Sub-processors — PreBookmt
Last updated: 2026-05-14
This page lists the sub-processors engaged by PreBookmt (Justin Azzopardi t/a PreBookmt, sole trader, Malta VAT MT32819405) to provide the PreBookmt Service.
This is the canonical list referenced in the Data Processing Addendum (§7.2) and forms part of our general authorisation to engage sub-processors. Any addition or replacement of a sub-processor will be announced here at least 30 days before going live, in line with the DPA's notice-and-objection process (§7.3).
For any question about a sub-processor, or to object to a proposed change, email legal@prebookmt.com.
Active sub-processors
| Sub-processor | Service performed | Region of processing | Transfer mechanism (if outside EEA) | Privacy Policy |
|---|---|---|---|---|
| Supabase Inc. | Database hosting, authentication, file storage | EU (Frankfurt) | n/a — data stays in EEA | supabase.com/privacy |
| Stripe Inc. | Subscription billing processing for business-owner accounts | US + Ireland | EU SCCs | stripe.com/privacy |
| Expo (650 Industries Inc.) | Push notification delivery to the mobile app | US | EU SCCs | expo.dev/privacy |
| PostHog Inc. | Anonymised product analytics | EU (Frankfurt — eu.i.posthog.com) | n/a — data stays in EEA | posthog.com/privacy |
| Functional Software Inc. (Sentry) | Error and crash monitoring | EU | n/a — data stays in EEA | sentry.io/privacy |
| Resend Inc. | Transactional email delivery | US + EU | EU SCCs | resend.com/legal/privacy-policy |
| Cloudflare Inc. | DNS, CDN, inbound email routing for prebookmt.com | Global | EU SCCs | cloudflare.com/privacypolicy |
| Vercel Inc. | Hosting for the prebookmt.com marketing site | Global | EU SCCs | vercel.com/legal/privacy-policy |
| Apple Inc. | App Store distribution of the PreBookmt iOS app | Global | EU SCCs (where applicable) | apple.com/legal/privacy |
| Google LLC | Google Play distribution of the PreBookmt Android app | Global | EU SCCs | policies.google.com/privacy |
What "sub-processor" means
In data protection terms a sub-processor is a third party engaged by PreBookmt to process personal data on behalf of our business-owner customers (in their role as Controllers). The PreBookmt Service cannot operate without these third parties — they store our database, deliver our emails, run our analytics, and so on.
Each sub-processor is bound by a written agreement that imposes data-protection obligations substantially similar to those PreBookmt itself owes to business-owner Controllers under the DPA. Where a sub-processor processes data outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses (EU SCCs) adopted in 2021, or an applicable adequacy decision.
Objection and notice mechanism
If you are a business-owner Controller and you wish to object to a new sub-processor on reasonable data-protection grounds:
- Email legal@prebookmt.com within 30 days of the notice (sent by email and posted on this page)
- We will either decline to engage the proposed sub-processor, propose an alternative, or — where neither is feasible — allow you to terminate the affected portion of the Service with a pro-rata refund of the unused, prepaid subscription period.
Sub-processor changes — log
| Date | Change | Effective date |
|---|---|---|
| 2026-05-14 | Initial publication of sub-processor list. | 2026-05-14 |
When sub-processors are added, replaced, or removed, an entry is added here with the announcement and the effective date.
Contact
Email: legal@prebookmt.com Postal: Justin Azzopardi t/a PreBookmt, Bellevue, Triq il-Merkanti, Ghajnsielem GSM 1951, Gozo, Malta