Sub-processors
Last updated: 12 September 2026
When we build, host or maintain something for you, we handle personal data on your behalf. That makes you the controller and us the processor, and it means we owe you a written account of who else is involved. This page is that account.
Everything listed here is engaged under our processor terms, which set out what we may do with your data and what happens when something goes wrong. Each provider is bound by written terms no less protective than the ones we give you, and we stay responsible to you for what they do.
Who we use
| Provider | What it does | What it touches | Location and transfers |
|---|---|---|---|
| Vercel Inc.Delaware, United States | Hosts your website and serves it to visitors. | Visitor IP addresses and request metadata in server logs. Form submissions pass through in transit. | Sites are served from Vercel’s London region, so requests and the resulting logs are processed in the United Kingdom. Covered by Vercel’s data processing addendum, which applies the UK international data transfer terms alongside the EU standard contractual clauses. |
| Plus Five Five, Inc.trading as ResendSan Francisco, United States | Delivers the email generated when a visitor submits a form on your website. | Name, email address and the content of the message, together with delivery metadata. | Processing takes place primarily in the United States. Covered by Resend’s data processing agreement, which incorporates the standard contractual clauses as amended by the UK Addendum. |
| Google Ireland LimitedGoogle WorkspaceGordon House, Barrow Street, Dublin 4, Ireland | Our business email, through which enquiries and correspondence are received and held. | The content of email correspondence. | The contracting entity for a United Kingdom billing address under the Google Workspace agreement. Covered by Google’s Cloud Data Processing Addendum. Data location depends on the configuration of the account. |
| Google Cloud DNSunder the Google Cloud agreementEntity per that agreement | Answers domain lookups for the sites we run. | DNS query metadata, which can include the enquirer’s network address. | Covered by Google’s Cloud Data Processing Addendum. A different Google agreement from Workspace above, so a different contracting entity. |
Where you host it yourself
Plenty of our work runs inside systems you already own. If we build an automation across your own Google Workspace, or we are given a login to a site you host elsewhere, that provider is your processor rather than our sub-processor. We are not introducing a new party, we are working inside one you already chose. What we owe you there is care with the access you have given us, and we give that access up at the end of the engagement.
Changes to this list
We give at least fourteen days' written notice before we add or replace anyone on this list. If you object on reasonable data protection grounds within that time and we cannot resolve it between us, you can end the affected part of the work without penalty.
If you want to be told directly rather than checking this page, email hello@staxxd.co.uk and we will add you to the notice list.
Who we are
STAXXD LTD, registered in England and Wales under company number 17309142, registered office 128 City Road, London, EC1V 2NX. Registered with the Information Commissioner's Office under reference ZC242922 (as Staxxd Ltd), which you can check on the ICO register of fee payers.