Version 1.0 · Effective 25 May 2026
Estate-HQ is a trading name of UNIVERSALHOMEANDTECH LTD. UNIVERSALHOMEANDTECH LTD is registered in England and Wales under company number 16534780. Registered office: 15a Shrubbery Road, London, SW16 2AS, United Kingdom. ICO registration reference: ZC044007. Not VAT registered.
This page lists the sub-processors that UNIVERSALHOMEANDTECH LTD (trading as Estate-HQ) uses to deliver the Estate-HQ platform. Under the Data Processing Agreement (DPA), we are required to inform subscribers of all sub-processors and to give 30 days notice before engaging a new one.
A sub-processor is any third party that processes personal data on our behalf in connection with the Estate-HQ service. All sub-processors are bound by data processing terms and appropriate safeguards under UK data protection law.
| Provider | Role | What we send them | Location | Safeguard |
|---|---|---|---|---|
| Hostinger International Ltd | Platform hosting, MySQL database, file storage, SMTP relay, daily backups | All customer data entered into Estate-HQ (the platform runs entirely on their infrastructure) | Corporate entity: Lithuania. Data centre: United Kingdom (Manchester / London region). | UK data residency; UK IDTA in place; ICO recognised adequacy under retained EU adequacy decisions for EEA transfers |
| Revolut Ltd | Subscription payment processing | Agency name, billing email, invoice amount and reference (no card details — Revolut handles those directly with the cardholder) | United Kingdom (London) | UK-based, FCA-regulated, ICO registered |
| DeepSeek (Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co.) | Internal AI Operations Agent — analyses anonymised system-health metrics to surface operational alerts to our admin team | Aggregated system metrics: counts of signups, refund counts, failed-login counts, error-log line counts. Individual signup events are sent with agency UUIDs only — no email addresses, names or other directly-identifying personal data. See "Data minimisation in AI processing" below. | People's Republic of China | UK IDTA in place; data minimisation (UUIDs not personal data); no Tenant Passport, landlord or contractor data ever transmitted |
| Google LLC (Gemini / Imagen 4) | Marketing image generation only | Text prompts only (e.g. "a photo of UK terraced houses"). No customer data of any kind. | United States | UK IDTA / EU SCC + UK Addendum under Google's standard terms |
| Pyronome GmbH (cron-job.org) | Scheduled webhook pinger for daily billing + AI operational ticks | HTTP request to our webhook endpoint only. No customer data is included in the payload. | Germany (EU) | EU GDPR adequacy retained in UK; no personal data transmitted in payloads |
| Cloudflare, Inc. | DNS, TLS termination, DDoS mitigation, CDN for static marketing assets | All traffic to estate-hq.com passes through Cloudflare's edge. Application data is encrypted in transit. Cloudflare may temporarily hold request metadata (IP, URL, user agent) for security purposes. | United States (with EU/UK edge nodes) | UK IDTA via Cloudflare's standard DPA |
We will give all active subscribers at least 30 days written notice by email before engaging a new sub-processor or making a material change to an existing one. If you object to a new sub-processor, you may terminate your subscription within that 30-day period and receive a pro-rata refund of any unused annual subscription. Continued use after the effective date constitutes acceptance.
Sub-processor queries, DPA enquiries, or requests for the full executed IDTA / DPA documents with any sub-processor: [email protected].
