GDPR: Timely's sub-processors

In this guide you will learn more about sub-processors, and how Timely utilise these as part of running their business. You'll get insight into how we protect your information, as our customers. To learn more about GDPR requirements for you as a business owner, see our guide on Keeping your client's information secure.

What is a sub-processor?

To support delivery of our Services, Timely Limited ("Timely") may engage and use data processors ("Sub-processors") with access to certain personal information. This page provides important information about the identity, location and role of each Sub-processor we use. 

A Sub-processor is an external service or provider that is enlisted by Timely to deliver our service to you. As part of that service delivery, we may be required to share personal information we have collected with these providers. 
 

How do we protect your information?

We take the privacy and security of your personal data very seriously and have strict processes in place to ensure this information is shared securely and only when necessary. Examples include:
 

• Personal information: We employ Secure Socket Layer (SSL) technology on the collection, storage and processing of all data. All accounts are accessed via secure login with one-way hashing of all passwords. We do not access or share any data unless required to by law or with your permission to help resolve system problems.
   

• Payments: All supplied sensitive/credit information is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our Payment gateway providers database only to be accessible by those authorised with special access rights to such systems, and are required to keep the information confidential. We do not store this information ourselves, instead keeping this with our payment providers who have the highest level of PCI compliance (Find out more about our provider's compliance).
   

• Timely also requires that any third-party services or Sub-processors, that we use as part of delivering this service to you, meet the requirements and obligations under GDPR, as well as those requirements of the local authority (NZ).
   

• We have established Data Processing Agreements (DPA's) with all of our providers, to ensure your personal information is collected, stored and processed in a legal/lawful manner. These agreements also meet the criteria under the Privacy Shield framework, which protects the transfer of personal data from the European Union and Switzerland to the United States.

Third party sub-processors

We've broken the list of Sub-processors into relevant sections, to give you greater understanding over how these services have access to your information.

Infrastructure subprocessors – service data storage

Timely uses the following organisations to store/host/collect Personal Information, or provide other infrastructure that helps with delivery of the Timely Service. These are secure environments that are controlled by the Timely team and are protected by Data Processing Agreements:

Service specific sub-processors

Timely works with other third-parties to provide specific functions or features within the Timely Service. These providers will have access to relevant personal information (both in an identifiable and anonymous manner) in order to provide their relevant functions. The use of information is limited to the specific purposes we've detailed below:
 

Add on integrations

The following Sub-processors are third-parties that we offer optional integrations with. Relevant customer data and personal information will be shared with these services as part of delivering the wider Timely Service. These third-parties are engaged directly by you, the account holder, you can enable or disable these features in your account at any time.
 

Content delivery channels

Timely also uses certain providers to assist and support operations under the Timely Services (as described in the Data Processing Agreement).These providers do not have direct access to data that you have shared with us, but we may collect personal information you have shared with us via these services, as part of delivering the wider Timely Service. 

For example: If you contact us for support via our Facebook, Twitter or Instagram page, we will pass on your contact details and questions to other services that we use to provide support (see Service Specific Sub-processors above.