Sub-processors

BisLis stores and serves what businesses put on their sites, on their behalf. To do that we rely on the companies below. This page lists all of them.

If you run a business on BisLis, you are the data controller for your customers' details and we are your processor. That means we only use these companies for the purposes below, we stay responsible to you for what they do, and we will publish anyone new here before they start — so you have the chance to object.

Cloudflare, Inc.

What it does for us
Hosting, content delivery, DNS, and bot protection on the contact and booking forms.
Services used
Workers, D1, R2, DNS, Turnstile
Data it can reach
Everything a site holds: business details, and the names, phone numbers, emails and messages left through booking and contact forms.
Where
Processed at the Cloudflare edge location nearest the visitor, worldwide. Stored data (D1, R2) is held in the European Union.
Transfers outside the EEA
Cloudflare is a US company, so processing can involve a transfer outside the EEA. Covered by the EU Standard Contractual Clauses in Cloudflare's own data processing addendum.
Their terms
Data processing addendum

Email delivery provider not in use yet

What it does for us
Sending enquiry and booking notifications to the business owner's own inbox.
Services used
SMTP relay
Data it can reach
The contents of the notification: the sender's name, and their phone or email, and their message.
Where
To be confirmed when the provider is chosen.
Transfers outside the EEA
To be confirmed when the provider is chosen.

Nobody else

We run no advertising trackers and no analytics. Fonts are served from our own storage rather than a font network, so no visitor's IP address is passed to a third party for that. Maps load only after a visitor chooses to open one, and the page says so first.