Sub-processors & Data Processing
The third parties we engage to process personal data on our behalf, what they do, and where they are located.
What This Page Covers
To run our website and deliver our services, Rebox HR uses a small number of trusted third-party providers (“sub-processors”) that may process personal data on our behalf. In line with UK GDPR Article 28, this page lists each one, the purpose for which they are engaged, and where they process data. We keep this list current and review it whenever we add or change a provider.
Our Sub-processors
| Sub-processor | Purpose | Processing location |
|---|---|---|
| Vercel Inc. | Website hosting, content delivery (CDN) and form-handling infrastructure | United States / global edge network |
| MailerSend (Mailer Technologies Inc.) | Delivery of transactional emails generated by contact and quote form submissions | United States / European Union |
| MailerLite (UAB MailerLite) | Newsletter sign-ups and email marketing to subscribers who have opted in | European Union (Lithuania) / United States |
| Freshworks Inc. (Freshdesk) | Support ticketing and management of customer enquiries | European Union / United States |
| Google LLC | Website analytics (Google Analytics 4) and spam protection (reCAPTCHA), loaded subject to cookie consent | United States / global |
| GitHub, Inc. (Microsoft) | Version-controlled storage of website content managed through our CMS | United States |
Where a sub-processor transfers personal data outside the UK or European Economic Area, that transfer is covered by appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.
Data Processing Agreement (DPA)
Where Rebox HR acts as a processor of your personal data, we make a Data Processing Agreement available that sets out our obligations under UK GDPR Article 28, including the use of the sub-processors listed above. Business customers and security reviewers can request a copy of our DPA at any time.
To request our DPA, or to ask a question about any provider listed here, please get in touch via our contact form.
Related Policies
This page should be read alongside our Privacy Policy and Cookie Policy, which explain how we collect and use personal data more broadly.
Last updated: June 2026