DRAFTnot legal advice
Sub-processors
The companies that handle personal data for Enquiry, and what for. We email account owners before this list changes.
DRAFT, not legal advice. Written as a starting point for a solicitor to check before Enquiry opens to the public. It isn’t in force, and nothing here is a promise yet. Marks like [To decide: this] are things still to be decided.
Last changed 26 Oct 2026. Earlier versions: none.
The list
| Company | What for | Data | Where |
|---|---|---|---|
| Cloudflare, Inc. | Runs the service: the Worker that takes form posts, the database (D1), file storage (R2), the delivery queues, and sending email (Email Service) | Everything in a submission, uploaded files, account and sign-in records, email addresses and message contents as they are sent | Files: EU (R2 EU jurisdiction). Database: [To decide: D1 location; no location hint is set today]. Cloudflare's network processes requests worldwide. |
| Cloudflare, Inc. (Turnstile and DNS) | The captcha on our own signup page, and the mail-server (MX) lookup for a new account’s email domain | The signup visitor’s IP address and browser signals (Turnstile); the email domain only (DNS) | Cloudflare’s global network |
| Paddle.com Market Limited | Merchant of record: sells the subscription, takes payment, handles tax, invoices and refunds | Account owner’s name, email, billing address and payment details (we never see card numbers) | UK, with its own sub-processors [To decide: confirm at Paddle approval, session 16] |
| Amazon Web Services EMEA SARL | Off-site copy of our nightly backups, encrypted before it leaves our server | An encrypted copy of the database and uploaded files (AWS cannot read it) | EU (Stockholm, eu-north-1) |
Chosen by you
If you turn on a captcha for a form, the captcha provider you pick (Cloudflare Turnstile or hCaptcha) receives your visitor’s answer and IP address when we check it. You choose that provider and hold the account with it, so it works for you directly rather than as our sub-processor.
Not on the list
Our own server and storage in the UK, run by Bromputers, hold the nightly backups for up to 90 days. Our alerting tells us when a delivery fails or an account is paused; it carries ids and account names, no enquiry contents [To decide: confirm where the alert service runs].