Sub-processors
These are the companies that help us run Simplecard Business and may handle personal data for us. We only use providers who agree to protect it.
- Version
- 1.0
- In force from
- 28 September 2026
- Last updated
- 28 September 2026
What a sub-processor is
When an organisation uses our service, we handle the details of its staff or members (“Card Data”) as its processor, under our data processing agreement. A sub-processor is a company we use that may handle that data. We also list here the main providers that handle personal data for which we are the controller, as described in our privacy notice.
Our providers
IONOS
- What they do
- Hosting: the servers that run the website and store its database and files.
- Personal data
- All data held in the service, including account details, orders and Card Data.
- Where
- Europe.
- Card Data
- Yes.
Stripe
- What they do
- Taking card and other payments on its secure payment page. For fraud prevention and financial regulation, Stripe is also a controller in its own right.
- Personal data
- The order reference and amount, the billing email address, and the payment details you enter on Stripe's page. No Card Data.
- Where
- United Kingdom, European Union and United States, protected by the UK–US data bridge or the ICO's transfer agreements.
- Card Data
- No.
Email delivery service
- What they do
- Sending our emails: order confirmations, proof questions, dispatch notices, sign-in and invitation emails and, if you agreed, offers and news.
- Personal data
- Names, email addresses and the content of our emails to you.
- Where
- Ask us for the name and location of our current provider. Transfers outside the United Kingdom are protected by adequacy regulations or the ICO's transfer agreements.
- Card Data
- Only if an email about your order mentions it, for example a question about a name on a card.
- What they do
- Sign-in with Google, only if you choose it.
- Personal data
- Your name, email address and Google account identifier. Google is a controller for your Google account under its own privacy policy.
- Where
- United States and other countries, protected by the UK–US data bridge.
- Card Data
- No.
Delivery companies
- What they do
- Postal and courier services that deliver your parcels.
- Personal data
- The recipient's name and delivery address and, where needed to deliver, a phone number or email address.
- Where
- The United Kingdom and, for international deliveries, the countries the parcel passes through.
- Card Data
- Only as printed on the cards inside the sealed parcel.
How we tell you about changes
We update this page before we start using a new provider. If the new provider will handle Card Data, we will also email the owners of every organisation account at least 30 days before the change, as our data processing agreement explains. If you object on reasonable data protection grounds, email data-officer@simplecard.io within that time.
Questions
For more details about any provider, including the safeguards for transfers outside the United Kingdom, email data-officer@simplecard.io.