Personal Data: Third party processing 2018

The General Data Protection Regulations 2016 (GDPRs) require us to explain with whom, how and why we share your personal data.

The list displayed below sets out the authorised suppliers and partners with whom we share relevant personal data. All suppliers listed are subject to the requirements of the GDPRs and links are included below to their own Privacy Notices published on their website. These notices resources provide additional guidance on how our suppliers and partners meet their GDPR obligations as ‘Data Processors’ of your personal data which we share with them.

We have obtained your consent to share your personal data in accordance with our Privacy Notice. If you wish to withdraw your consent or amend your
preferences for how we use your personal data, please visit the page above for more information on how to do so.

Third Party (EU) Purpose of processing personal data GDPR Compliant
Xero Limited Legitimate interest: Invoicing contracted customers https://www.xero.com/uk/about/terms/privacy
Acceptacard Limited Legitimate interest: Facilitating customer payment https://www.payacardservices.com/privacy
Microsoft Enterprise Online Services Legitimate interest: Managing customer data https://www.microsoft.com/en-us/TrustCenter/Privacy/gdpr/FAQ