Sub-processors — Visual Sectors
Every third party that processes personal data on our behalf for the Visual Sectors platform at visualsectors.com. Referenced from Privacy Policy §5.
The Visual Sectors Data API at api.visualsectors.com is a separate product and publishes its own list. The two overlap, because both are run by the same company on the same infrastructure, but neither list governs the other.
This list is deliberately short. Each entry is verifiable in the code today.
Current
| Provider | What it does for us | Personal data it sees |
|---|---|---|
| Cloudflare, Inc. | Runs the whole platform: the Workers that serve the site and the product, the static assets, the edge counters, the private tunnel and connection pool to our database, and the bot check on the forms that send mail (Turnstile). Also supplies the country of a request | Everything that passes through the platform in transit; the country header we store; whatever Turnstile needs to judge a submission |
| Fasthosts Internet Ltd (United Kingdom) | Hosts the server holding the account database — accounts, sessions, tokens, attribution, audit trail, subscription state and run balances | All account data at rest. The database is not reachable from the internet |
| Stripe, Inc. | Takes payments, holds the card, runs the subscription and tells us when a payment succeeds, fails, is refunded or is disputed. Checkout happens on Stripe's own pages | Your email address and name, your billing address and country, your card — which goes to Stripe directly and never reaches our servers — and the amount and description of what you bought |
| Mailgun (Sinch) | Sends transactional email — address verification, password reset, and notices about the Service — and, to recipients who have separately confirmed marketing consent, product emails carrying a one-click unsubscribe. Sending domain mail.visualsectors.com, United States region | Your email address and name, and the contents of those messages |
| Calendly LLC | The booking calendar for our weekly office hours. It loads only when you open it, and you book on Calendly's own page inside the frame | What you type into it to book — your name, e-mail address and any answers — and the time you pick. We send it nothing about you |
| Google LLC | Sign in with Google, if you choose it, and Google Tag Manager, Google Analytics and Google Ads, only if you accept measurement — see Cookie Policy | For sign-in: your Google account identifier and the email address on it. For the tags: how the site is used and which ads brought you, from the browser, after you have said yes |
Open and click tracking are switched off on our Mailgun domain, deliberately: a password-reset link rewritten through a third-party tracking domain reads as phishing to filters and to people, and an invisible tracking pixel is behavioural tracking without consent.
The sending domain is deliberately separate from the main company domain, so that a deliverability problem elsewhere in the estate cannot damage the reputation carrying verification email.
Only if you accept measurement
Google Tag Manager, and every tag it loads, only runs if you accept measurement. If you decline, or never answer the banner, no script of theirs loads and they receive nothing. They are listed here because for a reader who accepts, they are live today — and a list that described only the declining reader's experience would be wrong for everyone else.
| Provider | What its tag does | What it receives, from your browser, after you accept |
|---|---|---|
| Meta Platforms | Meta pixel: which Facebook and Instagram ads bring visitors, and showing our ads to people who have visited | The pages you visit here, with the identifiers Meta uses to recognise your browser |
| TikTok | TikTok pixel: the same, for TikTok ads | The same, for TikTok |
| LinkedIn Insight Tag: the same, for LinkedIn ads | The same, for LinkedIn | |
| X Corp. | X pixel: the same, for ads on X | The same, for X |
| Yandex | Yandex Metrica: how the site is used and which searches and ads bring visitors | Usage of the site, with Yandex's browser identifiers |
| Hotjar | Session recording and heatmaps | How you scroll, move and click on the pages you visit |
| Metricool | Which of our social-media posts bring visitors | The page you arrived on and where you came from |
| LinkMink | Which referral or affiliate link you arrived through | The referral code in the link you followed |
The advertising platforms decide for themselves how they use what their tags collect, under their own privacy notices, which is why they are listed by what they receive rather than as working only on our instructions. The tags live in a Google Tag Manager container, which is changed in Google's own interface rather than by a release of this site; the Cookie Policy keeps the current list, and it changes before a tag is added.
Only if you tick visitor identification
RB2B runs only if you tick visitor identification, a separate choice from measurement in the banner and the cookie settings. RB2B's terms make it an independent controller of what its script collects, not a provider working only on our instructions, so it is listed by what it receives.
| Provider | What it does | What it receives, from your browser, after you tick it |
|---|---|---|
| GetEmails, LLC, trading as RB2B (Austin, Texas) | For visitors in the United States: matches the visit to the person making it, from RB2B's own database, and tells us who it was — name, job title, company, LinkedIn profile and, where it has one, an e-mail address — with the pages viewed | Your visit to our pages, with RB2B's own browser identifiers. RB2B says it identifies people only in the United States |
Not a sub-processor, despite appearances
Our earlier platform's providers. Pages still served from the older visualsectors.com origin carry their own arrangements and their own banner. As those pages are replaced, they leave this estate; until then, this list describes the new platform, not them.
Planned, not yet live
Listed so the list stays honest as the product grows. None of these is in the code today.
| Provider | Would do | Status |
|---|---|---|
| Any further advertising, measurement or session-recording provider | — | None planned. Adding one changes the Cookie Policy first, and it runs only after you accept measurement |
Changes to this list
We will update this page before a new sub-processor starts processing personal data. If a change materially affects how your data is handled, we will notify the address on your account.
Where each one holds data
| Provider | Location |
|---|---|
| Fasthosts | United Kingdom |
| Cloudflare | Global edge network; requests are handled near you. Cloudflare is a US company |
| Mailgun (Sinch) | United States |
| Stripe | United States, with processing in the EU and UK for customers there, under Stripe's own transfer safeguards |
| United States, under its own transfer safeguards | |
| Calendly | United States, under its own transfer safeguards |
| RB2B | United States |
Our own access is from the United States, since the controller is a US company. The safeguards for that transfer are described in Privacy Policy §6.