Sub-processors
Last updated: 21 June 2026
timeslot.ie engages a small number of third-party service providers (“sub-processors”) to help deliver the platform. Each is bound by a data processing agreement and may process personal data only on our documented instructions, in line with our Data Processing Agreement and Privacy Policy. We use EU data residency and Standard Contractual Clauses where any transfer outside the EEA occurs.
Current sub-processors
| Sub-processor | Purpose | Data processed | Location / transfer safeguard |
|---|---|---|---|
| Stripe | Card payment processing, Connect payouts, and VAT-compliant receipts for bookings and platform subscriptions | Cardholder name, email, payment token, amount (no raw card numbers reach our servers) | EU/US — Stripe is a PCI-DSS Level 1 processor; transfers under SCCs |
| PayPal | Alternative payment method for bookings and subscriptions | Payer email, name, amount | EU/US — SCCs |
| Twilio | Transactional SMS (booking confirmations and reminders) where SMS is enabled | Recipient mobile number, message content | EU/US — SCCs |
| Transactional email provider (SMTP / Amazon SES) | Delivery of confirmation, reminder, receipt and account emails | Recipient email address, message content | EU region — SCCs where applicable |
| Cloud hosting & infrastructure | Application hosting, database, and encrypted backups | All platform data, encrypted at rest and in transit | European Union |
Tenant-controlled processors
A business using timeslot.ie may connect its own payment account (e.g. its own Stripe account) or calendar (Google / Microsoft). In those cases the business is the controller for that integration and is responsible for its own processor terms; timeslot.ie facilitates the connection but does not add those as platform-wide sub-processors.
Changes and notification
We maintain this page as the authoritative list. Before adding or replacing a sub-processor that processes customer personal data, we will update this page and, for customers who have subscribed to sub-processor notifications, provide at least 30 days’ notice. If you object to a new sub-processor on reasonable data-protection grounds, contact us and we will work with you in good faith.
Contact
To subscribe to sub-processor change notifications or raise an objection, contact our Data Protection Officer at dpo@timeslot.ie.