Transparency about how we protect your data, our security practices, and our commitment to compliance.
All third parties that may process personal data or access systems on our behalf.
| Vendor | Category | Role | Region | Transfer Mechanism | Production |
|---|---|---|---|---|---|
| Vercel
Privacy Policy
| Hosting & Serverless | Processor | UK (London - lhr1) | UK-US Data Bridge (DPF + UK Extension) | |
| Vercel AI Gateway
Privacy Policy
| AI Gateway / LLM Routing | Processor | Configurable (UK/EU preferred) | UK-US Data Bridge (DPF + UK Extension) | |
| Google (Vertex AI)
Privacy Policy
| AI Model (Free Bill Check) | Sub-processor Reached through Vercel AI Gateway. Role to be confirmed against the gateway's terms. | TBD | TBD - Confirming mechanism | |
| Supabase
Privacy Policy
| Database & Authentication | Processor | EU (eu-west-2 London) | No transfer (UK/EU only) | |
| Resend
Privacy Policy
| Transactional Email | Processor | US | UK-US Data Bridge (DPF + UK Extension) | |
| Google Analytics 4
Privacy Policy
| Web Analytics | Processor | US (with EU data processing) | UK-US Data Bridge (DPF + UK Extension) | |
| Google Search Console
Privacy Policy
| SEO & Search Analytics | Processor | US | UK-US Data Bridge (DPF + UK Extension) | - |
| Microsoft Clarity
Privacy Policy
| Session Analytics | Processor | US | UK-US Data Bridge (DPF + UK Extension) | |
| Vercel Analytics
Privacy Policy
| Performance Analytics | Processor | US | UK-US Data Bridge (DPF + UK Extension) | |
| Cloudflare Turnstile
Privacy Policy
| Bot Protection | Processor Role to be confirmed against Cloudflare's Turnstile terms. | Global edge network | TBD - Confirming mechanism | |
| Cookiebot (Usercentrics)
Privacy Policy
| Consent Management | Processor | EU | No transfer (UK/EU only) | |
| Documenso
Privacy Policy
| E-Signature | Processor | EU | No transfer (UK/EU only) | |
| Google Workspace
Privacy Policy
| Productivity & Collaboration | Processor | EU (data region configured) | UK-US Data Bridge (DPF + UK Extension) | - |
| Airtable
Privacy Policy
| Data Storage (Waitlist) | Processor | US | UK-US Data Bridge (DPF + UK Extension) | |
| POWWR / Broker360
Privacy Policy
| Brokerage Platform Partner | Role depends on activity Processor for portal connectivity and switching workflow; may act as Independent Controller for commission administration and brokerage platform activities. | UK | No transfer (UK/EU only) |
Last updated: 30 September 2026 · Review cycle: Quarterly · Contact: privacy@meetgeorge.co.uk
Questions about our security or privacy practices? Contact us at privacy@meetgeorge.co.uk
