LAST UPDATED: FEBRUARY 2025

To support delivery of The Service we, ChurchSuite Ltd., may engage and use data processors with access to certain Service data (each, a “Sub-processor”). This page provides important information about the identity, location and role of each Sub-processor.

A sub-processor is a third party data processor engaged by us who has, or potentially will have access to, or process Service data (which may contain Personal Data). We engage different types of Sub-processors to perform various functions, some of which are required for use of The Service, as explained in the tables below.

We require all Sub-processors to satisfy equivalent obligations as those required from us (as a Data Processor) as set forth in either our Terms of Service, or the corresponding Sub-processor’s equivalent Data Processing Addendum (“DPA”), incorporating Standard Contractual Clauses ("SCC") where appropriate, including but not limited to the requirements to:

• process Personal Data in accordance with our instructions;

• in connection with their sub-processing activities, use only personnel who are reliable and subject to a contractually binding obligation to observe data privacy and security, to the extent applicable, pursuant to applicable data protection laws;

• implement and maintain appropriate technical and organisational measures (including measures consistent with those to which we are contractually committed to adhere insofar as they are equally relevant to the Sub-processor’s processing of Personal Data on our behalf);

• promptly inform us about any actual or potential security breach; and

• cooperate with us in order to deal with requests from data controllers, data subjects or data protection authorities, as applicable.

This document does not give users of The Service any additional rights or remedies and should not be construed as a binding agreement. The information here is provided for transparency purposes, to illustrate our engagement process for Sub-processors and to provide an up-to-date list of third party Sub-processors currently used by us (as of the effective date of this document) that we may use in the delivery and support of The Service.

ChurchSuite works with certain third parties to provide specific functionality around and within The Service and to provide customer support services. These providers are the Sub-processors detailed below. In order to provide the relevant functionality or support service, we may transfer Service data or data identifying you/your organisation to these Sub-processors. Their use is limited to the indicated activities.