Sub-processors
Last updated: 18 June 2026
This page lists the sub-processors used by the Nimble Tech parent marketing site at nimbletech.uk. The parent site is a static brochure and ideas form; it does not process customer documents, issue licence keys, or run any AI. As a result, the list is short.
Individual Nimble Tech products use their own, larger set of sub-processors. Each product publishes its own list on its own sub-processors page.
For the sub-processors used by individual Nimble Tech products, including AWS, AWS Bedrock for AI, Stripe for payments, and Amazon SES for transactional email, see each product's own sub-processors page. The live one today is bundleright.co.uk/sub-processors.html.
Current sub-processors
| Sub-processor | Purpose | Data | Region |
|---|---|---|---|
| Netlify, Inc. | Hosting the Nimble Tech marketing site (nimbletech.uk) and processing submissions from the ideas form and the contact form | Name, email address, optional firm or organisation name, subject line, and message body, where supplied through a form on the site. No product or customer document data is sent to Netlify. | Global edge network with EU/UK presence; processing governed by Netlify's DPA |
| Google Ireland Limited (Google Fonts) | Serving the typefaces used on the marketing site | Visitor IP address (received as part of the font request only). No other personal data is sent. | Global edge network with EU/UK presence; processing governed by Google's DPA |
The parent site does not currently use analytics, advertising trackers, or a CDN beyond what Netlify provides as part of hosting. If that changes, the list above is updated before the change goes live.
Changes to this list
We will update this page when we add, replace, or remove a sub-processor. The "Last updated" date at the top reflects the most recent change. Where a change is material, for example a new provider that receives form submissions or visitor data, we will note the change here when it happens.
How we choose and oversee sub-processors
Before engaging a sub-processor for the parent site, we:
- Confirm the provider offers contractual data protection terms at least as strong as our own commitments, including UK GDPR Article 28 obligations where the provider acts as a processor
- Confirm the location and region of processing, and the safeguards in place for any international transfer
- Limit the data shared with the provider to what is necessary for the specific purpose
- Review the relationship periodically and at any material change to the site
Contact
Questions about this list can be sent through our contact form.