GDPR Compliant

Sub-processors

Full transparency about the third-party service providers we use to process personal data on behalf of our customers.

BoenderXL E-Commerce B.V. (trading as "Bugalou") uses the sub-processors listed below to deliver our services. In accordance with Article 28 of the GDPR, we hereby inform you about the third parties to whom we transfer personal data.

We have entered into data processing agreements with all our sub-processors that comply with GDPR requirements. For transfers to the United States, we rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses (SCCs).

Meta Platforms, Inc.

WhatsApp Business API & Messenger

Processing of customer messages via WhatsApp and Facebook Messenger

EU / US
Stripe, Inc.

Payment Processing

Processing of subscription payments and invoicing

US
Neon, Inc.

PostgreSQL Database Hosting

Storage of application data in a secure cloud database

EU
Vercel, Inc.

Hosting, CDN & Blob Storage

Application hosting, content delivery and storage of uploaded files

US (with edge locations in EU)
OpenAI, Inc.

AI Chatbot

AI-powered automated customer message responses

US
Upstash, Inc.

Redis Cache

Caching of session data and application data for improved performance

EU
Resend, Inc.

Transactional Email (via Amazon SES)

Sending verification emails, password resets and notifications

US
Google Ireland Ltd.

Google Analytics & Tag Manager

Website analytics and user behavior insights (anonymized)

EU (Ireland)
CookieYes Ltd.

Cookie Consent Management

Management of cookie consent and ePrivacy regulation compliance

EU
Zapier, Inc.

Workflow Automation

Integration with external platforms like Shopify, WooCommerce and more for syncing order data

US
Pusher Ltd.

Realtime WebSockets

Real-time communication for live chat and message notifications

EU
Twilio Inc.

SMS & Voice Services

SMS messaging and voice calls via Twilio channel

US

Questions about our sub-processors?

If you have questions about our sub-processors, would like a copy of a data processing agreement, or want to be notified of changes, please contact us.

Last updated: February 14, 2026