatives have no involvement in, and no influence over, grant decisions.

Beyond that, information is disclosed only to our external auditors and legal advisers where they need it, and to service providers who host this form and its attachments on our behalf under contract. We do not sell the information or use it for marketing.

Where a request is approved, Lavender Medical publicly discloses the grant at organisation level: the name of the recipient organisation, the purpose and the amount. Individual beneficiaries are not named in that disclosure, because we do not collect their names.

Seven years from the date of the decision, or from the date of final payment where a grant is made. Records of a request are not deleted before then, because the file is the evidence that the decision was properly made and documented.

Where an eligibility question means we cannot accept a request, the submission is not stored at all. We keep only an anonymous count of how many requests were stopped, and for which reason.

Under the UK GDPR you have the right to ask for a copy of the personal data we hold about you, to have inaccurate data corrected, and in some circumstances to ask us to restrict or object to our processing or to erase the data. Where processing rests on our legitimate interests, you may object on grounds relating to your particular situation. Rights that would conflict with our legal record-keeping obligations may be limited for as long as those obligations apply.

To exercise any of these rights, write to the Data Protection contact at Lavender Medical Limited, 646 Blackhorse Road, Letchworth Garden City, SG6 1HD, or email privacy@lavendermedical.com.

If you are not satisfied with our response, you can complain to the Information Commissioner’s Office at ico.org.uk.

While you are filling in the form, your answers are saved in your own browser on your own device, so that you can close the tab and come back to a part-finished request. Those answers are not sent to Lavender Medical, and we cannot see them unless you submit.

Documents are the exception. A file is uploaded to our storage as soon as you attach it, before you submit, so that it is still there when you come back. If you attach a document and then abandon the request, that file stays with us. Write to the address below quoting the file name and we will delete it.

Saved answers are cleared when you submit. You can clear them yourself at any time by choosing “Start again” when you return to the form, or by clearing your browser’s site data. If you are using a shared or public computer, submit or clear the draft before you leave.

Choosing “Save and finish later” is different: your answers are then stored on our systems as well, so that you can come back to them from another device. We email you a link and a password to reopen them.

A saved request is kept for 30 days from the last time you saved it, and is then deleted automatically along with anything you attached. Saving again resets the 30 days. It is not a submitted request — nobody reviews it, and it does not reach our regulatory and finance team unless you go on to submit it.

We store only a one-way fingerprint of the link and of the password, never the values themselves, so a copy of our records would not let anyone open your saved request. If you want it removed sooner than 30 days, write to the address below.

The submit step uses Cloudflare Turnstile to distinguish people from automated traffic. Cloudflare processes limited technical data for that purpose. Turnstile does not track you across sites and does not serve advertising.