International Transfers

We prefer UK/EEA processing where practical. Some subprocessors may process data in other countries to provide hosting, email, payments, or support.

Where UK GDPR restricted transfers apply, we rely on appropriate safeguards such as UK adequacy regulations, the UK International Data Transfer Agreement / Addendum, or standard contractual clauses approved for use in the UK, together with transfer risk assessments where required.

If you invite clients or partners outside the UK to access portals or shared links, you remain responsible for your own transparency and transfer assessments as controller of Customer Data.