Legal
Subprocessors
The third parties we engage to help us deliver our services, the personal data each receives, and the legal basis for any UK→US transfer.
Last Updated
This page was last updated on July 12, 2026 (added Hetzner Online GmbH, our game-server infrastructure provider).
About This List
Nova Grid Hosting engages the following third parties as subprocessors of personal data we process on behalf of our customers, in accordance with our Data Processing Agreement. Each subprocessor is bound by a written contract that incorporates data protection obligations consistent with Article 28 UK GDPR.
Where a subprocessor is established outside the United Kingdom and personal data is transferred to it from the UK, we identify the legal mechanism we rely on for that transfer (the UK Extension to the EU-US Data Privacy Framework, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses).
Current Subprocessors
| Subprocessor | Service | Location | Personal Data | UK Transfer Mechanism | Privacy Policy |
|---|---|---|---|---|---|
| Stripe, Inc. | Payment processing, fraud prevention, recurring billing | United States (with subsidiaries in Ireland and the UK) | Cardholder name, billing address, tokenised payment instrument, transaction metadata | UK Addendum to EU SCCs (per Stripe's published DPA); Stripe Payments UK Ltd is the UK contracting entity for UK customers where applicable | stripe.com/privacy |
| RackNerd LLC | Infrastructure provider: physical and virtual hosting, networking, storage | United States. Corporate office in Los Angeles, CA; reseller server in New York, NY. | All personal data hosted on customer accounts (controlled by you); server access logs; account metadata | Article 49(1)(b) UK GDPR derogation: transfer necessary for the performance of the hosting contract with the data subject. RackNerd LLC has confirmed (support response of 2026-04-26) that it is a U.S.-based infrastructure provider operating under U.S. legal frameworks and does not maintain UK-specific transfer mechanisms (UK Extension to the DPF, IDTA, or UK Addendum to EU SCCs). See Privacy Policy § International Data Transfers. | racknerd.com/legal |
| Hetzner Online GmbH | Cloud infrastructure for game-server hosting (Minecraft and modpack servers) | Germany (our game servers are provisioned in Hetzner's United States cloud region) | Game-server content uploaded by the customer; player usernames and connection metadata (including IP addresses); server access logs | UK Addendum to EU SCCs (per Hetzner's Data Processing Agreement) | hetzner.com/legal/privacy-policy |
| Anthropic, PBC | AI-assisted customer support chat (the "Nova" chat widget on our website) | United States | Chat message content, including any personal data the visitor types into the chat; visitor session identifier | UK Extension to the EU-US Data Privacy Framework (DPF) where Anthropic is self-certified; otherwise UK Addendum to EU SCCs per Anthropic's commercial terms | anthropic.com/legal/privacy |
| Google LLC (Google Workspace) | Email infrastructure (transactional and customer-support email, calendar) | United States (with regional data centres) | Email message content, sender/recipient addresses, calendar entries | UK Extension to the EU-US Data Privacy Framework (DPF); UK Addendum to EU SCCs as fallback per Google's Workspace DPA | policies.google.com/privacy |
| Google LLC (Google Analytics & Google Ads) | Website analytics (Google Analytics 4, measurement ID G-F8WRS3XTC3) and Google Ads conversion measurement (conversion ID AW-18061931893), fired only after the visitor accepts the cookie banner |
United States (with regional data centres) | Online identifiers (cookies set by Google's tag), IP address, page-view metadata, referrer, device/browser characteristics; for conversions: order identifier and order amount | UK Extension to the EU-US Data Privacy Framework (DPF); UK Addendum to EU SCCs as fallback per Google's Ads Data Processing Terms and Google Analytics Data Processing Amendment | policies.google.com/privacy |
| Enom LLC (a Tucows company) | Upstream domain registrar; ICANN-compliant WHOIS handling. Registrant data is collected via our self-hosted ClientExec billing portal and submitted to eNom's reseller API. | United States | Registrant name, email, postal address, phone (as required by ICANN registration agreements) | ICANN registrar contracts; UK Addendum to EU SCCs where applicable | enom.com/reseller/legal-policy-agreements/privacy-policy |
Notice of Changes
We will update this page when we add, replace, or remove a subprocessor. Customers who wish to be notified of changes by email may subscribe by writing to privacy@novagridhosting.com with the subject line "Subprocessor change notifications". The 30-day objection right set out in our Data Processing Agreement runs from the date of publication on this page.
Contact
For questions about this list or to request a copy of executed transfer-safeguard documentation, email privacy@novagridhosting.com.
Trademark Notice
“Nova Grid Hosting” is a trademark of Nova Grid Hosting LLC. The “Nova Grid Hosting” word mark is the subject of a pending federal trademark application with the United States Patent and Trademark Office (Serial No. 99793639, filed April 29, 2026). All other product names, logos, brands, and marks identified on this site are the property of their respective owners.