Last updated 14 July 2026.
Merr Digital LTD uses the providers below to help operate CampHQ. They act as processors where Merr Digital LTD is the controller and as subprocessors where Merr Digital LTD processes organiser-controlled event information on a customer's behalf. Providers are subject to written confidentiality, security, and data-protection obligations.
| Provider | Service | Information | Location | Transfer basis |
|---|---|---|---|---|
| Cloudflare, Inc. | Authoritative DNS, reverse proxy, web application firewall, Turnstile bot protection, security, and encrypted R2 mailbox-backup storage | IP addresses; connection, request, security, browser, device, and limited interaction signals used by Turnstile for bot prevention; customer content passing through the proxy; and encrypted mailbox archives, configuration, application backups, and associated metadata stored in R2 | Global edge network; R2 storage follows the configured bucket jurisdiction or location | Cloudflare DPA, including the UK Addendum to the EU Standard Contractual Clauses for restricted transfers |
| Lettermint B.V. | Transactional service-email delivery, outbound general business correspondence, delivery-status processing, inbound support replies, and direct privacy-complaint email intake; no marketing email | Recipient and sender names and email addresses; event, organisation, booking, account, or ticket identifiers; transactional and general business message content and outbound attachments; inbound support-reply or privacy-complaint content and headers; and delivery, bounce, spam, and suppression metadata. Automated outbound messages contain no sensitive booking fields; inbound ticket and privacy attachments are discarded by CampHQ | EU/EEA; Lettermint states that email data is processed on infrastructure and by service subprocessors in the Netherlands and France | UK adequacy regulations for EEA countries and the Lettermint Data Processing Agreement |
Changes To This Register
Customers receive reasonable advance notice of a new or replacement event-data subprocessor and may raise a reasoned data-protection objection through the process in the Data Processing Addendum.
International Processing
Some provider processing occurs outside the UK or EEA. Before making a restricted transfer, Merr Digital LTD uses the transfer basis shown in the register and verifies that the relevant contract, adequacy regulation, or contractual safeguard applies.
Cloudflare's edge network operates globally. R2 objects are stored according to the bucket's configured jurisdiction or location; a location hint is not treated as a guaranteed data-residency restriction. Lettermint states that email data is processed within the EU or EEA, with relevant service subprocessors in the Netherlands and France.
Email Processing
The existing Lettermint application project is used only for transactional service email and inbound replies to support-ticket updates, not marketing email. Outbound messages may contain recipient details, an event or organisation name, a booking, account, or ticket identifier, and ordinary administrative information. They do not contain medical, medication, allergy, accessibility, dietary, emergency-contact, safeguarding, or precise-location information and do not attach sensitive booking records. Authorised users must sign in to the relevant system to view sensitive information.
A separate Lettermint project relays outbound human correspondence from the locally operated business mailboxes. Those messages may contain ordinary correspondence and attachments supplied by staff or correspondents. Incoming general mailbox mail is received directly by the local mailbox service rather than through Lettermint. Live mailbox content remains on CampHQ-operated infrastructure; encrypted portable mailbox archives are stored in Cloudflare R2 and backup snapshots expire after 30 days.
Inbound support replies are accepted only through a signed Lettermint webhook and a ticket-specific reply address. CampHQ checks that the sender address matches the ticket, rejects spam and invalid or unmatched messages, imports plain reply text only, and discards attachments. Direct messages to the configured privacy address may create a new tracked privacy complaint; the sender, headers, subject, and plain-text complaint content therefore pass through Lettermint. The secure privacy form is preferred, and users are asked not to put unnecessary medical or safeguarding information in email.
Spam Protection
Cloudflare Turnstile is used on unauthenticated contact, support, and privacy-complaint forms. It processes limited browser, device, connection, and interaction signals solely to distinguish legitimate submissions from automated abuse. CampHQ validates the one-time token server-side, does not retain it, and does not use Turnstile for advertising or analytics.
Provider Documents
Current provider information is available in the Cloudflare Data Processing Addendum, Cloudflare Turnstile Privacy Addendum, Cloudflare subprocessor list, Lettermint Data Processing Agreement, Lettermint subprocessor list, and Lettermint data-retention information.
Questions
Contact privacy@camphq.co.uk to request more information about provider security or contractual safeguards.