Sub-processors

Modified on Sat, 18 Jul at 9:51 AM

Delekit Ltd engages a small number of trusted third-party service providers ("sub-processors") to help deliver our event technology services. Each sub-processor is engaged under a written data processing agreement containing data protection obligations equivalent to those we commit to our clients, and each is assessed before engagement and reviewed at least annually.

This page lists our current sub-processors. It forms part of the sub-processor commitments in our Data Processing Addendum. Where a client has signed a Data Processing Addendum with us, we notify them of any intended addition or replacement of a sub-processor in advance, in accordance with that agreement, and they may object on reasonable data protection grounds.

Current sub-processors

Sub-processor	Legal entity & location	Purpose	Processing location	Safeguards
Amazon Web Services	Amazon Web Services EMEA SARL, Luxembourg	Cloud hosting and infrastructure	United Kingdom (eu-west-2, London)	ISO/IEC 27001, SOC 2; Data Processing Addendum in place
Cloudflare	Cloudflare, Inc., United States	Content delivery, security and DDoS protection	Global edge network	UK Addendum to EU SCCs; Data Processing Addendum in place
Stripe	Stripe Payments UK Ltd / Stripe, Inc.	Payment processing (activated only where the client uses paid registration)	United Kingdom / United States	UK Addendum to EU SCCs; PCI-DSS compliant
Google	Google Ireland Ltd / Google LLC	Website and event analytics (activated only where the client enables analytics)	United States	UK Addendum to EU SCCs

Optional sub-processors

Stripe and Google are engaged only where a client activates the relevant feature. Where analytics is enabled on an event registration site, the client is responsible for obtaining cookie consent and providing the necessary disclosures to attendees. Where these features are not used, the associated sub-processors do not process client personal data.

Hosting and data location

All core client personal data is hosted in the United Kingdom on Amazon Web Services (London region). Data is not stored or replicated outside the United Kingdom except for the limited categories processed by the optional sub-processors above, under the safeguards stated.

Questions

Questions about our sub-processors, or requests for supporting documentation during a procurement or supplier onboarding process, can be directed to privacy@delekit.com.