Coolstays Ltd — List of Data Processors and Subprocessors

1. Introduction

Coolstays Ltd ("Coolstays", "we", "us", "our") engages certain third-party organisations (each a "Processor" or "Subprocessor") to support the operation of our website and services.

These processors may process personal data on behalf of Coolstays in connection with providing hosting, support, communications, analytics, and related services.

Coolstays conducts appropriate due diligence and ensures that each processor:

  • Processes personal data only on our documented instructions;
  • Provides adequate technical and organisational measures to protect the data; and
  • Where personal data is transferred outside the UK/EEA, such transfers are covered by appropriate safeguards (including the UK Addendum to the EU Standard Contractual Clauses or equivalent).

This list forms part of and is incorporated by reference into the Coolstays Data Processing Agreement (DPA) and the Coolstays Privacy Policy.


2. List of Current Data Processors

Category / Purpose Processor / Service Description of Processing Location / Data Transfer Mechanism
Payments & Billing Stripe, Inc. Processes owner subscription payments, booking commissions, and voucher purchases. EEA & US — UK Addendum to EU SCCs.
Revolut Ltd Payments to voucher holders. UK & EEA — no transfer outside UK/EEA.
QuickBooks (Intuit Ltd) Accounting and invoice management; stores owner and customer company details. EEA & US — UK Addendum to EU SCCs.
Hosting & Infrastructure Amazon Web Services (AWS) Main hosting, infrastructure, and data storage. EU-West-2 (London) & EU-West-1 (Ireland) — no transfer outside EEA.
Email Delivery & Marketing SendGrid (Twilio Inc.) Sends transactional and marketing emails. US — UK Addendum to EU SCCs.
Mailchimp (Intuit Inc.) Sends newsletters and promotional campaigns. US — UK Addendum to EU SCCs.
CRM & Support Zendesk Inc. Customer and owner support management and ticketing. US — UK Addendum to EU SCCs.
Zammad GmbH Helpdesk platform for guest and owner support. EU (Germany) — no transfer outside EEA.
Analytics & Performance Google Analytics Collects anonymised usage data to improve the website. EEA & US — UK Addendum to EU SCCs.
Advertising & Remarketing Google Ads / Google Ads Remarketing (Google LLC) Displays targeted ads and remarketing campaigns based on visitor behaviour. EEA & US — UK Addendum to EU SCCs.
Facebook / Meta Advertising (Meta Platforms, Inc.) Provides advertising and remarketing via the Meta Pixel. EEA & US — UK Addendum to EU SCCs.
Authentication / Sign-in Google Enables optional sign-in via Google accounts. EEA & US — UK Addendum to EU SCCs.
Facebook (Meta Platforms Inc.) Enables optional sign-in via Facebook. EEA & US — UK Addendum to EU SCCs.
Apple Inc. Enables optional "Sign in with Apple" authentication. EEA & US — UK Addendum to EU SCCs.
AI and Content Analysis OpenAI, L.L.C. Analyses guest and owner enquiry messages (via ChatGPT / API) to detect potential bookings and assist with operational insights. US — UK Addendum to EU SCCs; data processed under enterprise/API terms (no model training on submitted content).
Google Gemini (Google DeepMind / Google Cloud) Provides AI-driven summarisation, content classification, and operational assistance tools. EEA & US — UK Addendum to EU SCCs.
Claude (Anthropic PBC) Used internally for language-based assistance, summarisation, and analysis of non-sensitive data sets. US — UK Addendum to EU SCCs.
Development & Issue Tracking GitHub Inc. Used by developers for source control and issue tracking; may incidentally contain owner/guest data in debugging materials. US — UK Addendum to EU SCCs.
Monday.com Ltd Project and bug-tracking platform; limited owner/guest data may be stored for technical troubleshooting. Israel (adequacy decision) & US — UK Addendum to EU SCCs.
Communications Slack Technologies Internal staff communication where limited customer data may be referenced. US — UK Addendum to EU SCCs.
Document & File Management Google Workspace Internal email, calendar, and document management. EEA & US — UK Addendum to EU SCCs.
Monitoring & Security Cloudflare Inc. Security, performance optimisation, and DDoS protection. US — UK Addendum to EU SCCs.

3. Updates to This List

Coolstays may appoint new subprocessors or remove existing ones as business needs evolve.
When changes occur, we will:

  • Update this list on our website; and
  • Provide notice to affected data subjects or contracting parties where required under our DPA or applicable law.

Owners and partners may request update notifications by contacting privacy@coolstays.com.

Type a location / facility to get started