Compliance
Sub-processors
Third-party service providers used in connection with Connect by Boostly. These providers may process customer personal data on behalf of Boostly as part of providing the service.
Last updated May 4, 2026
Overview
This page lists the main third-party service providers used in connection with Connect by Boostly. These providers may process customer personal data on behalf of Boostly as part of providing the service.
Each entry below names the provider, what they're used for, where the data is processed, the categories of data involved, and the safeguard that governs cross-border transfer where one is required.
Current sub-processors
| Name | Purpose | Location | Data involved | Transfer safeguard |
|---|---|---|---|---|
| Supabase | Database and authentication | Singapore | Account data, PMS-synced data, guest records | IDTA / SCCs |
| Hetzner | Server hosting | Germany | All hosted data | EEA — no transfer mechanism needed |
| Stripe | Payment processing | United States | Billing name, email, card metadata | SCCs |
| Cloudflare | CDN, DDoS protection, bot filtering | United States | IP address, request metadata, browser fingerprint | SCCs |
| Google (Analytics & Tag Manager) | Web analytics and tag management | Ireland | Usage data, session statistics, IP address | EEA |
| ActiveCampaign | Email marketing and CRM messaging | United States | Email address, name, message interaction data | SCCs |
| Resend | Transactional email delivery | United States | Email address, message metadata | SCCs |
| Mapbox | Map display | United States | IP address, approximate location | SCCs |
Updates to this list
i
We review this list regularly. If we add a new sub-processor, we update this page. The "Last updated" date in the header reflects the most recent revision.
Contact
If you have questions about any sub-processor listed above, email privacy@boostly.co.uk.