Subprocessors
Last updated: 2 November 2026
Aspirium Ltd uses the suppliers below to help deliver its services. Where a supplier processes personal data on behalf of our clinic customers, it acts as a subprocessor for the relevant processing.
Only suppliers relevant to the services a customer uses will process that customer’s data.
| Supplier | Relevant service and processing | Processing locations and safeguards |
|---|---|---|
| Stablepoint Limited | Website hosting, storage, backups and technical support. Data may include website content, enquiries, booking-form submissions and technical logs. | Our current reseller hosting servers are in London, UK. Stablepoint has confirmed that support staff operate globally. Backup locations, contractual transfer safeguards and the current supplier list are awaiting documentary confirmation. |
| ActiveCampaign | Email campaigns, mailing-list storage and campaign reporting. Data may include subscriber contact details, preferences and engagement records. | Applicable processing locations, reseller DPA coverage and UK transfer safeguards are awaiting confirmation. |
| AgencyAnalytics | Marketing dashboards and reporting using connected customer accounts. Data depends on the integrations enabled and may include account identifiers, analytics and campaign information. | Account-specific DPA coverage, processing locations and UK transfer safeguards are awaiting confirmation. |
| OpenAI | AI text generation for Aspirium AI and AI-assisted Design Studio features. Data may include prompts, selected business or brand information and generated responses. | OpenAI’s published DPA includes UK transfer provisions. Applicability to Aspirium’s account and the processing locations relevant to its configuration remain under review. |
| Polotno | Provides the browser-based Design Studio editor. Editing and export take place in the user’s browser; saved designs are stored on Aspirium’s hosting. Polotno has confirmed that it does not receive or store end-user design content in this configuration. | Polotno’s Cloud Render API and AI features are not enabled. Polotno receives the licence key and requesting domain for licence validation, acting as an independent controller under its own privacy policy. Polotno has confirmed that no DPA is required for this configuration. Before enabling its Cloud Render or AI services, Aspirium will review the processing arrangements, establish the necessary contractual safeguards and update this register. |
Restrictions on sensitive information
Customers must not include identifiable patient information or health information in AI prompts or Design Studio content.
Email campaigns must not contain identifiable health information, including lists, tags or segmentation that reveal a person’s health status.
Limited health information submitted through ordinary enquiry or booking forms on hosted clinic websites is subject to the conditions in our Terms of Service, Acceptable Usage Policy and Data Processing Agreement. Our hosting is not a clinical-record system or patient portal.
Changes and enquiries
This register should be read alongside our Data Processing Agreement. Any requirements for notifying customers about proposed subprocessor changes and handling objections are governed by that agreement.
For questions about our suppliers or their processing of personal data, contact privacy@aspirium.co.uk.