The small print.In plain English first.

• Railway

  The Netherlands, EU
  Hosting and the databaseTransfer safeguard: UK adequacy regulations

• Amazon Web Services

  London, UK
  Files: documents, forms and session photographsTransfer safeguard: None needed

• Resend

  Ireland, EU, run by a US company
  Sending email: every email the service sendsTransfer safeguard: UK Extension to the EU–US Data Privacy Framework, or the IDTA

• Stripe

  US
  Card and Direct Debit paymentsTransfer safeguard: UK Extension to the EU–US Data Privacy Framework, or the IDTA

No photograph of a child is ever sent by email. Session photographs stay in file storage in London and are shown only in the portal, to that family.

1. 01

   When this list changes

   We email every practice at least 30 days before we add or replace a sub-processor, and update this page. The Data processing agreement says what you can do if you object.