Where Therapy Diary App processes client information on behalf of a therapist, the therapist is normally the controller and Therapy Diary App acts as the processor. We may use the providers listed below to help us provide that service.
1. Our roles
Therapy Diary App uses third-party technology providers to operate parts of the service.
A provider is treated as a subprocessor where it processes personal information on our behalf that we are already processing on behalf of a therapist.
We require relevant subprocessors to provide appropriate protection for personal information and to process that information in accordance with applicable data-protection requirements.
More information about our processing obligations is available in our Data Processing Agreement.
2. Current subprocessors
| Provider | Purpose | Information processed | Processing location |
|---|---|---|---|
| Microsoft Azure | Application, database and infrastructure hosting. | Client names, email addresses, appointment and booking information, account information and associated technical information stored within the Therapy Diary App service. | United Kingdom — Microsoft Azure UK West. Microsoft may process limited operational or support information from other locations subject to appropriate contractual and data-transfer safeguards. |
| Twilio SendGrid | Delivery of transactional emails, including account and appointment-related emails. | Recipient email address, email content and associated delivery information where email functionality is used. | Global infrastructure. Personal data may be processed outside the United Kingdom. Appropriate international-transfer safeguards are used where required. |
| Netlify | Hosting and delivery of Therapy Diary App web application components. | Technical information such as IP addresses, requests and device or browser information when users access web application components hosted by Netlify. | Netlify operates globally distributed infrastructure and personal information may be processed outside the United Kingdom. Appropriate international-transfer safeguards are used where required. |
Netlify does not host the main Therapy Diary App client database. Client and appointment records are stored through our application infrastructure hosted using Microsoft Azure.
3. Stripe
Therapy Diary App also uses Stripe to process subscription payments made by therapists for their Therapy Diary App account.
Stripe may process therapist billing information, payment information, transaction details and related fraud-prevention information.
Stripe is not used to process therapists’ client records, appointment records or client contact information on behalf of therapists and is therefore not listed above as a subprocessor of therapist-controlled client data.
For UK users, Stripe services may involve Stripe entities in the United Kingdom and Ireland, together with other Stripe group companies and service providers where necessary. International transfers are protected using applicable data-transfer safeguards.
4. Changes to subprocessors
Therapy Diary App may add, replace or remove subprocessors as the service develops.
Where required by our Data Processing Agreement or applicable data-protection law, we will provide reasonable notice of a new subprocessor so that therapists can raise legitimate data-protection concerns.
The latest version of this page will show the subprocessors currently used by Therapy Diary App.
5. Contact
If you have questions about a provider listed on this page, contact:
[FULL LEGAL NAME] trading as Therapy Diary App [BUSINESS ADDRESS] [PRIVACY EMAIL]