All personal data is stored and processed within the United Kingdom unless otherwise noted. We do not transfer personal data outside the UK except where indicated below with appropriate safeguards.
Contabo Cloud Services
United KingdomInfrastructure hosting
Data shared: All platform data
Amazon Web Services (AWS)
United KingdomBackup and data storage
Data shared: All platform data
Google Workspace
Ireland (SCCs in place)Business email and internal file storage for team operations and customer support
Data shared: Customer support correspondence, internal documents
Stripe Payments UK Ltd
United Kingdom, with processing in the United States (SCCs and UK IDTA in place)Taking card payments, issuing receipts, and preventing payment fraud
Data shared: Name, email address, billing address, payment amounts and dates, and fraud prevention metadata. Card numbers are entered on Stripe's own page and never reach us
Changes to Sub-processors
We will notify schools and organisations at least 30 days before adding a new sub-processor. You may object to a new sub-processor within that period.
If our data storage arrangements change, we will update this page, notify affected users, and ensure appropriate safeguards under Article 46 of the UK GDPR.
Have a question about this?
Contact our Data Protection Lead at [email protected]