Sub-processors
Last updated 13 October 2026
These are the service providers Fairpool uses to run the service. Providers marked as handling worker data are sub-processors under our Data Processing Agreement. The others handle only our own account and billing data, as our privacy notice explains.
We give customers 30 days' notice before we add or replace a sub-processor. Providers give us shorter notice when they change their own sub-processors, as shown below, and we pass that on within 2 working days. To object to a change, email privacy@fairpool.example within 30 days of our notice (DPA section 5).
Render web service
Proposed: to be confirmed before launch
- Provider
- Render Services, Inc.
- Established in
- United States
- Purpose
- Runs the Fairpool application
- Data
- All service data in transit through the application: account holders' details and worker records. Render's own request logs also record each visitor's IP address and the address of each page requested.
- Worker data
- Yes: sub-processor under the DPA
- Location
- Frankfurt, Germany (EU region)
- Transfers
- The servers are in Frankfurt, but Render Services, Inc. is a US company, so using it is a transfer to the US. It is certified under the UK Extension to the EU–US Data Privacy Framework (the UK–US data bridge, under the Data Protection (Adequacy) (United States of America) Regulations 2023). If that stops applying, its DPA (section 6.4) falls back to the EU Standard Contractual Clauses with the UK International Data Transfer Addendum.
- Its own changes
- 10 days' notice to us. Its list: render.com/trust
Render managed PostgreSQL
Proposed: to be confirmed before launch
- Provider
- Render Services, Inc.
- Established in
- United States
- Purpose
- Stores the Fairpool database and its point-in-time backups
- Data
- All stored service data: account holders' details, worker records, hours, tip shares and the change log.
- Worker data
- Yes: sub-processor under the DPA
- Location
- Frankfurt, Germany (EU region)
- Transfers
- The servers are in Frankfurt, but Render Services, Inc. is a US company, so using it is a transfer to the US. It is certified under the UK Extension to the EU–US Data Privacy Framework (the UK–US data bridge, under the Data Protection (Adequacy) (United States of America) Regulations 2023). If that stops applying, its DPA (section 6.4) falls back to the EU Standard Contractual Clauses with the UK International Data Transfer Addendum.
- Its own changes
- 10 days' notice to us. Its list: render.com/trust
Resend
Proposed: to be confirmed before launch
- Provider
- Plus Five Five, Inc. (trading as Resend)
- Established in
- United States
- Purpose
- Sends service emails: sign-up and email confirmation, password reset and security notices, two-factor notices, pay-by and record-request reminders, notices when an agreement ends, and complaint acknowledgements
- Data
- Recipients' names and email addresses, and the content of each email: organisation and venue names, tip totals, dates and links. Emails never contain worker names or worker IDs; a reminder may say that a worker at a venue asked for their records. Complaint acknowledgements go to the complainant's email address and contain only the date and reference, nothing the complainant wrote.
- Worker data
- Yes: sub-processor under the DPA
- Location
- United States: Resend stores email content and logs in the US whichever region sends them
- Transfers
- Resend's DPA (section 6.4) makes transfers from the UK under the EU Standard Contractual Clauses with the UK International Data Transfer Addendum, and Resend is also certified under the UK Extension to the EU–US Data Privacy Framework (the UK–US data bridge, under the Data Protection (Adequacy) (United States of America) Regulations 2023).
- Its own changes
- 14 days' notice to us. Its list: resend.com/legal/subprocessors
- Note
- In October 2026 the Data Privacy Framework list showed Resend's certification as active, with re-certification under review.
Stripe
Proposed: to be confirmed before launch
- Provider
- Stripe Payments Europe, Limited, with Stripe Payments UK, Ltd. for UK payment services
- Established in
- Ireland and the United Kingdom
- Purpose
- Subscription billing, checkout, invoices and the billing portal
- Data
- Billing contact name, email and address, payment card details (collected directly by Stripe, never by Fairpool), the organisation name and subscription status. No worker data.
- Worker data
- No
- Location
- Ireland, the United Kingdom and the United States
- Transfers
- Ireland is covered by UK adequacy regulations. Stripe's DPA sends personal data on to Stripe, LLC in the US, which is certified under the UK Extension to the EU–US Data Privacy Framework (the UK–US data bridge, under the Data Protection (Adequacy) (United States of America) Regulations 2023); Stripe's Data Transfers Addendum adds the UK International Data Transfer Addendum where needed.
- Its own changes
- 30 days' notice to us. Its list: stripe.com/legal/service-providers
- Note
- Stripe acts as an independent controller for much of the payment data it collects, for example for fraud prevention and its own regulatory obligations; its privacy notice applies to that data.
Independent database backups (Cloudflare R2)
Proposed: to be confirmed before launch
- Provider
- Cloudflare, Inc.
- Established in
- United States
- Purpose
- Stores a nightly copy of the database with a second provider, in case Render is lost
- Data
- A full copy of the database, encrypted on our servers before it is sent, with a key Cloudflare never has, so Cloudflare cannot read it. Each copy is deleted within 30 days.
- Worker data
- Yes: sub-processor under the DPA
- Location
- European Union: an R2 bucket in Cloudflare's EU jurisdiction, stored only in EU data centres
- Transfers
- Cloudflare, Inc. is a US company, so using it is a transfer to the US even though the data stays in the EU. It is certified under the UK Extension to the EU–US Data Privacy Framework (the UK–US data bridge, under the Data Protection (Adequacy) (United States of America) Regulations 2023). If that stops applying, its DPA (section 6.2) falls back to the EU Standard Contractual Clauses with the UK International Data Transfer Addendum.
- Its own changes
- 30 days' notice to us. Its list: www.cloudflare.com/gdpr/subprocessors/
- Note
- Planned, not yet in use. Customers will get notice under the Data Processing Agreement before it starts.
Logs and uptime monitoring
Proposed: to be confirmed before launch
- Provider
- [Log, metrics and uptime provider to be confirmed]
- Established in
- [to be confirmed]
- Purpose
- Keeps application logs and checks that Fairpool and its daily jobs are running
- Data
- Application and request logs, with share links, reset links and other tokens removed before storage. They can include IP addresses and the IDs of records.
- Worker data
- Yes: sub-processor under the DPA
- Location
- [UK or EEA region to be confirmed]
- Transfers
- [To be confirmed when the provider is chosen]
- Note
- Planned, not yet in use. Customers will get notice under the Data Processing Agreement before it starts.
Email mailboxes
Proposed: to be confirmed before launch
- Provider
- [Mailbox provider for our support and privacy addresses to be confirmed]
- Established in
- [to be confirmed]
- Purpose
- Receives and stores email sent to support@fairpool.example and privacy@fairpool.example
- Data
- Whatever people send us: usually names and email addresses, and sometimes worker details a venue includes in a support request or a complaint.
- Worker data
- Yes: sub-processor under the DPA
- Location
- [to be confirmed]
- Transfers
- [To be confirmed when the provider is chosen]