NC Web Solutions Ltd trading as Yacht Clubs Manager, a company registered in Northern Ireland (company no. NI736920), whose registered office is at 4th Floor, Glendinning House, 6 Murray Street, Belfast, BT1 6DN (the "Provider"), uses the third-party subprocessors below to help deliver the Yacht Clubs Manager service.
1. How we choose subprocessors
Before engaging a subprocessor we review its security and privacy practices. Each subprocessor must:
- process personal data only on our documented instructions;
- ensure that people with access to the data are bound by confidentiality;
- maintain appropriate technical and organisational security measures;
- notify us promptly of any personal data breach; and
- help us respond to requests from data subjects exercising their rights.
Where personal data is transferred outside the UK or EEA, it is protected by Standard Contractual Clauses (with the UK Addendum) or another lawful transfer mechanism.
2. Infrastructure and storage
| Subprocessor | Purpose | Location | Compliance |
|---|---|---|---|
| Amazon Web Services | File and image storage (S3), content delivery (CloudFront) and transactional email (SES) | Ireland (EU); CloudFront serves cached files from global edge locations | GDPR compliant; ISO 27001; DPA with Standard Contractual Clauses |
| Railway | Application hosting and PostgreSQL database | Amsterdam, Netherlands (EU) | GDPR compliant; DPA with Standard Contractual Clauses |
| Cloudflare | Bot and spam protection for the forms on yachtclubsmanager.com (Turnstile) | Global network; US | GDPR compliant; ISO 27001; DPA with Standard Contractual Clauses |
3. Payment processing
Card details are entered directly into Stripe and are never stored on our servers.
| Subprocessor | Purpose | Location | Compliance |
|---|---|---|---|
| Stripe | Card and online payment processing via Stripe Connect | US; Europe | PCI DSS Level 1; GDPR compliant; DPA with Standard Contractual Clauses |
4. Accounting
Data is only shared with Xero when a club chooses to connect its own Xero account.
| Subprocessor | Purpose | Location | Compliance |
|---|---|---|---|
| Xero | Invoice and payment sync for clubs that connect their Xero account | US | GDPR compliant; ISO 27001; DPA with Standard Contractual Clauses |
5. Changes to this list
We will update this page before a new subprocessor starts processing personal data on our behalf.
6. Contact
For questions about our subprocessors, email [email protected] or write to NC Web Solutions Ltd, 4th Floor, Glendinning House, 6 Murray Street, Belfast, BT1 6DN, United Kingdom.