Suppliers and Sub-Processors
The categories of provider we rely on, what each one does, and how to get the named list.
Suppliers and Sub-Processors
Last updated
We publish this because a supplier list is one of the first things a client’s data protection or procurement team asks for, and because a privacy policy that says "we use service providers" without saying which is not really transparency. It covers providers who may handle personal data on our instructions.
-
1 How to read this list
Each entry below describes what a provider does and why we need it. We name the specific providers on request rather than on this page, so that the named list we give you is the current one and is the same list that appears in your processing agreement. Email [email protected] and we will send it. We will also tell you before we add or change a provider that handles your data.
-
2 Website hosting and infrastructure
Runs the servers and content delivery that serve this website and the client sites we host. Necessarily handles anything submitted through a website, and generates the standard server logs described in our privacy policy, including IP addresses.
-
3 Business email
Delivers and stores our own email, and the email hosting we provide to clients. Handles the content of correspondence and the contact details in it.
-
4 Cloud platform
Provides the compute, storage and database services that bespoke applications and client systems run on. Handles whatever data those systems hold.
-
5 Client work tracking
The system we use to keep track of enquiries, projects and correspondence once an enquiry becomes an active conversation. Holds names, contact details and the history of a project.
-
6 Backup and disaster recovery
Stores encrypted copies of hosted systems so they can be restored after a failure. Holds whatever the source system holds, for the retention period we agree with you.
-
7 Content delivery and web fonts
Outfit and Inter, the two typefaces this website is set in, are served together with the site’s stylesheets, scripts and images from our content delivery network, operated by BunnyWay d.o.o. (Bunny.net). It receives the request for each file, which includes the requesting IP address. It sets no cookie and receives nothing you type.
-
8 Network protection and routing
Every request to this website passes through Cloudflare, Inc., which protects the site against attacks and routes traffic to our servers. It sees the requesting IP address and the page requested, and passes on what you submit through a form. It also tells us the approximate location (town, region and country) we record with an enquiry. Cloudflare is based in the United States, and the transfer is covered by the safeguards described in our privacy policy.
-
9 What is not on this list
No analytics platform, no advertising or marketing platform, no data broker, no enrichment or lead-generation service, and no artificial intelligence service that trains on the data we send it. We use AI tools in our own design and development work, and we do not put client personal data into them.