Sub-processor List
Version 1.0 · Last updated: 5 August 2026
Pellmark is a trading name of RELION DIGITAL LIMITED, a company registered in England and Wales, company number 14972293, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ.
Annex C to the Data Processing Addendum. This page is versioned; changes are notified at least 30 days in advance under DPA clause 3.2 and recorded in the change log below.
1. Sub-processors of client and website personal data
These providers process personal data on our customers’ behalf as part of building, hosting and managing websites (Client Personal Data under the DPA).
| Sub-processor | Role in the service | Data involved | Location and transfer safeguard |
|---|---|---|---|
| Cloudflare, Inc. | Hosting infrastructure, content delivery, security and DDoS mitigation for hosted websites | Website content; form submissions in transit; visitor IP addresses and request logs (transient) | US and global network. EU-US Data Privacy Framework participant (incl. UK Extension) per the DPF registry, plus the Cloudflare Customer DPA incorporating SCCs with the UK Addendum. Verified July 2026; re-verified at launch (14 July 2026). |
| AI model providers (category): frontier and near-frontier model providers, accessed directly or via routing gateways (for example OpenRouter); providers in use may change as work is routed | AI-assisted website production at build and revision time only, with prompt-level data minimisation (DPA clause 3.4) | Brief and website content excerpts supplied for the build, which may include personal data you have supplied | US and global. Engaged on API or business terms under data processing terms with recognised safeguards (DPF where the provider is certified, otherwise SCCs with the UK Addendum), on tiers whose terms do not use submitted content to train models. See DPA clause 3.4. |
| Google (Google Workspace) | Email and document handling for support, delivery and communications | Enquiry and support content, including personal data contained in it | EEA and US. DPF participant (incl. UK Extension), plus the Google Workspace DPA incorporating SCCs with the UK Addendum. Verified July 2026; re-verified at launch (14 July 2026). |
| Slack Technologies (Salesforce) | Internal operational communications and production notifications | Excerpts of requests and delivery information, which may include personal data | US. Salesforce DPF participation (incl. UK Extension), plus DPA incorporating SCCs with the UK Addendum. Verified July 2026; re-verified at launch (14 July 2026). |
| Cloudflare Web Analytics | Cookie-free, privacy-first website analytics included on every plan. In use since 18 July 2026 | Aggregated visit data; no cookies, no cross-site identifiers; IP addresses processed transiently, not stored as identifiers | Covered by the Cloudflare entry above. |
Availability monitoring (currently UptimeRobot) checks hosted site URLs for uptime only and is not intended to process personal data; it is listed here for transparency.
2. Service providers for Pellmark’s own processing
These providers process personal data for our own business purposes as controller (running our website and its forms, billing, accounts, marketing). They are covered by our privacy policy at pellmark.com/privacy rather than the DPA.
| Provider | Role | Data involved | Location and transfer safeguard |
|---|---|---|---|
| Resend (Plus Five Five, Inc., trading as Resend) | Transactional email delivery for the enquiry, application, agency-partner, monthly-selection and audit-request forms on pellmark.com | The content of the form you submit and the contact details in it: your name, business name, email address, phone number where given, and your message | United States. Covered by the Resend Data Processing Addendum, which incorporates the Standard Contractual Clauses as amended and completed by the UK Addendum for transfers from the UK (DPA clause 6.4). Resend publishes its own sub-processor list at resend.com/legal/subprocessors. |
| Stripe (expected; to be confirmed before payments launch) | Payment processing and billing | Billing contact details and payment information for Pellmark customers | United States. Stripe participates in the EU-US Data Privacy Framework (see stripe.com/legal/data-privacy-framework). To be confirmed before payments launch. |
3. Change log
No entries yet. This log records changes made to the list after launch.
Questions about this list: support@pellmark.com.