This list was last updated 29th May 2018. In order to obtain the best combination of service, capability and security, we will update our third-party processors from time to time. An updated list will be posted here.

Major changes will be preceded by our own data protection impact assessment.

Sub-Processor Name Data Subjects Processing Purpose Data to be Processed Storage Location
Autotask Staff of our clients Administering sales and support processes Contact details, responsibilities, correspondence UK
IT Glue Staff of our clients Administering support processes Contact details, responsibilities Germany
Microsoft (Office 365 & Dynamics) Staff and customers of our clients; prospects Email, SharePoint development, prospecting, Nexus document storage for performance of a contract Contact details, correspondence, potentially our clients' customer data UK/EU
Finance Software (Current) Staff of our clients Financial record-keeping, payments Contact details On premises (UK)
Finance Software (Planned) Staff of our clients Financial record-keeping, payments Contact details US data centres with EC model contract clauses.
GoCardless (Direct Debit) N.B. as Joint Data Controllers Name/contact details for direct debit account Processing payments, security Contact, bank and financial information. Sub-processed as necessary for payments. London-based but international network
Communigator Staff of our clients Email marketing and website engagement tracking Contact details, web activity tracking UK data centre
Google Analytics Website visitors Website engagement tracking IP address, activity International but under EU-US privacy shield
Suppliers
N.B. Some will be joint controllers
Staff of our clients Provision of goods or services Typically contact information. Depends upon the service Varies. See ‘International Transfers’ in our privacy notice.
Contractor Engineers Staff and customers of our clients Administering support processes Contact details, correspondence, potentially the controller’s customer data EU

 

 

Go to our privacy notice or privacy and data protection advice page