Sub-processors

Change notification

I review this list quarterly and update it whenever sub-processors change. Existing clients will be notified by email at least 30 days before any new sub-processor is engaged or an existing one is replaced. Clients may object on reasonable data-protection grounds within 30 days of notification. If a reasonable objection cannot be resolved, the affected Services may be terminated without penalty (see §8 of the DPA).

To receive change notifications, email info@nathanoconnor.co.uk with the subject “Sub-processor notifications”.

International transfers

Where Personal Data is transferred outside the United Kingdom, transfers are governed by the applicable transfer mechanism in each sub-processor's own Data Processing Agreement, typically one of:

• An Adequacy decision by the UK government (covers the EEA and a limited list of other countries)
• The UK International Data Transfer Agreement (UK IDTA)
• The European Commission's Standard Contractual Clauses (SCCs) with the UK Addendum issued by the ICO

Copies of the applicable transfer mechanism for any individual sub-processor are available on reasonable request.

Current sub-processors

Vendors are grouped by function. Headquarters and data location reflect the vendor's public disclosures at the time this page was last reviewed.

Contact

For questions about this list, sub-processor due diligence, or to request copies of underlying transfer mechanisms or vendor DPAs:

Nathan O'Connor
Email: info@nathanoconnor.co.uk