This page contains details of our service providers that handle personal data relating to the personnel of our prospects, customers and suppliers. We may act as a controller or a processor for such personal data.
Table 1 contains details of our subprocessors – that is, those service providers that handle personal data for which we act as a processor.
Table 2 contains details of our other service providers, including some that act as controllers in their own right.
Table 1: Subprocessors (i.e. service providers processing personal data for which we act as a processor) |
|||||
| Name | Data Subjects | Processing Purpose | Data to be Processed | Data Location | Notes / Further Reading |
|---|---|---|---|---|---|
| Barracuda Networks, Inc | Personnel of our customers and customer suppliers | Email security (Barracuda Advanced Threat Protection) Backup of data (Barracuda Backup, Barracuda Cloud-to-Cloud Backup) |
Names, contact details, IP address, correspondence | UK, EU (Ireland and Germany) |
https://www.barracuda.com/company/legal/trust-center/security-compliance https://assets.barracuda.com/assets/docs/dms/Barracuda_Backup_Appliance_Security_Overview.pdf |
| Duo Security LLC / Cisco Systems, Inc | Personnel of our customers | Duo multi-factor authentication (MFA) services | Names, usernames, email addresses, sign-in locations | UK | |
| Microsoft Corporation | Personnel of our customers and customer suppliers | Cloud hosting, data storage and infrastructure provider (Azure) | Any personal data stored by customers in relation to which these services are used | UK |
https://www.microsoft.com/licensing/terms/product/PrivacyandSecurityTerms/ |
| ScalePad Software Inc | Personnel of our customers | Device inventory reporting software and device descriptions may contain names of staff (ScalePad Lifecycle Manager) | Names, contact details, IP address | EU, USA |
https://app.scalepad.com/pages/terms |
| Sophos Limited | Personnel of our customers | Network, server and endpoint security | Names, usernames, device identifiers | EU (Ireland) | |
Table 2: Other service providers (i.e. service providers processing personal data for which we act as a controller) |
|||||
| Name | Data Subjects | Processing Purpose | Data to be Processed | Data Location | Notes / Further Reading |
|---|---|---|---|---|---|
| Datto, Inc | Personnel of our prospects and customers | Autotask PSA : CRM and customer service ticketing software used to log and respond to all support related enquires | Names, contact details, responsibilities, correspondence | UK |
https://www.datto.com/legal/autotask-european-data-processing-addendum-en |
| DocuSign, Inc | Personnel of our customers | The electronic signing of agreements with customers; storage of agreements | Names and contact details | EU (France, Germany, and the Netherlands) | |
| Gamma Telecom Ltd | Personnel of our prospects, customers and suppliers | VoIP telecommunications | Names, work email addresses, mobile numbers | UK | |
| GoCardless Ltd | Personnel of our customers | Processing payments via direct debit | Names, contact details, transaction and payment details | UK and EEA |
GoCardless acts as a controller for this data. See: |
| Google, Inc | Website visitors | Google Analytics website engagement tracking | IP address, website activity | International |
Google acts as a controller for this data. See: https://policies.google.com/privacy?hl=en Cross-border transfers rely upon the EU’s standard contractual clauses: https://policies.google.com/privacy/frameworks?hl=en-US |
| Microsoft Corporation | Personnel of our customers and suppliers | Microsoft Office 365 suite is used for email exchange and administrative document storage | Names, contact details, correspondence | Exchange (Email) in the EU SharePoint in the UK Microsoft Teams in the EU |
https://www.microsoft.com/licensing/terms/product/PrivacyandSecurityTerms/ |
| Sign In App Ltd | Building visitors | Attendance record for fire safety and general visitor management | Name, photo, vehicle registration, purpose of visit | UK | |
