Data processor registry

You have a right to be informed about how we process your personal data. One of our core organizational values is transparency, and in that spirit, we attempt to go above and beyond the required level of detail when we tell you how your data are used.

This page serves as a registry of every third-party data processor ("service provider") whose services we use when processing your personal data. For each processor, we include all of the ways in which we process your data with that service provider, the purposes of the processing, under what lawful basis we justify its use, details about whether your data may be transferred outside the UK or EEA (and, if so, how it is protected), the retention period, how to withdraw your consent (and whether it's applicable), and more.

In some cases, we may use the same service provider for processing different personal data, potentially under a different lawful basis, with a different retention period, etc. When this happens, we will create a distinct entry in the registry for each type of processing we perform using that provider's services.

When possible, we will provide links to our data processing agreements (DPAs) with these service providers, in addition to any relevant documentation from the service provider about how your data is processed, how international transfers are protected, etc. (Note that these are third party links. We are not responsible for their accuracy, and they are provided on a best-effort basis.)

We will keep this page up to date as our processing needs change and we add or remove service providers. We will note, for each provider, when we last updated the information in the registry, so that you may be informed when we make such changes.

We hope this level of transparency helps inform your choices about what personal data you wish to share with us.

Service providers who do not process personal data

It may be the case that our Cookie Policy mentions some third-party cookies that we use from providers who are not listed in this registry. In these cases, these are either service providers whose cookies do not collect any personal data, or for whom we are not the data controller, meaning that the service provider does not share any personal information they collect from you with us. As these service providers do not serve as data processors for us, they don't appear here in the data processor registry.

Contact us

If you have any questions about this registry, or if you believe any of the information listed here to be insufficient or incorrect, please contact us at [email protected].