Subprocessors
Adelante
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| Altair Monarch | Customer data and business records processed during data preparation tasks, potentially including names, contact details, and transaction data | Self-service data preparation and transformation; used to clean, transform, and analyse structured business data. | EEA |
| Amazon Web Services | Account information, customer data stored in hosted services, usage and log data | To host applications and data securely, provide cloud infrastructure, and enable system monitoring and analytics. | EEA |
| Atlassian | User account data, support information | Project / workflow management tools (Jira, Confluence) | EEA |
| ClearAccept | Customer names, bank account details, payment mandate information, billing records | To process direct debit instructions and collect customer payments. | UK |
| Cymba | Customer mobile numbers, communication preferences | SMS / mobile communications platform (marketing / customer messaging) | UK |
| Elavon Financial Services DAC UK Branch (BACS) | Payment card data (tokenised), transaction identifiers, customer details | Payment processing / acquiring, settlement | UK & Ireland |
| Microsoft | Customer identifiers, business docs, transaction logs | Cloud hosting, collaboration, analytics | Ireland |
| PBX Hosting Limited | Customer contact data, call recordings, telephony metadata | Hosting / VoIP / telephony infrastructure | UK |
| Rackspace International GmbH | Customer identifiers, system/application data | Cloud hosting & managed services | EEA |
| Slack | User account information, messages, files, and communication content | Internal team messaging and collaboration platform. | EEA |
| SysGroup Trading Ltd | Customer identifiers, hosted SaaS data | Managed IT & hosting services | UK |
APT
Work in progress
APT Pty (Australia)
Work in progress
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.
Avon Data Systems Limited (T/A Rezcontrol)
Work in progress
Blue Zinc
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| Amazon Web Services (AWS) | Patient or customer health data (e.g., medical messages and records you store in the CRM) | Secure cloud storage and hosting of patient/customer data for the CRM platform | UK / EEA |
| Cymba | Patient or customer mobile numbers and communication preferences | To send text reminders, confirmations, or health-related alerts to patients/customers | UK |
| Exercise Prescriber | Patient identifiers, therapy/exercise prescriptions, and progress data | To manage and deliver physiotherapy exercise programs | UK |
| Force24 Ltd | Customer contact details and marketing preferences | To send marketing or appointment reminder communications | UK |
| Freshdesk | Customer names, contact details, and any information entered in support requests | To handle technical support and respond to customer or clinic queries | UK / EEA |
| GetAddress.io | Postcodes and address lookup data | To auto-complete or validate postal addresses entered for patients/customers | UK |
| Google Cloud Platform (GCP) | Patient or customer data (files, records, app data) stored in the CRM | To provide secure cloud hosting, collaboration tools, and database storage | UK / EEA |
| Gradwell Communications Ltd | Patient or customer phone numbers, call recordings, and SMS/VoIP data | To provide telephony services for contacting patients/customers | UK |
| Healthcode Limited | Patient identifiers, billing details, and treatment codes | To validate and submit healthcare billing and insurance claims | UK |
| Heidi AI | Clinical notes and summaries written about patients | To help clinicians create and manage patient documentation using AI | UK |
| Intercom | Customer names, emails, and chat/support messages (including screenshots) | To provide customer support and manage engagement queries | EEA / UK |
| Nuapay | Customer names, bank details, and payment references | To collect and process direct debit payments | UK / EEA |
| Pharmacierge | Patient names, prescriptions, and dispensing records | To fulfil digital prescriptions through linked pharmacies | UK |
| PhysioTools | Patient names, exercise plans, and session progress | To manage and share exercise programs with patients | UK |
| Physitrack | Patient identifiers, exercises, and remote monitoring data | To enable remote physiotherapy monitoring | UK / EEA |
| Pipedrive | Customer, patient or business contact details | To manage customer or partner relationship data (CRM) | EEA |
| Salaso | Patient names, exercise and video tracking data | To deliver video-based physiotherapy programs | UK / EEA |
| SignatureRX | Patient identifiers, prescription data, and dispensing records | To issue and manage electronic prescriptions | UK |
| Stripe | Customer or patient names, tokenised payment details, and billing info | To process secure online payments | EEA / UK |
| Twilio | Customer or patient phone numbers, call/SMS content, and video session data | To send text alerts, make calls, or host telehealth sessions | EEA / US |
| Voipfone / Vonage Business Ltd | Customer phone numbers, messages, and call recordings | To provide phone and messaging systems for clinics or customer support | UK |
| Wibbi | Patient identifiers, exercise program data, and progress tracking | To support patients’ rehabilitation and exercise management | UK |
| Xero | Customer or patient financial data (invoices, payments, names) | To manage billing and accounting for customers | UK / EEA |
| Zoom | Audio and video session recordings, meeting metadata | To host secure video consultations and telehealth sessions | EEA |
BrightOffice
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| 200OK Solutions Ltd | Limited system data, error and support logs | Provides technical support and CRM system maintenance | UK |
| Amazon Web Services (AWS) | Customer files and analytics data | Provides secure cloud storage for CRM operations | EEA |
| Cartell.ie | Vehicle identification numbers | Checks vehicle details for customer records | Ireland |
| ClearCourse Retail Ltd (Giftpro) | Contact, booking, and gifting data | Manages online bookings and customer gift services | UK |
| Croft Communications Ltd | Customer identifiers and call connection details | Provides telecoms for customer communication | UK |
| Cymba | Mobile numbers | Sends customer service or marketing text messages | UK |
| Digitus Rain Limited | Customer identifiers and usage data | Provides secure cloud CRM software and platform services | UK |
| Dotdigital | Contact details and engagement data | Sends marketing emails and manages engagement tracking | UK |
| Eworks Manager Ltd | Customer and staff identifiers, scheduling info | Manages service appointments and customer scheduling | UK |
| Fetchify | Customer contact and address details | Validates and verifies customer address information | UK |
| Force24 | Contact details and engagement data | Supports automated marketing and communication campaigns | UK |
| Freshworks | Contact details and support logs | Provides customer service and helpdesk platform | UK |
| Files, analytics, and communication data | Provides secure cloud hosting, collaboration, and analytics | EEA | |
| Google Ireland Ltd (Adwords) | Online identifiers (cookies, emails) | Helps manage and measure online advertising | Ireland |
| Microsoft | Customer identifiers, files, and communication records | Provides productivity and hosting tools (Microsoft 365, Azure) | EEA |
| NCI Technologies Limited | Customer identifiers and support data | Provides hosting, IT management, and CRM support | UK |
| Opayo (Elavon Digital Europe) | Cardholder and billing information | Processes secure customer payments | UK / EEA |
| Orange Mobile & EE | Customer mobile numbers and connection data | Provides telecoms and mobile connectivity for customer support | UK |
| Progress Software Ltd | Customer identifiers and transactional data | Enables CRM data integration and processing | UK |
| Prolateral Consulting Ltd | Customer identifiers and support data | Provides CRM-related IT consultancy and support | UK |
| RapidSwitch Ltd | Hosted customer data | Hosts and stores CRM data securely | UK |
| SalesOptimize Ltd (TAMI) | Business contact data and company information | Provides sales intelligence and lead data | Ireland |
| Sandacre Technology Limited | Customer identifiers and support data | Provides CRM and IT systems integration | UK |
| Teamview | Customer identifiers and support session data | Provides secure remote support for CRM users | UK |
| Veriphy | Customer identifiers and compliance check data | Conducts identity verification and compliance checks | UK |
| WorldPay | Cardholder and billing details | Processes secure customer payments | UK / EEA |
Circdata
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| Apteco | Attendee and customer contact details and engagement data | To analyse marketing activity and understand how people interact with event communications | UK |
| Atlassian | User accounts, project and event planning information | To manage internal projects, event planning tasks, and collaboration (e.g. Jira, Trello, Confluence) | EEA |
| CCL Industries (UK) Ltd t/a ID&C | Attendee names and ID details | To produce personalised event ID cards, wristbands, and passes | UK |
| Citation (now NatWest) | Health & safety and compliance-related information (where applicable) | To support compliance and regulatory obligations linked to events | UK |
| Cymba | Mobile phone numbers, SMS consent, communication preferences | To send SMS messages such as reminders, updates, and event communications | UK |
| Datasharp | Attendee contact details and communication records | To print and distribute event-related communications and materials | UK |
| ESSA (Event Supplier & Services Association) | Member and attendee details | To coordinate approved suppliers and services for events | UK |
| Google Ireland Ltd | Documents, identifiers, and limited transaction records | To provide cloud-based tools such as email, document storage, and collaboration | Ireland |
| Hartley Design & Print Ltd (IC Printing Services) | Attendee names and badge details | To print badges, lanyards, and event materials | UK |
| ID Card Centre | Personal details shown on event badges or passes | To print physical ID cards and access passes | UK |
| IP Integration | Contact details and call-related data (where contact centre services are used) | To support customer service and communications systems | UK |
| Kenner Ltd t/a MoorePeople | Attendee identifiers and registration details | To provide event staffing and manage attendee registration | UK |
| Microsoft | User accounts, attendee lists, emails, documents, and communications | To provide email, document storage, collaboration tools, and internal systems | EEA |
| Microsoft Azure | Attendee and customer account IDs, hosted files and databases | To securely host event platforms and related systems | Ireland |
| O2 | Attendee contact details and ticketing references | To support ticketing systems and event-related communications | UK |
| PageHub Design | Attendee and marketing information | To design and manage digital marketing content for events | UK |
| Pro-Active Business Information Ltd | Business identifiers and contact information | To verify organisations and attendees where required | UK |
| Quadient | Attendee mailing information | To manage physical mailings such as tickets and event packs | US |
| Royal Mail Group Ltd | Postal addresses for attendees | To deliver physical event materials, tickets, or passes | UK |
| Streamnet Networks Ltd | Event user and attendee data | To provide IT and network services at event locations | UK |
| Trade ID t/a Digital ID Limited | Attendee names and badge personalisation details | To produce event badges and access passes | UK |
| Unified | Contact details and communication metadata | To integrate telephony and communications services | UK |
| Xero | Payment and invoicing information | To manage event billing, payments, and financial records | EEA |
| Bitrix | User accounts and event/project management data | To manage projects, customer interactions, and event workflows | EEA |
Circdata (Polska)
Work in progress
ClearAccept
Affiliate Group Subprocessors
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| ClearAccept Operations Limited | Merchant account details, transaction data, operational communications | To provide operational support and processing services to merchants | UK |
| ClearAccept Technology Limited | Merchant account details, transaction data, system logs | To develop, maintain and operate the ClearAccept platform and technology infrastructure | UK |
| Secure Collections Limited | Merchant account details, payment and banking data, debt-related correspondence | To manage direct debit collection and recovery on behalf of ClearAccept | UK |
| Cymba Integrated Solutions Limited | Merchant account details, integration data | To provide integrated messaging solutions | UK |
External Subprocessors
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| Amazon Web Services (AWS) | Hosted data including payment and account information, system logs | To securely host systems, databases and logs | UK / EEA |
| Anthropic (Claude) | Merchant and operational data submitted via internal tooling | To provide AI-assisted internal tooling to ClearAccept staff | US |
| Authsignal Ltd | Identity details, multi-factor authentication data, login records | To protect merchant accounts and prevent fraud during sign-in | New Zealand |
| BirdCRM | Names, email addresses, mobile numbers | To send one-time passcodes for secure login (SMS MFA) and operational messaging to merchants | UK / EEA |
| Castles Technology | Terminal configuration data, merchant account details | To provide card payment terminal hardware and associated software | UK |
| Cognito | Identity details and identity verification records | To verify merchant identities and assist in fraud prevention | EEA |
| Contentful | Account details and content that may include personal data | To manage and deliver website and application content | EEA |
| Datadog | System logs, device and IP information | To monitor system performance and reliability | EEA |
| Deko | Consumer credit applicant details, identity and financial data | To facilitate regulated consumer credit products offered via the ClearAccept platform | UK |
| DocuSign | Names, email addresses, signatures, document identification data | To send and execute contracts electronically | EEA |
| EasyDMARC B.V. | Email addresses and technical email headers | To protect email systems from spoofing and phishing | EEA |
| Endeavour Internet Business Solutions Ltd | Customer data stored in hosted systems, system logs | To host and support production and customer support systems | EEA |
| Ingenico UK Ltd | Encrypted card details, payer contact information, transaction data | To provide secure payment gateway services | EEA |
| Liberis | Merchant business and financial data, transaction history | To facilitate revenue-based finance products offered to merchants via ClearAccept Revenue Finance | UK |
| Microsoft (M365) | Account details, authentication information, files and documents | To provide email, document storage and productivity tools | EEA |
| MongoDB Ltd | Customer records stored in databases, system telemetry | To securely store and manage application data | UK / EEA |
| MVSI | Identity documents (passport, driving licence, address verification data) | To meet identity verification and AML requirements | UK / EEA |
| n8n | Merchant details and funding data | To automate internal workflows (self-hosted) | UK / EEA |
| Pipedrive | Prospect and customer contact details | To manage customer relationships and sales activity | UK / EEA |
| Slack Technologies LLC | User account details, messages, shared files | For internal team communication and collaboration | EEA |
| Snowflake Computing UK Ltd | Customer and transaction data, system logs | For secure data analytics and reporting | UK / EEA |
| Sphonic | Transaction data used for fraud monitoring (no card numbers stored) | To monitor transactions for potential fraud | EEA |
| SurveyMonkey | Names, email addresses, survey responses | To collect merchant feedback and survey responses | EEA |
| Sysxnet Global Solutions (Viking Cloud) | Merchant information, security scan results | To support payment security and PCI DSS compliance | EEA |
| Worldline | Encrypted card details, payer contact information, transaction details, merchant onboarding data | To act as acquiring bank and payment processor, and to process and settle card payments securely | UK / EEA |
| Xero | Financial records, invoices, contact details | To manage accounting and financial reporting | UK |
| Zapier | Merchant and transaction data | To automate connections between internal systems | US |
| Atlassian (Jira / Confluence) | Account details, project information, support tickets | To manage work, track issues and collaborate internally | EEA |
CLEARCOURSE PARTNERSHIP ACQUIRECO FINANCE LIMITED
Work in progress
Clear Direct Debit
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| Finastra | Customer bank account numbers, names, payment references, transaction history | Runs core banking and direct debit payment systems | UK |
| Lead Forensics Limited | Website visitor data (business contacts), IP data, browsing behaviour | Identifies and analyses website visitors for marketing purposes | UK |
| Microsoft | Account data, authentication, files, communication metadata | Email, file storage, collaboration and productivity tools | UK |
| Mosaic Software | Customer bank account numbers, names, payment references, transaction records | Direct debit and payment processing platform | UK |
| OVH | Hosted customer payment and banking data (stored on servers) | Provides dedicated server hosting infrastructure | UK |
| Pay.UK | Customer bank account details and payment records | Operates UK national payment schemes (Bacs, Faster Payments) | UK |
| Rapidswitch | Hosted customer banking and transaction data | Dedicated hosting / infrastructure provider | UK |
| Vocalink Limited | Bank account numbers, sort codes, payment references | Processes BACS and direct debit transactions | UK |
Club Systems
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing | Notes |
| British Telecommunications Plc | Phone numbers, call activity, traffic logs | Telecoms for customer/member communication | UK | |
| Cymba | Phone numbers, preferences | SMS reminders, updates & marketing | UK | |
| Microsoft | Files, messages, cloud-hosted member data, Member accounts, documents, emails, logs | Email, collaboration, hosting, data storage | Ireland | |
| O2 – Telefonica UK Ltd | Phone/SMS metadata | Mobile/SMS communication services | UK | |
| Pen Test Partners LLP | Customer/member data viewed during testing | Security testing to ensure data protection | UK | |
| Revive IT Recycling Ltd | Residual data on recycled devices | Secure IT disposal & certified data erasure | UK | |
| Trade ID / Digital ID Ltd | Names, photos, membership IDs | Printing membership and access cards | UK | |
| DotGolf / World Handicap System | Golf handicap records & personal details | Official golf handicap management | UK | |
| Worldpay | Payment card details | Payment processing for memberships/events | EEA | |
| Zendesk Inc. | Customer/member service enquiries | Customer service ticketing | UK | |
| Amazon Web Services (AWS) | Account data, files, communications, logs | Hosting systems containing member data | UK/EEA | |
| Mailchimp | Names, email addresses | Newsletters and club communication | US | |
| Atlassian (Trello/Jira) | Customer service data, uploaded files | Issue management & development support | EEA | |
| Slack | Customer/member messages | Communication with customers/members | EEA | |
| Docusign (Group) | Contact details, signatures | Digital contract signing | EEA | |
| Pipedrive (Group) | Customer contact details | CRM & sales lead management | UK | |
| Crowdstrike | Technical/log data that may contain identifiers | Cyber-security monitoring | EEA | |
| Checkpoint | Email/security metadata | Email security filtering | EEA | |
| Textlocal | Contact details | SMS alerts and engagement | UK | |
| Netsuite | Customer/member details & financial data | Accounting & financial management | EEA | |
| TeamViewer | Customer/member data during remote support | Remote access IT support | EEA | |
| AnyDesk | Customer/member data during remote support | Remote access IT support | EEA | |
| Sparkpost | Email addresses & engagement data | Marketing email delivery | EEA | |
| Golf Union of Wales | Member registration data | National membership & governance | UK | |
| England Golf Union | Player/member details | Membership management & governance | UK | |
| Claritee | Anonymised usage data only | Analytics dashboard | UK | Anonymised, no personal identifiers |
| Acushnet Europe Ltd | Account & purchase history | Golf retail & membership systems | EEA/UK | |
| Aleido UK Ltd | User training records | Digital learning platform | UK | |
| Aures Technologies Ltd | POS transactions | Till & retail systems for clubs | UK/EEA | |
| Barcode Warehouse | Member IDs, access & transaction data | Access cards & ID solutions | UK | |
| Company Cards Ltd | Photos, membership IDs | Printing club/member cards | UK | |
| Comtrex Systems Corporation | Orders & payment data | Hospitality POS for clubs | UK | |
| Dropbox International | Customer/member identifiers, documents | Cloud file storage | Ireland | |
| Enhanced Networks Ltd | Network & comms metadata | IT networking & support | UK | |
| European Golf Machines Ltd | Member access & payment data | Ball-dispensing & access card systems | EEA/UK | |
| Famoco | Customer identity & payment details | Secure devices for access/payments | EEA | |
| Geckoboard | Performance dashboards | Club/member KPI dashboards | UK/EEA | |
| Global 4 Communications Ltd | Phone call logs | Telephony & VoIP services | UK | |
| GoCardless | Bank account details, mandates | Direct Debit processing | UK/EEA | |
| Golf Club Managers Association | Member personal data | Club management services | UK | |
| Hi Werk Ltd | Member/customer data | Club management systems | UK | |
| imutual Worldwide Ltd | Basic customer identity | Loyalty/rewards platform | UK | |
| Inicio Solutions Ltd | Member account details | IT and digital services | UK | |
| Newlands Golf Club | Member registration data | Club membership platform | UK | |
| Oxhoo UK Ltd | Customer identifiers, transaction logs | POS tills used for member services | UK | |
| Pat Safe Ltd | Compliance & safety data | Venue safety and compliance | UK | |
| Rackspace International GmbH | Hosted member/customer data | Cloud hosting | EEA | |
| Scottish Golf | Member & player personal info | National governing body | UK | |
| Semcon Product Information | Training data | Product information systems | UK | |
| MarkUp Inc. | Customer email addresses | Sharing website markups with customers | Global | |
| GitHub | User email addresses | Code repository hosting | EEA/US | |
| JetBrains / PHPStorm | User email addresses | Software development tools | EEA | |
| Customer email & analytics | Club analytics and internal tooling | EEA/UK | ||
| Pen Test Partners LLP | Member/customer data | Security & penetration testing | UK | |
| PlayMoreGolf | Basic customer contact data | Flexible membership integration | UK | Optional integration |
| BRS | Basic customer contact data | Tee time booking integration | UK | Optional integration |
| Fairway Credit | Customer contact data | Finance provider for membership | UK | Optional integration |
| Paxton / Bearbox / Progeny / Wintacs | Member identifiers | Door access control | UK | Optional integration |
| EGM / Range Servant | Member identifier data | Range ball dispenser integration | UK | Optional integration |
| DEKO | Member personal details | Buy Now Pay Later system | UK | Optional integration |
| Intelligent Golf (CSI) | User and EPOS transaction data | EPOS integration | UK | Optional integration |
| HowDidIDo | Member & club performance data | Member golf performance platform | UK | Optional integration |
Computers For Flooring Limited
Work in progress
CSY Retail Systems Limited
Work in progress
Cymba
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| Allies Computing | Email addresses, contact details, communication metadata | Email/SMS communication, secure messaging | UK/EEA |
| Amazon Web Services | Account info, customer data stored in services | To host applications and data securely, provide infrastructure, and enable system monitoring/analytics. | EEA |
| Atlassian | Account info, user communications, project collaboration data | Team collaboration, messaging (Jira, Confluence, Trello) | EEA |
| Azura Group Ltd. | Donor names, contact info, payment details | Donation processing, donor communications | UK |
| Bitrix 24 | Contact details, invoicing info, communications metadata | Quotes Invoicing & client communications | EEA |
| CM Telecom | Customer/member phone numbers, postal addresses, email, SMS/RCS content, delivery reports, consent logs | Omnichannel communications (SMS, voice, messaging) for customer engagement | UK / EEA |
| Commify UK Ltd (TextAnywhere Ltd) | Customer/member phone numbers, SMS content, delivery metadata | Bulk SMS / messaging platform used for customer notifications, marketing, or service updates | UK / EEA |
| Craft IO Ltd | User email addresses | Product Guides Client/Internal | EEA |
| Crowdstrike | Technical/log data that may contain identifiers | Cyber-security monitoring | EEA |
| Engage Hub – Oxygen8 Communications Ireland Ltd | Customer/member phone numbers, SMS content, delivery reports, consent logs | Omnichannel communications (SMS, voice, messaging) for customer engagement | Ireland / UK |
| Fetchify | Customer postcodes | Provides postcode lookup and address validation services | UK |
| FMP Marketing Ltd | Customer/member contact details, marketing preferences | Marketing services & campaign execution | UK |
| Fonix | Phone numbers, payment data, SMS message content | Mobile payments, SMS communications | UK |
| Files, analytics, and communication data | Provides secure cloud hosting, collaboration, and analytics | EEA | |
| Microsoft | Account info, contact lists, emails, chat/voice/video content | Office 365, Teams, Exchange, Outlook communications | Ireland |
| Postman | Customer identifiers | Software Testing / Documentation | EEA |
| Rackspace International GmbH | Hosted member/customer data | Cloud hosting | EEA |
| Roadmunk | User email addresses | To collect product feedback and manage feature request roadmaps. | EEA |
| Sage | Customer names, contact info, financial details | Accounting, payroll, business management software | EEA |
| Vonage | Customer/member phone numbers, SMS/RCS content, delivery reports, consent logs | Omnichannel communications (SMS, voice, messaging) for customer engagement | EEA |
| Xero | Contact details, invoicing info, communications metadata | Accounting & client communications | EEA |
| Zapier | Customer identifiers, connected app data (can include comms metadata) | Workflow automation across comms tools | US |
Davidson Richards Limited
Work in progress
e-Clinic
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| Access Paysuite Ltd | Bank account details and customer reference information | To collect payments by Direct Debit | UK |
| Assembly Marketing Ltd | Customer email addresses and contact details | To help us run marketing campaigns and customer communications | UK |
| Croft Communications Ltd | Customer identifiers and call or message details (such as time and duration) | To provide telephone and communications services | UK |
| Cymba | Mobile phone numbers | To send SMS messages such as reminders or notifications | UK |
| Eazipay | Bank account details | To collect recurring payments by Direct Debit | UK |
| NCI Technologies Ltd | Customer identifiers and limited system data | To provide IT support and managed IT services | UK |
| Postman Inc | Technical test data that may include anonymised or pseudonymised customer data | To test and improve our software integrations | US |
| Textmarketer | Mobile phone numbers | To send SMS communications | UK |
| WorldPay Ltd | Payment card details and billing references | To securely process card payments | UK / EEA |
| Xero (UK) Ltd | Invoices, billing information, and customer references | To manage accounting, invoicing, and financial records | UK |
EKM
Work in progress
Emperium
Work in progress
eWorks
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| Eworks Manager Proprietary Limited | Name; personal contact details; professional contact details; IP addresses; cookie data; login credentials; traffic data including web logs; payment-related information | Customer Support | South Africa |
| ClearCourse Business Services Limited | Name; personal contact details; professional contact details; IP addresses; cookie data; login credentials; traffic data including web logs; payment-related information | ClearCourse intra-group shared services | UK |
| Atlassian Germany GmbH | Name; business contact details (such as name, job title, address, email address, landline and/or mobile phone number(s)) | Customer Communications | Germany |
| Microsoft Corporation | Name; business contact details (such as name, job title, address, email address, landline and/or mobile phone number(s)); login credentials | Internal communications/Authentication | US |
| Xero Ltd | Name; business contact details (such as name, job title, address, email address, landline and/or mobile phone number(s)); payment-related information | Accounting | UK |
| Twilio Inc | Name; business contact details (such as name, job title, address, email address, landline and/or mobile phone number(s)) | Automated messaging | US |
| Google LLC | Data collected via our mobile app; cookie data; IP addresses | Android Push Notifications | US |
| (Firebase Cloud Messaging) | |||
| Apple Distribution International Limited | Data collected via our mobile app; cookie data; IP addresses | Apple Push Notifications | Ireland |
| ANS Group LTD | Name; personal contact details; professional contact details; IP addresses; cookie data; login credentials; traffic data including web logs; payment-related information | App hosting, database | UK |
| Zansys LTD | Name; personal contact details; professional contact details; IP addresses; cookie data; login credentials; traffic data including web logs; payment-related information | App hosting, database | UK |
eWorks Pty (South Africa)
Work in progress
Felinesoft
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing | Notes |
| ClickLearn ApS | User details and how people interact with training materials | To help users learn how to use our systems through online training and guidance | EEA | |
| Dynamics Value S.L. | CRM and membership records (such as names, contact details, and account information) | To support, configure, and improve our Microsoft Dynamics CRM and ERP systems | EEA | |
| Gradwell Communications Ltd | Customer contact details and basic call information (such as time and duration of calls) | To provide VoIP phone and telecoms services | UK | |
| Memberwise Limited | Member contact details and engagement information | To support membership-related services, resources, and networking | UK | |
| Microsoft Ireland Operations Limited | Customer emails, files, and user account identifiers | To provide cloud-based email, document storage, collaboration tools, and hosting (Microsoft 365 and Azure) | Ireland | |
| SJS Fire & Security Solutions Ltd | Limited visitor access logs (for example, entry records) | To maintain physical security at our premises | UK | |
| Stripe Technology | Payment-related identifiers (such as transaction references; card details are tokenised) | To securely process customer payments | EEA | |
| Triangle Networks Ltd | Customer or member contact details and communication identifiers | To provide telecoms and IT support services | UK | |
| Vodafone | Customer phone numbers and basic communication records | To provide mobile and telecoms connectivity | UK | |
| Vuzion | Customer tenant details and limited system access information | To act as a cloud service provider and support partner | UK / EEA |
Fetchify
Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| Amazon (AWS services) | Customer account details, login/authentication data, system usage logs | To host applications and data securely, provide infrastructure, and enable system monitoring/analytics. | EEA |
| Bitrix | Customer account details, contact records, support tickets | CRM system and customer helpdesk management | EEA |
| Capita Business Support Service Ireland | Business address data and company identifiers | Supplies address data used in products | EEA |
| Central Mailing Services Ltd | Customer names and postal addresses | Prints and sends physical mail on our behalf | UK |
| Croft Communications Ltd | Customer contact details and call metadata | Telecoms and phone services | UK |
| Cymba | Customer mobile numbers and messaging preferences | SMS messaging platform for client communications | UK |
| FLG | Prospect and customer email/contact details | Email marketing and lead management | UK |
| Global Payments | Cardholder data, billing details, transaction records | Card acquiring bank / payment processing | EEA |
| Google Ireland Ltd | Customer advertising identifiers, campaign data | Marketing and advertising services (Google Ads) | Ireland |
| Mailgun | Email addresses submitted for validation | Email validation service | US |
| Microsoft | Customer identifiers, documents, emails, system logs | Cloud hosting (Azure) and productivity (M365) | Ireland |
| MoneyPenny | Caller contact details, call notes | Outsourced call answering service | UK |
| Ordnance Survey Ltd | Address/location datasets | Supplies address data for products | UK |
| Paragon | Website visitor data, marketing analytics | Manages Google Ads and analytics tools | UK |
| Payments Solutions t/a SmartDebit | Bank account numbers and payment mandates | Direct Debit processing | UK |
| Pipedrive | Full customer and prospect contact records, deals | Sales CRM and forecasting | EEA |
| Rackspace International GmbH | Hosted customer data (cloud infrastructure) | Manages and supports AWS infrastructure | EEA |
| Ridgeon | Customer data files (via secure file transfer) | Secure SFTP platform for data cleansing file transfers | UK |
| Royal Mail | Company names and addresses only | Supplies postal address data for products | UK |
| Trust Payments (UK) Ltd | Cardholder data and billing identifiers | Card payment processor | UK |
| Twilio | Phone numbers, messaging metadata, Customer email addresses and delivery metadata | API provider for phone validation product, Transactional email delivery | US |
FirstClass
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing | Notes |
| AFD Software | Customer names, addresses, contact details, identity data | Address validation, identity verification, data quality | EEA | Optional Integration |
| Experian | Customer names, addresses, contact details, identity data | Address validation, identity verification, data quality | UK / EEA | Optional Integration |
| GB Group | Customer names, addresses, contact details, identity data | Address validation, identity verification, data quality | EEA | Optional Integration |
| Xero | Customer financial data, invoices, contact details, payment records | Cloud accounting, bookkeeping, billing | EEA | |
| Microsoft | Account data, files, authentication, communication metadata | Productivity, collaboration, cloud infrastructure | Ireland | |
| Bitrix | Contact data | CRM | EEA | |
| Twilio SendGrid | Customer emails, metadata | Email delivery | US | |
| Netsuite | Customer names, invoices | Invoicing | EEA | |
| Pipedrive | Contact data, contracts | Sales CRM | EEA | |
| Docusign | Contact details, signatures | Digital contract signing | EEA | |
| Crowdstrike | Technical/log data that may contain identifiers | Cyber-security monitoring | EEA | |
| Checkpoint | Email/security metadata | Email security filtering | EEA | |
| TeamViewer | Customer data during remote support | Remote access IT support | EEA | |
| MoneyPenny | Contact data | 1st Line Support | EEA |
FLG
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing | Notes |
| Aircall | Customer names, phone numbers, call records | To provide cloud telephony services and enable customer calls. | EEA | Optional, if customer decides to integrate with this product |
| Amazon (AWS services) | Customer account details, login/authentication data, system usage logs | To host applications and data securely, provide infrastructure, and enable system monitoring/analytics. | EEA | |
| Bitrix | Customer contact details, account information | To manage customer relationships and store CRM records. | EEA | |
| Circleloop | Customer names, phone numbers, call history | To deliver telecom and VoIP phone services for customer communications. | EEA | Optional, if customer decides to integrate with this product |
| Cronofy Ltd. | Customer calendar data, meeting details, contact information | To provide calendar scheduling and integrate with meeting applications. | EEA | Optional, if customer decides to integrate with this feature |
| Cymba | Customer mobile phone numbers | To send SMS messages and communications. | UK | |
| Datadog | System and service usage logs (technical metadata, IP addresses) | To monitor system performance and provide analytics for service reliability. | EEA | |
| Esendex Limited | Customer phone numbers, SMS content, message delivery metadata | To send and track SMS and business text messages. | UK | Optional, if customer decides to integrate with this feature |
| Gitlab | User email addresses, names, account identifiers | To manage software development projects and track bugs/issues. | US | |
| GoCardless | Customer names, bank details, payment mandate info, billing records | To process direct debit payments and manage recurring billing. | UK / EEA | |
| Microsoft | User identifiers, account login info, stored files, communication metadata (e.g. Teams/Outlook) | To provide productivity tools (Office 365, Teams, SharePoint) | EEA | |
| Oracle Netsuite | Customer names, financial records, invoices | To manage accounting, billing, and invoicing processes. | EEA | |
| Pipedrive | Customer contact details, contracts | To support sales teams with CRM and contract management. | EEA | |
| Roadmunk | User email addresses | To collect product feedback and manage feature request roadmaps. | EEA | Only if customer sends feedback requests in |
| Sinch – Mailgun | User email addresses, email message content, message delivery metadata | To send and deliver transactional and automated emails. | EEA | |
| Topol | Email content, customer email details | To create, design, and send marketing or transactional emails. | EEA | |
| Trustpilot Ltd | Customer identifiers (e.g. name/email), submitted reviews | To collect, publish, and display customer reviews online. | EEA | |
| Zapier | User identifiers, integrated system/application data | To connect apps and automate workflows between different systems. | US/EEA | Optional, if customer decides to integrate with this product |
Garage Data Systems
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing | Notes |
| Amazon (AWS services) | Customer account details, login/authentication data, system usage logs | To host applications and data securely, provide infrastructure, and enable system monitoring/analytics. | EEA | |
| Cartell.ie | Vehicle registration and identification details | Supplies automotive data checks and validation services | IE | |
| Croft Communications Ltd | Customer names and identifiers | Provides telecoms and business connectivity services | UK | |
| Cymba | Mobile phone numbers | Enables SMS delivery and mobile messaging services | UK | |
| Customer files, emails, analytics identifiers | Provides cloud storage, email, and analytics services | EEA | ||
| GoTo Technologies UK Ltd (LogMeIn) | Customer contact info, meeting/chat content, support diagnostics | Delivers online meetings, remote access, and comms tools | UK | |
| HaynesPro | Vehicle and automotive identifiers | Offers online automotive technical data and software | Netherlands | |
| KCOM | Customer network usage data and identifiers | Provides telecoms, internet, and connectivity services | UK | |
| Microsoft | User identifiers, account login info, stored files, communication metadata (e.g. Teams/Outlook) | To provide productivity tools (Office 365, Teams, SharePoint) | EEA | |
| Rackspace International GmbH | Customer data hosted in their cloud | Provides cloud hosting and data storage solutions | EEA | |
| Smart Debit | Customer names, bank account details, direct debit mandates | Processes direct debit transactions and payment collection | UK | |
| NAPA | Customer identifiers (linked to parts purchases) | Provides access to parts catalogues and purchase systems | UK | |
| Fetchify | Customer postcodes | Provides postcode lookup and address validation services | UK | |
| Xero | Customer financial data, invoices, payroll records | Provides cloud-based accounting and finance services | EEA | Optional, if customer decides to integrate with this feature |
| Sage | Customer financial data, invoices, payroll records | Provides cloud-based accounting and finance services | EEA | Optional, if customer decides to integrate with this feature |
| Intuit QuickBooks | Customer financial data, invoices, payroll records | Provides finance and accounting software services | EEA | Optional, if customer decides to integrate with this feature |
Giftpro
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| Amazon / AWS | Customer account identifiers, transaction data (if hosted) | Cloud hosting, SaaS services | EEA |
| Cloudflare | Customer/member IP addresses, DNS queries, traffic metadata | CDN, DDoS protection, security | EEA |
| Lead Forensics | Customer IPs, identifiers (B2B attribution) | Website visitor tracking/attribution | UK |
| Mailchimp | Customer contact details, preferences, marketing data | Email marketing platform | US |
| Mailgun Technologies | Customer email addresses, delivery metadata | Email sending/transactional service | EEA |
| Microsoft | Customer/member identifiers, files, hosted data | Microsoft 365, Azure hosting, Dynamics CRM | Ireland |
| Print Node | Customer identifiers (if included in print jobs) | Cloud print service | UK |
| Xero | Customer & financial data | Accounting & payroll software | EEA |
| Royal Mail | Names, delivery addresses, tracking data | Shipping, fulfilment and parcel tracking | UK |
| Hubspot | Contact details (such as name, email address, company), communication history, and interaction data | Contact details (such as name, email address, company), communication history, and interaction data | EEA |
| Cymba | Mobile numbers | Sends customer service or marketing text messages | UK |
GoB2B Limited
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| 3CX | Customer contact details, call metadata, IP addresses | Business phone system and call handling | EEA |
| Aha Ideas Portal | Customer account info + usage data | Feature request and product feedback platform | US |
| Apollo.io | Prospect contact data | Sales lead intelligence and prospecting | US |
| Autotask | Customer contact details, support ticket content | Helpdesk, IT support case tracking, project/change management | UK |
| Campaign Monitor (Marigold/Iris Holdings) | Customer email addresses and campaign engagement data | Sends newsletters and marketing emails | US |
| Capterra (Gartner) | Customer review profiles, LinkedIn info, | Third-party review/marketing platform | US |
| Elasticsearch | Logs containing identifiers, IPs, possibly customer references | Centralised logging and monitoring | EEA |
| GoCardless | Customer bank details and mandate data | Direct debit payment collection | EEA |
| HubSpot | Customer & prospect contact details, CRM records, company info | CRM system for managing sales, marketing and customer relationships | US |
| Lead Forensics | Website visitor identifiers | Identifies organisations visiting website for marketing/sales | UK |
| Microsoft | Email content, contact details, communications metadata | To provide email, document storage, collaboration tools, and cloud hosting | EEA |
| MVSI | Customer identity verification documents | AML/KYC compliance and verification | EEA |
| Node4 Hosting | Customer contact data, hosted production data | Hosting provider for customer-facing production servers | UK |
| pCloud Backup | Customer contact data | Cloud backup provider | EEA |
| Twilio | Customer/staff email addresses, email content metadata | Transactional and service email delivery | US |
| Trumpet | Prospect contact details | Sales engagement and demo/product comms | EEA |
| Worldline | Customer application/payment identifiers | Payment processing for non-GBP transactions | EEA |
| Xero | Customer financial/contact details | Accounting and invoicing system | EEA |
GVS
Work in progress
Hart Square
Work in progress
HOWDIDIDOMEDIA
Work in progress
Instagiv
Work in progress
Intelligent Golf
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing | Notes |
| Acushnet Europe Ltd | Customer account and purchase information | To manage golf equipment orders and membership-related services | EEA / UK | |
| Amazon Business | Customer/member account details (when AWS/GCP used) | To host systems and support cloud-based services | UK / EEA | |
| Aures Technologies Ltd | Customer purchase and POS transaction data | To run point-of-sale tills and retail systems used by clubs | UK / EEA | |
| Barcode Warehouse | Member IDs, card data, access information | To supply club access cards and ID card systems | UK | |
| Company Cards Ltd | Member photos, names, membership IDs | To print membership cards and event passes | UK | |
| Comtrex Systems Corporation Ltd | Customer orders and payment data | To provide point-of-sale systems for club hospitality | UK | |
| Cymba | Phone numbers and SMS marketing preferences | To send customer/member SMS alerts and campaigns | UK | |
| Dropbox International Unlimited | Documents, images, customer/member identifiers | To store and share files in a secure cloud environment | Ireland | |
| Enhanced Networks Ltd | Network and communication data including identifiers | To provide IT, telecoms and networking services | UK | |
| European Golf Machines Ltd | Membership details and payment card data | To operate driving-range ball dispensing and club card systems | EEA / UK | |
| Famoco | Identity and payment data | To verify identity and enable secure access/payments | EEA | |
| Geckoboard | Membership or customer KPI data | To provide dashboard reporting for clubs | UK / EEA | |
| Global 4 Communications Ltd | Customer phone numbers, call logs | To provide telephony and VoIP services | UK | |
| GoCardless | Bank account details, Direct Debit mandates | To collect membership fees by Direct Debit | UK / EEA | |
| Golf Club Managers Association | Member personal data | To support club management services for members | UK | |
| Golf Union of Wales Ltd | Member registration data | For membership affiliation and governance purposes | UK | |
| Hi Werk Ltd | Customer/member records | To provide club management software services | UK | |
| imutual Worldwide Ltd | Customer data | To run loyalty and rewards services | UK | |
| Inicio Solutions Ltd | Customer/member account details | To support digital and IT transformation services | UK | |
| Microsoft | User, customer, and cloud-hosted data | To provide cloud hosting, email, documents and collaboration tools | Ireland | |
| Newlands Golf Club | Member registration information | To manage golf club membership | UK | |
| Oxhoo UK Limited | Member identifiers and POS transaction logs | To operate tills used for membership and ticketing | UK | |
| Pat Safe Ltd | Venue compliance and safety data | To help clubs meet safety requirements | UK | |
| Rackspace International GmbH | Hosted customer data | To host systems and provide managed cloud services | EEA | |
| Scottish Golf Limited | Player and member personal information | To manage national membership and player governance | UK | |
| TeamViewer | Customer/member data accessed during remote support | To provide secure remote IT support services | Germany | |
| The Card Network | Member ID and card information | To produce and manage club membership cards | UK | |
| The England Golf Union Ltd | Player and member information | For golf membership governance and management | UK | |
| Xero (UK) Ltd | Customer billing details, payment data | To handle accounting and invoicing for clubs | UK | |
| Zen Internet Limited | Member/customer traffic logs and account identifiers | To provide hosting or ISP connectivity | UK | |
| Pen Test Partners LLP | Member/customer data accessed during testing | To perform security testing and ensure data protection | UK | |
| DotGolf (World Handicap System) | Handicap and player personal data | To run the core WHS handicap system | UK | |
| Slack | Customer/member service communication | To support customer service and internal/external communication | EEA | |
| PlayMoreGolf | Basic contact information for members | To integrate with flexible membership systems | UK | |
| DEKO | Member data | To enable “Buy Now Pay Later” finance options | UK | |
| Club Systems | Member and transaction data | To integrate EPOS and membership systems | UK | |
| Claritee | Anonymised analytics data | To provide internal analytics dashboards for club performance | UK | |
| HowDidiDo | Member and club performance data | To provide golf-related performance/review functionality | UK | |
| Concept | Member data | To integrate with club membership systems | Ireland | |
| Croft Accounting | Billing identifiers and customer payment data | To deliver accounting services | UK | |
| GreenFee365 | Player data | To enable third-party tee-time bookings | EEA / US | |
| GiftPro | User details | To facilitate gift voucher sales | UK | |
| EKM | Transaction and ecommerce user data | To support online shop and ecommerce functions | UK | |
| Guestline | Guest and transaction data | For room/EPOS posting in clubs with accommodation | UK | |
| Oracle Opera | Guest data and transaction data | For room/EPOS posting in hotels/clubs | EEA / US | Coming Soon |
| ClearDebit | Member bank account data | To process Direct Debits | UK | |
| Chaarge | User account and payment data | For EV charging integrations | UK | Coming Soon |
| GMS RFU Game Management System | Member data | Third-party membership integration | UK | |
| Harbour Assist | Member and transaction data | EPOS integration services | UK | Coming Soon |
| RangeManager | Member and driving-range usage data | To manage driving-range bookings and payments | UK | |
| Net2 Door Access | Member identifiers | To provide electronic door access for clubs | UK |
MillerTech
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing | Notes |
| AFD Software Ltd | Names, addresses, contact details | To check and validate addresses so member records are accurate | UK | |
| ANS Group Limited | Data stored in our systems (member records, files, databases) | To securely host and manage our IT systems and databases | UK | |
| Cymba | Mobile phone numbers | To send members SMS messages such as reminders, updates, or alerts | UK | |
| Database Service Provider Global Ltd – Nova | Membership records, IDs, communications data | To host and manage the membership database securely | UK / EEA | |
| Experian Ltd | Identity details and limited financial information | To verify identity, prevent fraud, and carry out credit checks where required | UK / EEA | |
| Microsoft | Emails, contact details, documents, login and usage data | To run email, document storage, collaboration, and cloud systems (Microsoft 365 & Azure) | Ireland | |
| Oracle Corporation | Member identifiers, contact details, financial records | To operate CRM, finance, and database systems | EEA | |
| Plan.com | Call and message activity data (not message content) | To provide phone and mobile connectivity services | Isle of Man |
MillerTech (MIS India)
Work in progress
Motosoft
Work in progress
Mosaic
Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| Microsoft | Account data, authentication, files, communication metadata | Email, file storage, collaboration and productivity tools | UK |
| OVH | Hosted customer payment and banking data (stored on servers) | Provides dedicated server hosting infrastructure | UK |
| Pay.UK | Customer bank account details and payment records | Operates UK national payment schemes (Bacs, Faster Payments) | UK |
| Rapidswitch | Hosted customer banking and transaction data | Dedicated hosting / infrastructure provider | UK |
| Vocalink Limited | Bank account numbers, sort codes, payment references | Processes BACS and direct debit transactions | UK |
NetXtra
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing | Notes |
| ANS Group Limited | Customer or member information stored in our systems, along with technical logs and access credentials | To host our systems securely and provide managed IT and digital transformation services that keep our platform running | UK | |
| Sanderson Solutions | Basic customer identifiers (only if required for a specific project) | To provide independent consultancy or specialist support services | UK | |
| Microsoft | User accounts, contact details, emails, documents, and information about how our systems are used | To provide email, document storage, collaboration tools, and cloud hosting (such as Microsoft 365, Azure, and Teams) | Ireland | |
| Nominet UK | Contact details linked to website domain registrations (such as administrative or technical contacts) | To register and manage our website domain names | UK | |
| Rackspace International GmbH | Customer data stored within hosted systems | To provide secure cloud hosting and managed infrastructure services | EEA |
PPM
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| Ampersand-IT Ltd | Basic customer identifiers (such as names or account references) | To provide IT support and help maintain our systems when customer-related issues arise | UK |
| Assign-IT Ltd | Basic customer identifiers (such as names or account references) | To support our IT systems and assist with technical issues that may involve customer records | UK |
| Integrated Business Telecom Ltd | Call details (such as time and duration of calls) and customer identifiers | To provide telephone and communications services, including handling and routing customer calls | UK |
Practice Point (Assissi)
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| BT PLC (Direct Debit) | Call records and communication details (such as time and duration) | To provide telephone and communications services | UK |
| ClearCourse Retail Ltd (Giftpro) | Customer names, email addresses, and voucher purchase details | To provide digital gift vouchers and manage voucher transactions | UK |
| Croft Communications Ltd | Customer contact details and call information | To provide telecoms and phone services | UK |
| Cymba | Mobile phone numbers and communication preferences | To send SMS messages such as reminders or service notifications | UK |
| EDS Web Design Ltd | Customer account details and project-related information | To provide website and IT support services | UK |
| eFlow | Organisation details and invoice information | To issue and manage electronic invoices | UK |
| FastPay Ltd | Bank account details and billing information | To collect payments by Direct Debit | UK |
| Rackspace International GmbH | Customer data stored on hosted systems | To securely host systems and data in the cloud | EEA |
| VetEnvoy | Customer identifiers and account details | To integrate with third-party veterinary systems and services | UK |
| IDEXX | Customer identifiers and account details | To integrate with third-party laboratory and clinical systems | EEA |
| WeTransfer | Files uploaded by customers or staff | To transfer files securely between systems or partners | EEA |
Protech
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| CSCM Limited | Contact details, system login information, and data stored on our systems | To provide managed IT services and secure hosting | UK |
| Microsoft | Contact details, emails, documents, login data, and system usage information | To provide email, document storage, collaboration tools, and cloud hosting | Ireland |
| Parisa Technologies Limited | Member contact details, identifiers, and application data | To provide software solutions and IT consultancy services for membership organisations | UK |
Pursuit
Work in progress
Secure Collections
Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| Microsoft | Account data, authentication, files, communication metadata | Email, file storage, collaboration and productivity tools | UK |
| Virgin Media Limited | Connection metadata, usage data | Internet services, hosting, connectivity | UK |
| Zen Internet Limited | Connection metadata, usage data | Internet services, hosting, connectivity | UK |
| Vocalink Limited | Bank account numbers, sort codes, payment references | Processes BACS and direct debit transactions | UK |
| Pay.UK | Customer bank account details and payment records | Operates UK national payment schemes (Bacs, Faster Payments) | UK |
Sellerdeck
Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| Cloud Unboxed | Customer identifiers and hosted application data | Provides cloud hosting and managed IT services | UK |
| Computer Strategies | Customer identifiers and system usage data | IT support and SaaS platform support services | UK |
| Data2Knowledge (Re-Mona Info Kft) | Customer analytics and behavioural data | Business intelligence and analytics services | EEA |
| Easynet Ltd | Customer contact details and network identifiers | Managed network connectivity and hosting | UK |
| ITQ Solutions Ltd | Customer identifiers and CRM records | Software development and system integration services | UK |
| Pulsant Ltd / Dedipower | Customer identifiers and hosted application data | Managed hosting and cloud infrastructure | UK |
| Qatalys Software Tech Ltd | Customer identifiers and transaction records | Software development | India |
| Semrush | Customer identifiers and website usage analytics | Marketing analytics and SEO performance tools | US |
| StatusCake | Website monitoring logs and customer identifiers | Website uptime monitoring and performance alerts | EEA |
| Teclan | Customer identifiers and e-commerce platform data | Digital marketing and e-commerce software services | UK |
| Unified Software | Customer identifiers and bank account details | Payment verification and AML validation tools | UK |
| Xero Ltd | Customer financial records and accounting data | Cloud accounting and financial reporting | EEA |
| Microsoft | Customer identifiers, documents and transaction logs | Cloud infrastructure, productivity and collaboration services | Ireland |
| Cloudways | Customer identifiers and hosted application data | Managed cloud hosting platform | UK |
| DigitalOcean | Customer identifiers and hosted application data | Cloud hosting infrastructure | UK |
| AWS (Amazon Web Services) | Customer identifiers and hosted application data | Cloud hosting and infrastructure services | UK |
| Zoho | Customer identifiers and CRM records | Customer relationship management and invoicing tools | EA |
Silverbear
Work in progress
Swan
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| 2sms.com | Mobile numbers, message content and metadata | Sends SMS (alerts, 2FA, notifications) | UK |
| 3CX | Phone numbers and call recordings | Telephone system and call management | UK |
| AGL | Customer contact and delivery details | Dispatch and fulfilment services | UK |
| Amazon | Customer and transaction data | Cloud hosting (AWS) | UK |
| Atlassian (Jira) | User data, project content, logs and activity history | Issue tracking and project management | EEA |
| Avalara | Identity and transaction data | Tax automation and compliance | UK |
| Bottomline Technologies (Bacs) | Customer names, bank details and Direct Debit mandates | Processes Direct Debit (Bacs payments) | UK |
| CIMS | Detailed supporter/customer profiles | Customer system (e.g. club/fan data) | UK |
| Cymba | Mobile numbers | SMS messaging services | UK |
| Daisy Corporate Services | Phone numbers and communication logs | Telecoms services (calls, SMS, connectivity) | UK |
| Ekco Cloud (UK) Ltd | Customer data stored in hosted systems and backups | Cloud hosting, backup and disaster recovery | UK / Ireland |
| Elavon | Customer financial data | Payment processing | UK |
| Fetchify | Address, email and phone data | Address validation and data cleansing services | UK |
| Fiserv | Customer financial and identity data | Payment processing services | US |
| Fortress | Contact details and demographics | Ticketing and fan engagement | UK |
| GoCardless | Customer contact details and bank data | Direct Debit payment processing | UK |
| Green Colo Ltd | Customer data stored on colocated servers | Data centre hosting | UK |
| HubSpot | Contacts, companies, deals, marketing and behavioural data | CRM and marketing platform | EEA |
| Iconography | Transaction data and customer details | Website integration services | UK |
| Klaviyo | Customer contact details, demographics | Marketing automation platform | EEA |
| Loqate | Address, email and phone data | Address validation and data cleansing | EEA |
| Microsoft | Customer data stored in emails, documents, files, support tickets | Cloud storage, email and productivity tools (M365/Azure) | UK |
| Omnisend | Customer contact and marketing data | Marketing automation campaigns | EEA |
| Payroc | Customer financial data | Payment processing | US |
| Sage | Customer contact details and accounting data | Accounting and finance software | UK |
| Secure Retail Ltd | Cardholder data processed via terminals | Payment hardware and gateway services | EEA |
| Shopify | Transaction data and customer details | E-commerce platform | EEA |
| Stripe | Customer contact details and payment data | Payment processing | UK |
| Swanky | Transaction data and customer details | E-commerce integration services | UK |
| Synchrony | Customer financial data | Payment processing | US |
| Underwater Pistol | Transaction data and customer details | E-commerce integration services | UK |
| Verifone (UK) Ltd | Cardholder data and transaction records | Payment gateway and in-store payments | UK / EEA |
| VisualSoft | Transaction data and customer details | E-commerce platform services | UK |
| WooCommerce | Transaction data and customer details | E-commerce platform integration | UK |
| WorldPay | Customer personal and payment data | Payment processing | EEA |
| Xero | Contact details and financial transaction data | Accounting and financial management | EEA |
| ZeroBounce | Email, address and phone data | Email validation and data cleansing | US |
| Zoho Corporation Ltd | Customer records in CRM, support tools and marketing systems | CRM, support desk and marketing SaaS | EEA |
Swan Origination
Work in progress
The EPOS Bureau
Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| Allstar Business Solutions Ltd | Cardholder details and transaction records | Provides fuel cards and corporate payment processing | UK |
| Atlassian | User account details and collaboration data | Project management and collaboration tools used in POS development | EEA |
| Box Technologies Ltd | Customer identifiers and payment data from POS terminals | POS hardware such as tills, kiosks and payment terminals | UK |
| Google Ireland Ltd | Customer identifiers and transaction metadata | Cloud hosting, analytics and collaboration services | Ireland |
| Herbert Retail Ltd | Customer transaction data and identifiers | POS terminals and retail self-checkout systems | UK |
| Microsoft | Customer account data, device/user data and payments metadata, Customer finance and payment records | Cloud POS infrastructure and retail management systems | Ireland |
| Precision Card Services Ltd | Customer names and identifiers used on cards | Produces loyalty, membership and access cards | UK |
| Sage | Customer contact information and accounting data | Accounting, POS integration and financial management | EEA |
| Tablet Technologies Ltd | Customer identifiers and POS transaction logs | POS tablet hardware and device support | UK |
| Teamwork | Customer contact details and sales records | Retail or POS project management software | US |
| Pipedrive | Customer contact details and sales records | CRM system for managing sales communications | EEA |
| HubSpot | Customer contact details and marketing records | CRM and sales communication management | Germany |
| Mailchimp | Customer contact details and marketing lists | Email marketing campaigns and communications | USA |
| NetSuite | Customer contact details and financial records | ERP system supporting accounting and POS management | EEA |
| Jira (Atlassian) | Customer contact details and support information | Issue tracking and project management | EEA |
| DocuSign | Customer names, addresses and contact details | Electronic signature and quotation approval | EEA |
| EET | Customer names and delivery details | Hardware sales and product delivery services | UK |
| Splashtop | Customer email addresses and access identifiers | Remote access software used to connect to PCs | Germany |
| 3CX | Customer phone numbers and call records | Business phone system storing call history | Germany |
| Xero | Customer account details, supplier data and transactions | Accounting and financial record management | EEA |
| The Tech Department | Customer contact details and website data | Website development and integration services | UK |
Thinksmart Software Limited
Vendor / System | Categories of data processed | Purpose of processing | Region of processing |
| Access Paysuite Ltd | Customer account details, payment information, authentication data | Payment processing for bookings and subscriptions | UK |
| APRIL International UK Ltd | Customer identity details and insurance policy information | Provides leisure or health insurance services | UK |
| Atlassian | User account details and project/collaboration data | Team collaboration tools (Jira, Confluence etc.) | EEA |
| Cymba | Customer contact details and messaging metadata | SMS marketing and customer engagement communications | UK |
| Dance Business Solutions | Customer or student records and contact details | Dance/leisure class scheduling and booking management | UK |
| Kudosity / Known Pty Ltd | Customer/student data and parent contact information | Booking management and communications for leisure services | Australia |
| Microsoft | User accounts, documents, productivity data | Cloud storage and collaboration tools | Ireland |
| NC Software Solutions Ltd | Customer account data, scheduling information and contact details | Custom leisure booking and management software | UK |
| Payrix Australia Pty Ltd | Customer payment information and billing details | Payment processing for leisure services | Australia |
| Team Academy Ltd | Student/member contact information | Management of education or leisure programmes | UK |
| TechSmith Corporation | User account data and screen recording content | Training and educational video/screen recording tools | US |
| Tecuna Ltd | Customer account details and leisure activity data | Leisure management software platform | UK |
| What’s On 4 Ltd | Customer/child information and parent contact details | Listings and booking platform for children’s activities | UK |
| Xero | Customer financial information, invoices and payment records | Accounting and billing software | EEA |
| ClubHub | Customer/child information and parent contact details | Leisure activity listings and booking services | UK |
| GoCardless | Customer bank mandate details and payment identifiers | Direct debit payment processing | EEA |
Thinksmart Software Pty Limited (Aus)
Work in progress
TISSL
Work in progress
TouchRetail
Work in progress
Trillium
| Vendor / System | Categories of data processed | Purpose of processing | Region of processing | Notes |
| Atlassian Software | Information entered into support tickets and project tools (e.g. issues, comments, attachments) | To manage projects, track work, and handle support requests using tools like Jira and Confluence | EEA | |
| C.A.J Tech Ltd | Basic customer identification details | To provide IT support and technical services | UK | |
| Dotdigital EMEA Ltd | Email addresses and marketing preferences | To send emails, newsletters, and marketing communications you’ve signed up for | UK / EEA | |
| Dudobi Limited | Customer identifiers (such as names and contact details) | To host systems and data securely in the cloud | UK | |
| Eworks Manager (Pty) Ltd | Customer and workforce information (e.g. names, roles, scheduling data) | To deliver field service and workforce management software | South Africa | |
| Expert Dynamics Ltd | Membership and contact details, CRM records, system usage data | To implement and support our CRM system and manage it on our behalf | UK | |
| Haridham Enterprise | Customer identifiers (such as names and contact details) | To provide IT support and maintenance services | UK | |
| Microsoft | Contact details, emails, documents, login data, and system usage information | To provide cloud hosting, email, document storage, and collaboration tools (Microsoft 365 & Azure) | Ireland | |
| Portrilio | Customer identifiers (such as names and contact details) | To operate our CRM system and manage customer relationships | EEA | |
| PTM EDV System GmbH | Member details, identifiers, and event registration information | To manage memberships and event registrations | EEA | |
| Westcoast | Business contact details (B2B contacts) | To supply and manage IT products and licences | UK |
Trillium (Portillo)
Work in progress
Viking Systems Limited (T/A Harbour Assist)
Work in progress