Sub-processors
The other companies that handle personal data on our behalf, and where they hold it.
Current as of 26 September 2026
To run Easy Comp Central we use a small number of other companies, to store our database, send our email, take payments and so on. Where one of them handles personal data for us, it is called a sub-processor. This page lists every one of them, what they do for us, what they see and which country they hold it in. We publish it so that anyone can check where their information goes, and so that our customers are told before the list changes.
This page is updated whenever the list changes, and every previous version stays available below.
| Service provided | Personal data processed | Terms | ||
|---|---|---|---|---|
| Databricks, Inc.Neon, a Databricks company | Hosts the main database, where almost everything in the platform is stored. | All personal data held by the platform: account details, competitor records including dates of birth and health information, entries, results, payments and messages. | Stored in the United Kingdom (AWS London, eu-west-2). Neon was acquired by Databricks, Inc., a United States company, which is the processor and can access the data from there.Outside the UK and EEATransfer safeguard: UK International Data Transfer Addendum (version B1.0) to the EU Standard Contractual Clauses, both incorporated in the Databricks data processing addendum. The data itself remains stored in London; the transfer arises because a United States processor can access it. | Databricks Data Processing Addendum |
| Vercel Inc. | Runs the website and the mobile app’s API, and keeps the short-term server logs. | Everything sent to or from the site while you use it, plus whatever appears in server logs, typically email addresses and account identifiers. | United States (company), with processing in the provider’s default cloud regionOutside the UK and EEATransfer safeguard: UK Extension to the EU–US Data Privacy Framework, with the UK International Data Transfer Addendum as a fallback. | Vercel Data Processing Addendum |
| Stripe Payments Europe, LimitedStripe | Takes card payments and pays organisers and clubs. Stripe decides for itself how to use payment data for fraud prevention and its own legal duties, so for that part it is not acting only on our instructions. | Payer name, email address, billing address and card or bank details. Payout details for organisers and clubs. | Ireland, with group processing in the United StatesOutside the UK and EEATransfer safeguard: UK Extension to the EU–US Data Privacy Framework, with the UK International Data Transfer Addendum as a fallback. | Stripe Data Processing Agreement |
| Cloudinary Ltd. | Stores and delivers uploaded images: profile pictures, competitor photographs and running-order documents. | Photographs, including photographs of children, and any names that appear in an uploaded document. | United StatesOutside the UK and EEATransfer safeguard: UK Extension to the EU-U.S. Data Privacy Framework. Cloudinary Inc. holds an active certification covering non-HR data, verified on the public register at dataprivacyframework.gov on 26 September 2026. The UK International Data Transfer Addendum to the EU Standard Contractual Clauses is retained as a fallback. | Cloudinary Data Processing Agreement |
| Plus Five Five, Inc.Resend | Sends every email the platform sends. | Recipient name and email address, and the full content of the message, which often names a competitor and a competition. | United StatesOutside the UK and EEATransfer safeguard: UK Extension to the EU–US Data Privacy Framework, with the UK International Data Transfer Addendum as a fallback. | Resend Data Processing Addendum |
| 650 Industries, Inc.Expo | Delivers push notifications to the mobile app. | Device push tokens, and the title and text of each notification, which usually names a competitor or a competition. | United StatesOutside the UK and EEATransfer safeguard: UK Extension to the EU–US Data Privacy Framework, with the UK International Data Transfer Addendum as a fallback. | Expo privacy policy and terms |
| Hetzner Online GmbH | Stores the competition results files that are uploaded to us. | Competitor names, placings and event details contained in results files. | Germany | Hetzner Data Processing Agreement |
| Google Ireland LimitedGoogle reCAPTCHA | Checks that our registration and support forms are being filled in by a person rather than a machine. | IP address and how the form was interacted with: mouse movement, typing and similar signals. | Ireland, with Google LLC in the United States as an onward sub-processorOutside the UK and EEATransfer safeguard: UK Extension to the EU-U.S. Data Privacy Framework. For the free reCAPTCHA product Google acts as an independent controller of what it collects rather than as our processor, so there is no processing agreement to hold for it. | Google Terms of Service and reCAPTCHA terms |
| Google LLCGoogle Maps (in the Android app) | Draws the maps in the Android app that show where competitions, venues and judging opportunities are. | Your device’s IP address and the part of the map you are looking at, along with technical information about the device that Google’s map software collects. No name or account information is sent. | United StatesOutside the UK and EEATransfer safeguard: UK Extension to the EU-U.S. Data Privacy Framework. Google acts as an independent controller for the data its map software collects rather than as our processor, so there is no processing agreement to hold for it; what applies is Google’s own privacy policy. | Google Privacy Policy |
| Apple Inc.Apple Maps (in the iPhone and iPad app) | Draws the maps in the iPhone and iPad app that show where competitions, venues and judging opportunities are. | The part of the map you are looking at, handled by the map software built into your device. Apple states that map use is not associated with your Apple Account. No name or account information is sent by us. | United StatesOutside the UK and EEATransfer safeguard: UK Extension to the EU-U.S. Data Privacy Framework. As with Google, Apple acts as an independent controller for what its built-in map software collects rather than as our processor. | Apple Privacy Policy |
| OpenStreetMap FoundationOpenStreetMap | Supplies the map images on the competition map, and turns a place name or postcode you type into a location so we can show what is near it. | Your device’s IP address, the part of the map you are looking at, and any place name or postcode you type into the search box. No name or account information is sent. | United Kingdom and European Union | OpenStreetMap Foundation operations policies |
| IDDQD Limited, trading as Ideal Postcodespostcodes.io | Turns a postcode into a location, so the site can work out how far away a competition is and show it on a map. | The postcode being looked up, and nothing else. The lookup is made by our server rather than by your device, so your IP address is never sent. A postcode on its own identifies a street rather than a person, but a home postcode is personal data, so it is listed. | United Kingdom | Ideal Postcodes terms of use |
| FOSSGIS e.V.OSRM (Project OSRM routing service) | Works out the driving distance and journey time between a club and a competition venue, so the app can show parents how far a competition is and how long it takes to get there. | The map coordinates of the club and of the competition venue. No name, account or device information is sent, and the coordinates are of the addresses on record rather than of your device. We treat them as personal data because a club address can be someone’s home. | Germany | Project OSRM API usage policy |
One region is still being confirmed with the provider and is marked as such in the table. We will update this page and notify subscribers as soon as it is settled.
Change history
Every change to the list since it was first published, newest first. Nothing is ever removed from this table.
Previous versions
The list exactly as it stood on each date. If you need to know what we published at a particular moment, this is it.
- 26 September 2026In force now
Get told when this changes
Give us an email address and we will write to you at least 30 days before any change to this list takes effect. We use the address for nothing else, and you can stop the emails at any time.
Related
If you have a question about anything on this page, email us at [email protected].