# Third Party Subprocessors

*Last updated: March 2026*

Tern Circular Ltd uses third-party subprocessors in order to provide our services. Core subprocessors are those that we can't offer our service without. Additional subprocessors might apply if additional services are used. Tern Circular Ltd engages these third-party subprocessors in accordance with our [Data Processing Agreement](https://docs.tern.eco/v1/legal/privacy-policy-merchants/data-processing-agreement). Merchants will be notified of any changes to this list in accordance with our Data Processing Agreement.

**Data residency note:** Our primary application hosting and data storage are configured to operate from the United Kingdom (London region) at the time of writing. However, some third parties may process or route data internationally (for example, via global network delivery, email routing, analytics processing, logistics providers, payment networks, or support operations). The table below summarises primary processing locations and where processing/transfers may occur.

### Core third-party subprocessors

| Subprocessor                       | Service Provided                   | Primary Processing Location(s) | May Process / Transfer To                                                                                      | Data Processed                                                                                 |
| ---------------------------------- | ---------------------------------- | ------------------------------ | -------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------- |
| Amazon Web Services (AWS)          | Cloud hosting                      | UK (London region)             | UK; potentially other countries depending on service configuration and support operations                      | All platform data                                                                              |
| Google Cloud Platform (Google LLC) | Cloud hosting                      | UK (London region)             | UK; potentially other countries depending on service configuration and support operations                      | All platform data                                                                              |
| Amazon Simple Email Service (SES)  | Email transmission                 | UK/EEA (service-dependent)     | USA and other countries depending on email routing and service operations                                      | Personal data necessary to provide transactional emails                                        |
| Cloudflare                         | Load balancing and DDoS protection | Global edge network            | Global                                                                                                         | Network traffic and related technical data necessary to provide security and delivery services |
| Google Analytics (Google LLC)      | Service analytics                  | USA and other countries        | USA and other countries                                                                                        | Service usage and conversion events (configured to avoid sending direct customer identifiers)  |
| Popout, Inc. DBA Shippo            | Fulfillment services               | USA                            | USA and other countries                                                                                        | Personal data necessary to provide shipping and fulfillment services                           |
| Auctane, Inc. DBA ShipEngine       | Fulfillment services               | USA                            | USA and other countries                                                                                        | Personal data necessary to provide shipping and fulfillment services                           |
| Stripe Payments UK, Ltd.           | Payment processing                 | UK / Ireland                   | UK/EEA; and other countries as necessary for payment processing (including card networks and banking partners) | Personal data necessary to provide payment processing services                                 |