Subprocessors
The suppliers behind CoreCare delivery.
This list covers suppliers that may process customer personal data for the hosted CoreCare suite. A supplier is included only for the services actually enabled for a customer.
Last reviewed 5 August 2026
| Supplier | Role and purpose | Data and location notes |
|---|---|---|
| Cloudflare, Inc. and relevant group entities | Processor/subprocessor for network delivery and security, Workers application hosting, D1 database, R2 object storage where configured, service observability and identity protection. | Account, product, technical, security and hosted customer data as required by the enabled service. Cloudflare operates an international network; applicable contractual transfer safeguards are used for restricted transfers. |
| Stripe Payments Europe, Limited and relevant Stripe group entities | Payment service for live subscription checkout, payment administration, fraud prevention and related financial compliance. Stripe may act as processor for some activities and independent controller for regulated payment activities. | Billing contact, subscription, transaction, device and payment-method information when a person actively opens live Stripe checkout. Payment-card details are collected by Stripe, not by the CoreCare website. Stripe may process data internationally using the safeguards in its DPA and transfer addendum. |
Payment and optional integrations
Stripe is listed because live subscription checkout is offered after a trial. It is not a product database and does not receive customer care, booking, workshop, finance-ledger or POS operational records through this checkout. Read Stripe’s privacy notice and Stripe’s DPA for its current roles and safeguards.
Another integration is not automatically a Subprocessor for every CoreCare product. Where a customer enables an optional service that processes Customer Personal Data, the applicable order and this list will identify it before production use.
Changes and objections
Customers may subscribe to change notices by emailing privacy@corecaresystems.co.uk. CoreCare will give reasonable advance notice of a new or replacement Subprocessor where practicable. A customer may raise a reasonable data-protection objection under the DPA.