Data Processors

Data Processors used by YouCanBookme Ltd (‘YCBM’) as of February 2019

Our Privacy and Data Protection Notice includes details of the scope, nature and purpose of the processing of data where we are the Data Processor, the duration of the processing, the types of personal data processed and the data subjects involved as required by Article 28(3) of the General Data Protection Regulation (GDPR)

  • Sub processors - those entities contracted to provide specific services to YouCanBook.me in order for YCBM to deliver its product and service to customers.
  • Processors in common - those entities that the user has to have an account with, and we communicate via API and are dependent on Customers managing their own data on their own 3rd Party accounts, any data we share with processors in common will be dealt with in accordance with their privacy terms (i.e. they are not a sub-processor of ours).

Sub-Processors

Company Name (including links to their statement of compliance)

DPAs / Privacy Shield Registration

Nature and purpose of service

Types of personal data (PII) processed

Duration of processing

Country where processor is based

Amazon Web Services, Inc.

DPA

Privacy Shield

Web Hosting

Cloud Service Provider

IP address, Name, email address, postal address, and other PII entered into YCBM booking form as may be requested by a Account holder*

Data is held and managed via account holder’s cloud calendar account, and retrieved and held by AWS systems for a default period of 2 years.*

USA

Twilio, Inc.

DPA

Privacy Shield

Cloud-based SMS Notification Services

Phone numbers entered into YCBM booking form as may be requested by a Account holder*

PII deleted after a maximum of 121 days (‘Minimum Time to Live’ limits set by carriers and enforced by Twilio)

USA

Postmark, by Wildbit Inc

DPA

Privacy Shield

Cloud-based Email Notification Services

Email addresses entered into YCBM booking form as may be requested by a Account holder*

45 Days for all emails excluding bounce data.

USA

HelpScout, Inc

DPA

Privacy Shield

Cloud-based Customer Support Services

Name, Email Address, Job Tile, Company

Manual deletion on request

USA

Stripe Inc & Stripe Europe, Ltd

DPA

Privacy Shield

Cloud-based Payment Services

Customer Name, email address and postal address

7 years from either the end of the contract or the date you last used our Service

USA

Ireland

Drip.com

DPA

Signed DPA PDF

Cloud-based email communication service

Customer Name, email address

3 years from the last date on which a data subject has interacted with us

USA

Nicereply.com

DPA Pending

Cloud-based survey and feedback service

Customer Name, email address

3 years from the last date on which a data subject has interacted with us

USA

Airtable.com

DPA (Sign to view)

Cloud-based spreadsheet and database service

YCBM account holder details - name and email address

3 years from the last date on which a data subject has interacted with us

USA

Slack Technologies Inc

DPA

Privacy Shield

Cloud-based Communication Services

Internal Communication tool

3 years from the last date on which a data subject has interacted with us

USA

Xero Limited

DPA

Cloud-based Accounting Services

Customer email address, postal address and any other billing details

8 years from the end of the tax year to which the records relate

New Zealand

Hubspot

DPA

Privacy Shield

Cloud-based CRM Service

Customer or Prospect Name, email address and social media profile information

3 years from the last date on which a data subject has interacted with us

USA

Civilized Discourse Construction Kit, Inc.

DPA

Privacy Shield

Cloud-based Community Forum Application

YCBM account holder details - name and email address

3 years from the last date on which a data subject has interacted with us

USA

*YCBM account holders can change this period

Processors in common

Company Name (including links to their statement of compliance)

Nature and purpose of service

Types of personal data (PII) processed

Duration of processing

Country where processor is based

Google Inc (Google Calendar)

Calendar Cloud Service Provider

PII collected on a Booking form (name, email)

Subject to Data Controller

USA

Google Inc (Gmail Integration)

Cloud Email Service Provider

YCBM account holder details - name and email address

Subject to Data Controller

USA

Apple Inc (ICloud)

Cloud Service Provider and Services

PII collected on a Booking form (name, email)

Subject to Data Controller

USA

Microsoft Corporation (Microsoft Azure)

Cloud Service Provider

PII collected on a Booking form (name, email)

Subject to Data Controller

USA

Zapier

Cloud Service Provider

PII collected on a Booking form (name, email)

Subject to Data Controller

USA

Stripe Inc & Stripe Europe, Ltd (Stripe Connect)

Cloud-based Payment Services

PII collected on a stripe-connect embedded payment form (name, email)

Subject to Data Controller

USA

Ireland

Zoom.us

Cloud Service Provider

PII collected on a Booking form (name, email)

Subject to Data Controller

USA

Facebook Inc

Cloud-based 3rd Party Login Service

YCBM account email address

Subject to Data Controller

USA