We are The Change Lab Limited company number: 10096475.
What data do we collect?
As part of research projects we often collect personal data to help us to do our work. This includes things like:
In research sessions you will be invited to share your experiences and opinions with us. You will always have the option to not answer any question and to choose which data you share with us.
Some of the data we collect as part of research projects is called "special category data". This includes information about your health, ethnicity or income. We collect this data so that we can help our clients to understand the barriers that people face to getting the healthcare or support they need so that they can work to improve it. You can always choose not to share this data with us.
Why we collect the data
We only collect the information we need for each project.
We need information like your name and contact details so that we can contact you for research.
We need information about your health, ethnicity and opinions so that we can understand user needs and share this back to our clients.
We will always ask for your permission to take part with a consent form and you will be given choices about what to share.
How we use your data
We combine the things you tell us (your opinions and experiences) with what other people in the research also tell us. When combined your data becomes anonymised so that if someone read it they would not know it was your data. We may use some of the things you tell us in research sessions as 'quotes' for the research. We check these for any information that could personally identify you before including them.
Who we share your data with
We may share your data with the research team (including other researchers working on the project) - this might include other freelancers or independent researchers.
The research team never share your name or contact details with anyone who is not leading sessions on the project.
With your permission we share anonymised notes and transcripts with the client.
We write the combined, anonymised data into a report for our client.
We may use trasncription tools like Otter in the sessions. Some of these might be based outside the UK/EEA but we only use services that are certified GDPR compliant.
How long we keep your data
In your consent form we'll always tell you how long we'll keep data for. It is usually 90 days, unless the project is running for a long time. You can check this information in your consent form.
After this data is deleted from The Change Lab's systems.
Your rights
You have the right to access your data or ask for us to delete it. email us at MyData@thechangelab.co.uk
Security measures
We use 2FA on all our digital services. We never store your name or identifiable details with your session notes. We use encrypted data services that are GDPR compliant.
Contact for questions or complaints
If you have any questions about this Policy or your data please contact us on MyData@thechangelab.co.uk
Last updated: August 2026