§ L.7 · SUB-PROCESSORS
Sub-processors
Last updated: 2026-04-29
Effective Date: 29 April 2026 Last Updated: 29 April 2026
Why We Publish This
Marathon 360 Ltd uses a small set of third-party service providers ("sub-processors") to deliver the service. Each sub-processor is contractually bound to process personal data only on our documented instructions, to maintain appropriate technical and organisational security measures, and to support our compliance with UK GDPR and the Data Protection Act 2018.
Publishing this list openly is a trust signal for enterprise clients and a transparency measure for any individual whose data we hold. We update this page within 30 days of material changes.
Active Sub-processors
| Provider | Role | Data categories | Hosting region |
|---|---|---|---|
| GoHighLevel (HighLevel Inc.) | CRM, calendar booking, chat widget, SMS / email delivery to consented website-form submitters and signed clients | Submitter names, emails, phone numbers, message content | United States |
| Neon Inc. (Postgres) | Application database (website form intake, audit logs) | Form submissions, audit metadata | EU-West-2 |
| Cloudflare, Inc. | DNS, edge CDN, WAF, transactional email (planned) | Connection IPs (transient), TLS handshakes | Global edge |
| Google LLC: GTM + Analytics 4 (GTM-PLG5XHW5) | Site analytics: page views, traffic sources | Anonymised browser identifier, page paths | United States |
| Meta Platforms Ireland Ltd.: Meta Pixel (1228590869023425) | Advertising measurement and conversion tracking | Anonymised browser identifier, conversion events | EU + United States |
What Counts as a "Sub-processor"
We list a third-party provider above when at least one of the following is true:
- They store or process personal data we control on our behalf.
- They have technical access to personal data we control, even if access is rare or supervised.
- They are essential to the delivery of the service such that their unavailability would interrupt the service.
Notice of Changes
We will publish a new version of this page within 30 days of material changes to sub-processors.
Existing clients with active service agreements will additionally receive an email notification at the time of such changes, in line with our Data Processing Addendum (available on request).
Data Processing Agreements
Where a sub-processor is also a data processor under Article 28 UK GDPR, we have a written agreement with them that includes the Article 28(3) provisions and, where applicable, EU Standard Contractual Clauses or the UK International Data Transfer Addendum.
If you would like a copy of any specific Data Processing Addendum, please contact support@marathon360.co.uk.
Contact
For questions about this list, our data processing chain, or our security posture: support@marathon360.co.uk.
Marathon 360 Ltd, Office 14505, 182-184 High Street North, East Ham, London, United Kingdom, E6 2JA. ICO Registered. Company No. 16710005.