Last updated: 18 August 2026
Private Shares Limited (trading as RentDocs.co.uk) engages the third parties below to operate the Service. Where we act as processor for landlord customers (see our Data Processing Addendum), this list forms the authorised subprocessor list under Article 28 UK GDPR. We will give reasonable prior notice of material changes via this page. Customers can subscribe to change notifications by emailing hello@rentdocs.co.uk.
| Provider | Purpose | Data processed | Region | Transfer safeguard |
|---|---|---|---|---|
| Cloudflare, Inc. | Edge hosting, DNS, TLS, DDoS | IP addresses, request metadata | Global edge, US HQ | UK IDTA / EU SCCs |
| Supabase Inc. | PostgreSQL database, authentication, object storage | Account data, landlord content, tenant contact data, uploaded documents | UK / EU region | In-region processing |
| Twilio Ireland Ltd | SMS delivery (rent reminders, portal invites) | Tenant phone number, message body | EU / UK | In-region processing |
| Lovable (email gateway) | Transactional email delivery | Recipient email, message body, delivery logs | EU / UK | In-region processing |
| Paddle.com Market Ltd | Merchant of Record — payments, tax, invoicing | Billing name, email, card token, tax jurisdiction | UK | Paddle is a separate controller for payment data |
| Google LLC (Analytics 4, Ads) | Aggregate usage analytics and ad conversion | Cookie ID, page path, event names | Global, US HQ | UK IDTA / EU SCCs |
| Meta Platforms Ireland Ltd (Pixel) | Ad conversion measurement | Cookie ID, page path, event names | EU / US | UK IDTA / EU SCCs |
| Google (Gemini API) | AI-generated blog drafts and legal risk summaries (landlord-facing) | Prompt text from landlord content (no tenant PII sent) | US | UK IDTA / EU SCCs |
See also: Privacy Notice, Data Processing Addendum, Security.