About this list
A “sub-processor” is a third party that processes personal data on our behalf. This page lists every sub-processor we currently use to operate Unhectic Limited and its services. We keep the list short on purpose — every sub-processor is one more party with access to data, so we add them only when they are genuinely needed.
Current sub-processors
| Sub-processor | Location | Purpose | Transfer mechanism |
|---|---|---|---|
| Hostinger | European Union | Hosting unhectic.com (this website) | UK GDPR, processing within EEA |
| Google (Workspace and Gmail) | United States and global | Email and document storage for Unhectic Limited | UK IDTA / UK Addendum to SCCs |
| Cloudflare | United States and global | DNS, edge caching, and security services for unhectic.com | UK IDTA / UK Addendum to SCCs |
Sub-processors used per-engagement
In addition to the sub-processors listed above, specific client engagements use cloud platforms chosen by the client — typically Amazon Web Services, Google Cloud, or Microsoft Azure — together with any third-party tools agreed in the statement of work for that engagement (for example, a transactional email provider, an error-tracking service, or an analytics platform). Those engagement-specific sub-processors are listed in the engagement-specific Data Processing Addendum, not on this page, because they vary by engagement and are governed by the contract for that engagement.
Future analytics tools
This site does not currently load Google Analytics 4 or Microsoft Clarity. When we activate either tool we will (a) update the table above with the relevant Google or Microsoft entity as a sub-processor, with location and transfer mechanism; and (b) only load the analytics tags after the user has accepted analytics cookies via the cookie banner. Until that activation, the analytics rows are intentionally absent from the table because they would not be accurate today.
Notification of changes
Material changes to this list — the addition of a new sub-processor, the removal of an existing one, or a change in location or transfer mechanism — are reflected in the version banner at the top of this page. Clients on a Master Services Agreement that requires advance notice of sub-processor changes are notified by email at least thirty days in advance of the change taking effect, so they have an opportunity to raise objections before it does.
Annual review
This list is reviewed at least annually and updated whenever a material change occurs. The full picture of how we use the data the sub-processors handle is set out in our Privacy Policy; the standard contractual terms governing client data are in our Data Processing Addendum.