What is a sub-processor?
A sub-processor is a third party we engage to process personal data on behalf of our Vendors in order to provide the Service. We remain responsible for our sub-processors and we require each of them to meet data protection obligations no less protective than those in our Data Processing Addendum.
We give Vendors at least thirty (30) days’ notice before adding or replacing a sub-processor, and Vendors may object on reasonable data protection grounds as set out in the DPA. To be notified of changes, email support@orbitcommerce.net and ask to join our sub-processor notification list.
Core sub-processors
These providers are always involved in delivering the platform.
| Sub-processor | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, database, file storage, CDN, transactional email, SMS, address lookup, and backups | UK (London) / EU (Ireland) |
| Stripe | Payment processing and merchant payouts ("Orbit Payments, powered by Stripe") | US / Ireland |
| PayPal | Payment processing and subscription billing | US / EU |
| Sentry | Application error and performance monitoring | US |
| hCaptcha (Intuition Machines) | Bot protection and login security | US |
| Anthropic | AI assistant features (content generation, in-product help) | US |
| Google (Gemini) | AI image generation | US |
| Sign-in with Google (authentication) | US | |
| Meta Platforms | Sign-in with Facebook (authentication) | US |
| ShipEngine (Auctane) | Shipping rates, label generation and tracking | US |
| OpenSRS (Tucows) | Domain registration and hosted email for custom/agency domains | Canada |
| IP geolocation providers (ipinfo.io, ipgeolocation.io, GeoNames) | Approximate location from IP for tax, currency and fraud prevention | US / EU |
Optional / merchant-activated sub-processors
These only process data when a merchant chooses to connect the relevant integration to their store.
| Sub-processor | Purpose | Location |
|---|---|---|
| Amazon, eBay, Etsy, TikTok Shop | Marketplace product and order synchronisation (when connected by the merchant) | US / Global |
| Snapchat (Snap Inc.) | Advertising pixel and conversion tracking (when enabled by the merchant) | US |
Our marketing website
Our marketing website (orbitcommerce.net) uses Google Analytics and the Meta Pixel for visitor analytics and advertising, subject to cookie consent. These relate to website visitors rather than merchant store data. See our Cookie Policy for details and to manage your preferences.
International transfers
Where a sub-processor processes personal data outside the United Kingdom, we put in place an appropriate safeguard under Article 46 UK GDPR (such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework). See section 11 of our Data Processing Addendum for details.
Contact
Data protection: support@orbitcommerce.net (please mark your message “Data Protection”)