Sub-processors
Last updated 19 October 2026
Everything third-party that can come into contact with client or customer data. The list is short because the system is small and deliberately has no analytics, no advertising and no chat widget.
| Sub-processor | What it does | Data it can see | Processing location |
|---|---|---|---|
| Brevo (Sendinblue SAS, France) | Sends confirmations, reminders, cancellation notices and any marketing you send | Customer name, email address, appointment details contained in the message | EU |
| Cloudflare, Inc. (USA) | DNS, TLS, CDN and the tunnel that publishes the booking service; hosts marchlight.pro itself; cookieless visitor statistics for marchlight.pro (Web Analytics); forwards mail sent to hello@marchlight.pro | Traffic in transit, including booking form submissions as they pass through; aggregate visit counts for marchlight.pro pages; the content of email sent to hello@marchlight.pro | Global edge network; UK/EU visitors are normally served from UK/EU data centres |
| Google LLC (USA) | Two separate things: Google Fonts serves the typefaces on marchlight.pro, and Gmail receives mail forwarded from hello@marchlight.pro | Fonts: the visitor's IP address and browser, when a page loads. Gmail: anything you email to Marchlight | USA / global |
| Sahil Sidhu (sole proprietor, India) | Operates the server, database and backups; the only human with access | All client and customer data in the system | Barnala, Punjab, India |
Notes a careful reader will want
- Google Fonts is on marchlight.pro, not on the booking widget. The widget embedded in your site loads no external fonts and no external scripts of any kind, so your patients' browsers never contact Google because of Marchlight. Self-hosting the fonts on marchlight.pro is on the list, and it will remove Google from this table for the website half.
- The booking database is not with a cloud provider. It is on a machine operated directly by Marchlight — see the security page, which is candid about what that means for uptime and for backups.
- No session recording, no advertising pixels, no third-party chat widget, no CRM. The only analytics is Cloudflare Web Analytics on marchlight.pro (cookieless, aggregate, covered by the Cloudflare row above), and the AI assistant on marchlight.pro/ai runs on our own server.
- n8n, which runs the reminder workflows, is self-hosted on the same machine. It is not a third party and no data leaves the server because of it.
Changes
Clients get 30 days' notice by email before a sub-processor is added or replaced, with the right to object and leave at no charge, as set out in clause 6 of the data processing agreement. To be added to that notification list, email hello@marchlight.pro.