Introduction
This page lists the sub-processors that Salon Whisper engages to help deliver our platform. Each sub-processor is bound by a written contract that meets the requirements of UK GDPR Article 28.
This list applies to data we process on behalf of our Customers (where we act as processor) and is incorporated into our Data Processing Agreement, which forms part of our Terms & Conditions. It also informs our role as controller in respect of our Customers and Visitors — see our Privacy Policy for more.
Current Sub-processors
The table below reflects the sub-processors we currently use. We update this list when sub-processors are added, removed or replaced.
Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
Stripe | Payment processing via Stripe Connect; identity verification; fraud prevention. | USA / Ireland | UK IDTA / SCCs |
Meta Platforms | Instagram Direct Messages and Facebook Messenger integration. | USA / Ireland | UK IDTA / SCCs |
WhatsApp (Meta) | WhatsApp Business API messaging. | USA / Ireland | UK IDTA / SCCs |
Mailgun (Sinch) | Outbound and inbound email; deliverability infrastructure. | USA / EU | UK IDTA / SCCs |
20i Ltd | Domain registration and DNS management. | United Kingdom | N/A (UK) |
Twilio | SMS message delivery and UK number provisioning. | USA / Ireland | UK IDTA / SCCs |
Supabase | Database, authentication, realtime, file storage and Edge Functions. | United Kingdom (London) | N/A (UK) |
Vercel | Hosting and edge network for the Salon Whisper website. | USA | UK IDTA / SCCs |
Anthropic | AI Agent functionality and language-model processing (Scale tier). | USA | UK IDTA / SCCs |
Vercel Analytics | Anonymised website traffic and usage measurement. | USA | UK IDTA / SCCs |
Google Analytics | Website analytics and visitor behaviour measurement. | USA | UK IDTA / SCCs |
GoHighLevel | Marketing automation, lead capture and email / SMS sequences to prospects and Customers. | USA | UK IDTA / SCCs |
Notification of Changes
We will give Customers at least 14 days’ notice of any addition or replacement of a sub-processor that processes End Client Data. Notice will be given by email or through an in-product notification.
Customers may object to a new sub-processor on reasonable data-protection grounds during the notice period. If we cannot accommodate an objection, the Customer may terminate the affected part of the service in accordance with our Terms.
Subscribe to Updates
To be notified by email when this list changes, email support@salonwhisper.com with the subject line “Subscribe — sub-processor updates”.
How We Choose Sub-processors
Before we engage any sub-processor that will process personal data, we carry out due diligence including:
- review of the sub-processor’s security and privacy practices;
- confirmation of an appropriate written contract (Article 28-compliant data-processing terms);
- assessment of any international transfer risk and the safeguards in place;
- ongoing monitoring of the sub-processor’s performance and security posture.
Contact
Salon Whisper Ltd
Privacy contact: support@salonwhisper.com
Last updated: 1 May 2026