Pricebook.vet is operated by Helpsome Limited (trading as Helpsome.ai; company number 16464301, registered office 11c Alma Road, Snettisham, PE31 7NY, United Kingdom). To run the service we rely on a small number of third-party sub-processors. This page lists who they are, what they do, and where they process data.
If you have a question about any sub-processor, contact us at privacy@helpsome.ai.
#Current sub-processors
| Sub-processor | Purpose | Region | Website |
|---|---|---|---|
| Neon | Database services | EU [TODO: confirm exact Neon region - eu-central-1 / eu-west-2] | https://neon.tech |
| Railway | Application hosting | [TODO: confirm Railway region - they run in several; pick one in the EU/UK] | https://railway.app |
| Amazon Web Services (AWS) | Storage and CDN services | eu-west-2 (London) | https://aws.amazon.com |
| Google LLC | Google Analytics 4 - aggregated usage analytics for pricebook.vet and app.pricebook.vet only; not used on the embed widget |
United States (transfer relies on the UK-US Data Bridge; Google LLC is a certified participant) | https://policies.google.com/privacy |
| Google Ireland Limited | Account sign-in (when a user chooses Google as their identity provider) and other Google identity / security services | Ireland (data controller for UK/EEA users) | https://policies.google.com/privacy |
| Email provider | Transactional email (account verification, password reset, publish notifications) | [TODO: provider decided in #256] | [TODO] |
#What "sub-processor" means
A sub-processor is a third party we use to help deliver Pricebook.vet that may, as a result, process personal data on our behalf. We only share the minimum data each sub-processor needs, and each is bound by a written agreement that requires appropriate security and data-protection standards.
#Published data is different
The pricing data you publish through Pricebook.vet is intentionally made public: it is served by CloudFront to pet owners via the widget on your whitelisted domains, and is exposed as structured JSON-LD for search engines and other consumers of public pricing data. That is the point of the product - publishing is the service. Draft data and internal notes are treated as your confidential data and are never shared with third parties except the infrastructure sub-processors above who host it on our behalf.
#International transfers
We aim to keep all personal data in the UK or the EEA. The only sub-processor currently based outside the UK/EEA is Google LLC, which processes Google Analytics 4 data in the United States. We rely on the UK-US Data Bridge (the UK extension of the EU-US Data Privacy Framework, in force since October 2023) as the adequacy mechanism for that transfer; Google LLC is a certified participant. If the Data Bridge is ever invalidated, we will fall back to Standard Contractual Clauses with the UK International Data Transfer Addendum (UK IDTA) and update this page accordingly.
#Notification of changes
We will update this page whenever we add, remove, or materially change a sub-processor. If you have a B2B Data Processing Agreement in place with us, we will also notify you by email [TODO: confirm notice period - suggested 30 days] before a new sub-processor starts processing personal data, giving you a reasonable opportunity to object.
#Contact
Questions about sub-processors: privacy@helpsome.ai.