Sub-processors
Last updated: 24 September 2026
Webmiqo uses a small number of specialist providers to run the service. Each one is bound by a written contract, may act only on our instructions, and is held to confidentiality and security obligations no less protective than those in our Data Processing Agreement.
Categories of recipients
| Category | What it is used for | Personal data involved |
|---|---|---|
| Authentication and database | Signing you in and storing your workspace | Account email addresses, workspace and website data, contact enquiries, agenda data (clients and appointments) |
| Media storage and delivery | Storing and serving the images and files you upload | Images and files, which may show identifiable people |
| Payments and invoicing | Taking payment and managing subscriptions | Billing contact details and payment records. Our payment provider acts as an independent controller for payment data under its own terms |
| Transactional email | Sending sign-in codes, enquiry notifications, service notices, the appointment e-mails you switch on and the messages you send through the assistant | Recipient email addresses and message content, including your clients' names and appointment details |
| AI text generation | The writing features on paid plans, understanding the questions you ask the assistant, turning a spoken question into text, and wording a message you ask the assistant to send | Business information submitted for a writing request, and the questions you type or speak for the assistant (a spoken question is sent as a short recording, not stored by Webmiqo). Contact enquiries, agenda and client records, billing data and credentials are never sent |
| Hosting | Running the application and the websites we publish | All data processed by the platform, at rest and in transit |
The named list
We will give you the name and processing location of the provider in each category. Customers receive it on request, and so does anyone exercising a right of access to their own personal data. Write to hello@webmiqo.com.
We publish categories rather than names here because that is what identifies who your data reaches and why. The identity of each provider is available to everyone entitled to it, without publishing our supplier arrangements to the world.
Where processing takes place
The Webmiqo application and the websites we publish run on infrastructure in the United Kingdom. Our transactional e-mail provider sends from Ireland and keeps its sending records in the United States. Transfers from the European Economic Area to the United Kingdom rely on the European Commission's adequacy decisions for the UK. Where a provider processes personal data outside the EEA and the UK without an adequacy decision, we rely on the European Commission's standard contractual clauses together with the supplementary measures set out in that provider's contract.
Changes
Before a new sub-processor starts handling customer data, we notify account holders directly. Customers have thirty days from that notice to object on reasonable data protection grounds, as described in section 4 of the Data Processing Agreement.
To be notified of changes, write to hello@webmiqo.com.