Sub-processors
Last updated: 05-06-2026
When clubs and governing bodies use Club Membership Cloud, we act as their data processor for the membership and related data they input into the platform. To provide the service, we use a small number of trusted third parties (“sub-processors”) who process personal data on our behalf, under contract.
This page lists our current sub-processors for transparency. It supports the sub-processor notification terms in our standard Data Processing Agreement, under which we give clubs at least 30 days’ written notice before engaging any new sub-processor.
| Sub-processor | What they do | Location | Safeguards |
|---|---|---|---|
| Stripe, Inc. | Payment processing for platform transactions | Global (PCI‑DSS Level 1 certified) | Raw card data never passes through our own servers |
| Cloud Heroes / Ark Data Centres | Platform hosting | United Kingdom | ISO 27001 accredited data centres |
| Dropbox, Inc. | Encrypted backup storage | United States | Data is fully encrypted before transfer; appropriate transfer safeguards apply |
Changes to this list
If we plan to engage a new sub-processor, we’ll notify affected clubs at least 30 days in advance, in line with the terms of our Data Processing Agreement. Clubs have the right to object within the notice period.
Questions?
If you’re a club or governing body and want more detail on any of the above, including copies of the relevant data processing terms we have in place with these providers, contact Matt Sanwell at matt@designunltd.co.uk.
