Introduction
We work with a range of third party services providers. To provide services and support the BetterSpace platform, some of these services providers need to access and make use of personal data.
Such services providers may be either processors or controllers of the personal data. They will be controllers if they determine the purposes and means of processing of the personal data; otherwise, they will be processors.
Suppliers acting as our processors and sub-processors
The following suppliers act as processors or sub-processors on our behalf with respect to personal data.
We have entered into data processing agreements with each of these suppliers complying with Article 28 of the EU GDPR (and the corresponding provisions of the UK GDPR).
| Supplier | Data | Purpose(s) | Jurisdiction(s) |
|---|---|---|---|
| Amazon Web Services | All data stored in our website and application databases | Web hosting services | UK and EEA |
| HubSpot | All customer relationship supplier relationship data; business communications | Business relationship management and communications services | USA, with possible data transfers elsewhere |
| Calendly | Calendar and meeting data | Meeting scheduling services | USA, with possible data transfers elsewhere |
| GSuite | Data contained in business documents and business communications | Productivity software | Worldwide |
| Blink Digital | Data used for digital marketing purposes | DIgital marketing services | UK |
| EventBrite | Data relating to event bookings | Event booking services | UK and EEA, with possible data transfers elsewhere |
| Zoom | Video conference data | Video conferencing services | USA, with possible data transfers elsewhere |
| Docusign | Data contained in legal documents | Contracts processing services | UK and EEA, with possible data transfers elsewhere |
| Vimeo | Video analytics data, social media account and engagement data | Video hosting services | USA, with possible data transfers elsewhere |
| Freelance consultants | Marketing-related data, application database data | Provision of consultancy services | UK and EEA |
Suppliers acting as independent controllers
The following suppliers act as independent controllers with respect to personal data.
| Supplier | Data | Privacy policy | Jurisdiction(s) |
|---|---|---|---|
| Stripe | Transaction data | https://stripe.com/gb/privacy | UK and EEA |
| Google Analytics | Data relating to the use of the BetterSpace website and application | https://policies.google.com/privacy | Worldwide |
| Social media account and engagement data | https://twitter.com/en/privacy | UK and EEA | |
| Social media account and engagement data | https://www.linkedin.com/legal/privacy-policy | UK and EEA | |
| Marketplace suppliers | Account data and transaction data relating to the goods, services and/or digital products ordered from the suppliers | See the relevant supplier’s privacy policy made available via the BetterSpace platform | Various: see the relevant supplier’s privacy policy |
International transfers
To the extent that we are responsible for transfers of personal data related to these suppliers outside the UK and EEA, and outside those jurisdictions that the UK and EU data protection authorities have determined have adequate protection for personal data, we will only do so with appropriate safeguards – including the standard contractual clauses approved by the European Commission.
If required by the UK GDPR in future, we will also put in place appropriate safeguards in relation to transfers of personal data to the EEA that are regulated by the UK GDPR; similarly, if required by the EU GDPR in future, we will put in place appropriate safeguards in relation to transfers of personal data to the UK that are regulated by the EU GDPR.