Legal
Sub-processors
Last updated 20 October 2026
4nines processes personal data on behalf of the venues we work with. We use the providers below to do that. Each is bound by a written agreement with data protection terms at least as protective as our agreement with the venue.
We give venues at least 30 days' notice before adding or replacing a sub-processor, so they can object.
| Provider | What they do | Where data is processed |
|---|---|---|
| Railway | Application hosting | European Union (Netherlands) |
| Neon | Database hosting | United Kingdom (London) |
| Ryft | Card payments, refunds and payouts | United Kingdom |
| Stytch | Sign-in codes and account security | United States |
| Resend | Booking confirmation and service emails | United States |
| Cloudflare | Short links, network security and monitoring | Global network |
Transfers to the United States are protected by the UK International Data Transfer Addendum, or by the provider's certification under the UK Extension to the EU-US Data Privacy Framework.
Questions: use our contact form.