Sub-processors
Last updated: 10 October 2026
These are the third parties we use to deliver our services, and which may process personal data on our behalf. We publish this list so business customers can assess it under our Data Processing Agreement.
We give 30 days’ notice before this list changes. To be told when it does, email privacy@10mb.com and ask to be added to the notification list.
Current sub-processors
| Provider | What it does | Data it may touch | Where |
|---|---|---|---|
| 20i (StackCP platform) Hawthorn House, Southwell Road West, Rainworth, Mansfield, Nottinghamshire, NG21 0HJ, United Kingdom | Servers, storage and backups for hosted sites | All data stored in or transmitted by your site | United Kingdom (company address and data centre) |
| Global Soft Technologies | Client portal and billing (clients.10mb.com): account management, invoicing and payment | Billing name, address, contact details, order history | Run by us on the hosting infrastructure above |
| Stripe, LLC 354 Oyster Point Boulevard, South San Francisco, California, 94080, USA | Taking card payments | Payment card data, handled by the processor and never stored by us | United States (company address) |
| Cloudflare, Inc. | Turnstile spam protection on the contact form | IP address and browser signals of people using the form | United States, delivered from a global network |
| Our own mail server | Sending account, support and system email, and contact form notifications | Recipient name and email address, message content | Run by us on the hosting infrastructure above |
| ManageWP (a GoDaddy company) 14455 North Hayden Road, Suite 219, Scottsdale, AZ 85260, USA | Remote updates, backups and monitoring of managed sites | Technical site data, administrator account details | United States (company address) |
Cloudflare Turnstile has been in use on our contact form since September 2026.
Analytics and advertising
We currently use no analytics or advertising providers on our own website. If that changes, they will appear here and will be blocked until visitors consent to them.