Last updated: 2026-03-10
Subprocessors
This list is separated for website and service processing for clarity.
Website
| Vendor | Purpose | Data categories | Region/country | Privacy policy |
|---|---|---|---|---|
| Cloudflare | DNS, CDN, TLS termination, security filtering, website question intake processing, and minimal intake audit storage | IP address, browser metadata, URLs, request timestamps, website question metadata, and submitted message content where needed for delivery/re-drive | Global (Cloudflare edge footprint, mainly UK/EU/US regions) | https://www.cloudflare.com/privacypolicy/ |
| Google Workspace | Email intake for website enquiries and contact notifications | Email address, names, message body, support metadata | Global (Google services infrastructure, EU/US regions) | https://workspace.google.com/terms/user_privacy_and_security/ |
Service
| Vendor | Purpose | Data categories | Region/country | Privacy policy |
|---|---|---|---|---|
| Cloudflare | API transport protection and delivery controls for service endpoints | Service request metadata, API path metadata, request timestamps | Global (Cloudflare edge footprint, mainly UK/EU/US regions) | https://www.cloudflare.com/privacypolicy/ |
| eBay | Commerce platform API gateway for payout and settlement reads | Payout IDs, settlement references, financial totals, tenant link IDs | eBay service region for API processing (primarily US/EU) | https://www.ebayinc.com/company/privacy-policy/ |
| Xero | Destination accounting API for posting payout journals | Journal references, tenant identifiers, mapping metadata, posting outcomes | Xero-hosted region(s) used for customer data processing | https://www.xero.com/uk/privacy/ |
| Amazon Web Services | Core hosting and application compute via Amazon ECS on AWS Fargate | Service runtime metadata and encrypted application state as required | eu-west-2 | https://aws.amazon.com/privacy/ |
| Amazon Web Services | Managed database and backup retention via Amazon RDS for PostgreSQL | Tenant linkage records, processing state, posting and audit records | eu-west-2 | https://aws.amazon.com/privacy/ |
| Amazon Web Services | Scheduled and retry job queueing via Amazon SQS | Job metadata, retry state, processing identifiers | eu-west-2 | https://aws.amazon.com/privacy/ |
| Amazon Web Services | Operational logging, metrics, alarms, and email alerting via Amazon CloudWatch and Amazon SNS | Security events, operational logs, incident and support metadata | eu-west-2 | https://aws.amazon.com/privacy/ |
Governance
- We publish updates here when processors change.
- We keep the DPA and this page aligned.
- Website processors and live platform endpoints are listed above.
- Material changes are published with reasonable notice before rollout.
Support and reporting
- Contact for processor updates: info@salestoaccounts.co.uk