Sub-processor Register
Version 1.1.0
Effective from
1. About this register
Go Find Part Limited (“GoFindPart”) uses a small number of specialist service providers to operate the Platform. This page lists them in one place: who they are, what they do for us, where they process data, and where their data-processing terms are published.
This register restates, in structured form, the disclosure already made in our Privacy Policy (section 4.3 “Service providers and processors” and section 5 “International Transfers”). If this page and the Privacy Policy ever disagree, the Privacy Policy prevails.
Where a provider processes personal data on our behalf, it does so under a data-processing agreement and — for transfers outside the United Kingdom — the safeguards described in section 5 of the Privacy Policy (UK IDTAs, the UK Addendum to the EU Standard Contractual Clauses, or UK adequacy decisions).
2. Service providers
| Provider | What they do for us | Processing region | Data-processing terms |
|---|---|---|---|
| Stripe | Payment processing, Stripe Connect onboarding and identity verification for sellers, and self-billed-invoice payment routing. Stripe acts as an independent data controller. | United Kingdom / United States | stripe.com/legal/dpa |
| Crisp IM SAS | In-platform support chat. Server-side relay only — Crisp loads no software and sets no cookies in your browser. | European Union (France) | crisp.chat/en/privacy |
| Amazon Web Services (AWS) | File storage (S3, London region) and transactional email delivery (SES). | United Kingdom (storage); email delivery may be processed outside the UK | aws.amazon.com/compliance/gdpr-center |
| Neon | Database of record (PostgreSQL). | United Kingdom (London) | Available on request |
| Fly.io | Application hosting (application servers). | United Kingdom (London) | Available on request |
| Upstash | Caching. | United States (provider HQ) | Available on request |
| Sentry (Functional Software, Inc.) | Error monitoring. | United States | sentry.io/legal/dpa |
| OpenAI | AI-assisted request parsing and matching. | United States | openai.com/policies/data-processing-addendum |
| Anthropic | AI-assisted request parsing and matching; automated first-line replies in the support chat (always labelled as automated, human handover available at any time). | United States | anthropic.com/legal |
Where a data-processing agreement is marked “available on request”, we hold one with the provider but they do not publish a stable public URL for it — email us and we will share the relevant terms.
3. Delivery partners
Where a courier service is engaged to move physical goods, we share the details needed to fulfil the delivery (addresses, parcel dimensions, contact information) with our courier partners — which may include Gophr, Stuart, CitySprint, DPD, and Yodel. Couriers act as independent controllers of that data. See Privacy Policy section 4.3.
4. Other recipients
As set out in the Privacy Policy, we may also share personal data with professional advisers (legal, accounting, audit, and insurance) where necessary, and with law enforcement or regulatory bodies where required by law. These are not sub-processors and are not listed in the table above.
5. Changes to this register
When we engage, replace, or retire a provider we update this page and the Privacy Policy together, and record the change in the version history of both documents.
6. Questions
Questions about this register or any provider on it: privacy@gofindpart.com.