Sub-Processors & Integrations
Last updated: March 2026 · Version 1.0
1. Current Sub-Processors
Sitefully Limited uses the following third-party service providers ("sub-processors") to operate and deliver our website and services. Each provider has been assessed for GDPR compliance, and appropriate safeguards (including Standard Contractual Clauses or adequacy decisions) are in place where data is processed outside the EEA.
| Provider | Purpose | Data Shared | Location | Privacy Policy |
|---|---|---|---|---|
| Cloudflare, Inc. | DNS, CDN, DDoS protection, security & performance | IP address, request metadata, security tokens | Global (EU presence) | View |
| Vercel Inc. | Website hosting & deployment | IP address, request logs, browser metadata | Global (EU presence) | View |
| Resend, Inc. | Transactional & marketing email delivery | Email address, name, message content | United States (EU-US DPF) | View |
| Stripe Payments Europe, Ltd. | Payment processing & subscriptions | Name, email, billing address, payment card details (processed by Stripe) | Ireland (EU) | View |
| Google Ireland Limited | Website analytics (Google Analytics 4). consent-only | Anonymised IP, device info, pages visited, session data | Ireland / USA (EU-US DPF) | View |
| Termly Inc. | Cookie consent management | Consent preferences, anonymised IP, user agent | United States (EU-US DPF) | View |
| Twilio Inc. | SMS notifications & booking confirmations | Mobile phone number, message content | United States (EU-US DPF, SCCs) | View |
2. Future Changes to Sub-Processors
Sitefully Limited may add, replace, or remove service providers from time to time to operate our website and services effectively. This may include providers for hosting, email delivery, analytics, payments, support tools, error monitoring, or CRM integrations.
When we make changes to our sub-processors, we commit to:
- Updating this page to reflect the current list of sub-processors
- Assessing any new provider for GDPR compliance before engagement
- Ensuring appropriate safeguards (such as Standard Contractual Clauses, adequacy decisions, or certification under the EU-US Data Privacy Framework) are in place for international transfers
- Notifying affected clients of material changes where required by contract or law
We will not introduce new optional cookies (analytics or marketing) without obtaining your consent first.
3. Client-Requested Integrations
Where a client requests that we integrate their preferred third-party tools. Such as their own CRM platform, accounting software, support desk, or marketing automation system. These integrations will be documented:
- In the client's contract or Data Processing Agreement (DPA), or
- In an order form or integration schedule appended to the agreement
The client is responsible for ensuring that any third-party tools they request us to integrate provide adequate data protection compliance and security standards. Sitefully Limited will assess such integrations for basic GDPR compatibility but does not guarantee the compliance of third-party tools selected by the client.
4. Data Processing Agreements
Sitefully Limited maintains Data Processing Agreements (DPAs) with all sub-processors listed above. Business customers may request a copy of our DPA template by contacting us at info@sitefully.ie.
5. Related Policies
- Privacy Policy. how we collect, use, and protect personal data
- Cookie Policy. cookies and tracking technologies used on our website
- Terms & Conditions. terms governing use of our services
- Data Subject Rights. how to exercise your GDPR rights
- Security Overview. our approach to security
6. Contact Us
If you have questions about our sub-processors, integrations, or data processing practices, please contact us at info@sitefully.ie.