Sub-Processors

This page lists the third-party processors and sub-processors used by Fliplet to provide and support its services. These third parties may process limited customer data on Fliplet's behalf, strictly in accordance with applicable contractual, security, and data protection obligations.

What is a sub-processor?

Under the UK GDPR and EU GDPR, a sub-processor is a third-party service provider engaged by Fliplet to process personal data on behalf of its customers. This includes providers such as cloud infrastructure services, analytics platforms, communications tools, and managed service providers that support the operation, delivery, and security of Fliplet's services.

Sub-processors may process customer data only where necessary to provide their services to Fliplet and are contractually restricted from accessing or using customer data except in accordance with Fliplet's documented instructions.

Our commitments

Fliplet applies a rigorous and consistent approach when selecting and managing sub-processors.

All sub-processors are engaged under written agreements that impose data protection, confidentiality, and security obligations equivalent to those set out in Fliplet's Data Processing Agreement with customers.

Before engaging a sub-processor, Fliplet conducts appropriate due diligence to assess their security controls, data handling practices, and compliance with applicable data protection laws.

Sub-processors are permitted to process customer data solely for the purpose of providing services to Fliplet and are prohibited from using customer data for their own purposes.

Fliplet remains responsible for the performance of its sub-processors in accordance with applicable data protection law.

International data transfers

Some sub-processors may process data outside the United Kingdom or European Economic Area. Where this occurs, Fliplet ensures appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• The UK International Data Transfer Agreement or the UK Addendum to the EU SCCs
• Adequacy decisions, where applicable

The table below identifies each sub-processor and the general location where processing may occur.

Updates to this list

Fliplet maintains a general authorisation to engage sub-processors in accordance with its Data Processing Agreement.

This page is kept up to date and will be updated when new sub-processors are added or existing sub-processors are replaced.

Customers may raise questions or objections to a sub-processor in line with the terms of their Data Processing Agreement.

For any queries regarding this list, please contact hello@fliplet.com.

Sub-processors