About this list
These are the companies UF Labs uses to deliver client websites and services where they handle personal data on our clients' behalf. It forms part of our Data Processing Agreement. Not every client uses every provider; it depends on the services in their agreement.
We review our providers over time. Before we add or replace a provider that will handle a client's personal data, we tell that client at least 30 days in advance, as set out in the Data Processing Agreement.
Current providers
- Hetzner Online GmbH: hosts client websites. Data stored in Germany (EU).
- Cloudflare Inc.: DNS, content delivery and security proxy for websites, and bot checks on forms (Turnstile). Receives visitors' IP addresses, browser and request details. Processed on Cloudflare's global network, which can include the US, under the UK-US Data Bridge, with the UK International Data Transfer Addendum in Cloudflare's data protection terms as a fallback.
- Supabase Inc.: database for form submissions, newsletter sign-ups, client portals, bookings and orders. Data stored in Ireland (EU).
- Amazon Web Services (Amazon SES): sends service emails, such as enquiry notifications to clients. Processed in London (UK).
- Brevo (Sendinblue SAS): backup email delivery if Amazon SES is unavailable, and newsletter sending where a client uses it. Data stored in the EU.
- Google: Google Analytics, only where a website visitor accepts analytics cookies, and Google Fonts, which loads website fonts and so receives visitors' IP addresses. May be processed in the US under the UK-US Data Bridge.
- Stripe: card and Direct Debit payments, only for sites that take payments online. May be processed in the US under the UK-US Data Bridge and Stripe's own data protection terms.
- Microsoft 365: UF Labs' own email, used for support conversations with clients. Data stored in the UK.
Not on this list
Our website code is stored with GitHub, but no personal data from client websites is kept there. Clients' own email, domain and social media accounts are run by the client under their own agreements with those companies.