Subprocessors

Last updated 7 November 2026

These are the companies that process personal information on our behalf, or that receive it because you asked us to use them (a booking, an order, a film). Each one is contractually bound for the data it handles — by a data processing addendum incorporated into its terms, or by the agreement we signed with it. If a provider is not on this list, it does not receive your data.

Providers

Provider	Service	Data	Location	Safeguard
Shopify Inc.	Online store, checkout and payments	Name, email, address, order contents	Canada / US	Shopify DPA (last updated 7 July 2026), incorporated into the Shopify terms
Zenoti (Hyperconnect)	Salon management, appointment booking, and our newsletter sends	Name, phone, email, appointment history, service notes	US	Zenoti account agreement, plus its published subprocessor list (February 2026)
Resend	Transactional email delivery — booking and order notifications, replies to inquiries	Name, email	US	Resend DPA
Vimeo	Embedded video, only when you press play	IP address, device data	US	Vimeo DPA
Google	Business Profile reviews and Maps links	Public review and map data only — no account data	US	Google DPA
xix	First-party analytics on our own infrastructure	Pseudonymous id, page views, and a 10 % masked sample of session replay	EU	Our own processing as controller — no third-party disclosure
Hetzner / Cloudflare	Hosting and edge for our own infrastructure	Technical logs (IP address, request metadata)	EU / US	Our own processor agreements

No advertising or data-broker processor is used. We do not sell personal information, and no provider on this list receives it for cross-context behavioral advertising. Booking and purchase conversions are sent server-to-server from our own systems to Google Ads, which receives the conversion event and nothing about your browsing; there is no Google advertising tag on this site.

Getting the paperwork

To request a copy of our signed DPA with any provider above, email cloud@martialvivot.com with the subject DPA request and the provider you are asking about. We aim to respond within 30 days. This list is reviewed whenever a provider is added, replaced or materially changes its own subprocessors, and the page above is edited in the same change.