What a sub-processor is here
A company we use to run the service that can, in the course of doing its job, touch personal data we hold. Not every supplier is one: a company that never sees the data is not on this list.
Each one is under a written contract with data protection obligations no weaker than the ones we give you, and we stay fully liable to you for what they do. The Data Processing Agreement is where that is written down.
The list
- Stripe
- Payment processing, for two separate things: your subscription to us, and the payments your own customers make to you. Sees the payer's name and email address, the amount, and the card, which it holds so that we never do. Ireland and the United States. Stripe acts as a controller in its own right for its regulatory obligations around fraud and financial crime.
- Resend
- Email delivery. Sees the recipient's address and the content of the message: sign-in codes, allowance warnings, and the booking confirmations we send to your customers on your behalf. United States.
- Sentry
- Error tracking. Receives a technical report when something in the service fails, with email addresses, keys and IP addresses removed before it is sent. Never receives the content of a request. Stored in the European Union by a United States company. For a sample of requests, also timings of the work inside each one, with none of the data it handled.
- Cloudflare Turnstile
- A check that a person rather than a script is asking: on the sign-in and sign-up forms, before an email goes to the address typed in, and on a business's booking page, before a booking is made. Sees the IP address, the browser's user agent and characteristics of the browser, and sets no cookies. United States.
- DigitalOcean, LLC
- Servers and database. Holds everything, because everything is stored there. Frankfurt, Germany. A company based in the United States.
- Backblaze, Inc.
- Off-site backups of the database, kept so the service can be recovered. Holds copies, encrypted before they leave our servers. Amsterdam, Netherlands. A company based in the United States.
- Cloudflare, Inc.
- Storage for the images you upload, such as your website's logo. They are public to anybody with their address. The European Union. A company based in the United States.
- Cloudflare, Inc.
- The network in front of the service. Every request passes through it on the way to our servers, and it protects the service against attacks. It can see each request in full, the visitor's IP address included. Worldwide, at the Cloudflare data centre nearest each visitor. A company based in the United States.
That is the whole list. There is no analytics service, no customer messaging tool, no advertising network, no data broker and no artificial intelligence provider in this stack.
Where the database lives
The service and its data are hosted at DigitalOcean, LLC in Frankfurt, Germany, and the encrypted backups are kept at Backblaze, Inc. in Amsterdam, Netherlands. That is where your content, your appointments, your customer records and your measurement are stored.
Nothing about the data is copied to a third country for our own convenience. Where a company on this list processes data outside Switzerland and the European Economic Area, the Privacy Notice explains the safeguards.
Things that are off unless switched on
A visitor's country, for analytics, comes only from a header added by Cloudflare, Inc., and only where this deployment has chosen to trust it. Without that, no country is recorded.
Changes to this list
We email account holders at least thirty days before adding or replacing a sub-processor. If you object on reasonable data protection grounds within that time we will try to find another way, and if we cannot you may terminate the affected part of the service and get back any unused prepaid period.
This page is the current list and the date at the top is when it last changed.