Sub-processors
These are the companies that process personal data for us, on behalf of the shops that use BookMy.Shop. We tell every Owner at least 30 days before we add or replace one, and we keep the earlier versions of this list.
This text is a working draft and will be replaced by the reviewed version before launch.
Current list
In effect since 1 November 2026
| Name | Purpose | Data categories | Processing location | Transfer safeguard |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL | Hosting, database, file storage, content delivery and email sending | Business and staff account data, customer contact details, bookings, messages | European Union | Not needed for processing inside the EEA; Standard Contractual Clauses for any support access from outside it |
| Stripe Payments Europe, Limited | Platform subscription billing (card payments to a shop go to the shop's own payment account, which the shop engages itself) | Business billing contact, subscription and invoice data | Ireland and European Union | Standard Contractual Clauses for any transfer outside the EEA |
| Twilio Ireland Limited | Text and WhatsApp verification codes and booking messages, and mobile line checks | Customer mobile number, message content | Ireland and European Union | Standard Contractual Clauses for any transfer outside the EEA |
| Cloudflare, Inc. | Human check (Cloudflare Turnstile), asked only as a step-up when a request shows risk, on the platform site, the admin area and, only once asked, a booking page | Network address and browser signals during the check, and the check's result; no booking, contact or customer data | European Union and United States | EU-US Data Privacy Framework and Standard Contractual Clauses |
| Apple Distribution International Limited (Apple Push Notification service)Not active yet: from the apps release | Push notifications to the BookMy.Shop apps on Apple devices | Device push token, notification content (booking reminders) | Ireland and United States | EU-US Data Privacy Framework and Standard Contractual Clauses |
| Google Ireland Limited (Firebase Cloud Messaging)Not active yet: from the apps release | Push notifications to the BookMy.Shop apps on Android devices | Device push token, notification content (booking reminders) | Ireland and United States | EU-US Data Privacy Framework and Standard Contractual Clauses |
Earlier versions
There are no earlier versions yet.