We primarily Process your Personal Data – including back-ups and archives – in the EEA and in countries the European Commission has recognised as providing adequate levels of protection (Adequate countries): (full list tbc)

Certain systems or databases we use are partially or entirely hosted outside the EEA in third countries that haven’t been listed as Adequate (our accounting system; Xero). However, we have put in place the following appropriate measures to ensure that it is treated by those third parties in a way that is consistent with and which respects the EU and UK Data Protection Laws: (e.g. standard contractual clauses with Cloudflare, our website hosts).  Contact our Privacy Lead to find out more.