About this page
This page lists the third-party organisations ("sub-processors") that Mat Mad LTDengages to process personal data on behalf of its customers in the course of providing the HauliK Service. This list is maintained in accordance with the HauliK Data Processing Agreement and the Privacy Policy.
Some providers in the list act as independent controllers for their own account, device and platform services. In those cases, Mat Mad LTD is not the controller of the data those providers collect under their own terms and policies.
Customers should review the current public sub-processor list as part of their own procurement, compliance and vendor-management process.
1. Introduction
A sub-processor is a third-party organisation engaged by Mat Mad LTD to process personal data as part of delivering the HauliK Service. Mat Mad LTD remains responsible to its customers for the actions of sub-processors in relation to the processing of personal data, and imposes data protection obligations on sub-processors consistent with those in the HauliK DPA.
2. What Is a Sub-processor?
Sub-processors are organisations that access or process personal data submitted to HauliK by its customers as part of providing infrastructure, communication or platform services. They are distinct from providers that act as independent controllers for their own services (such as app stores and payment processors acting for their own account).
3. Current Sub-processors
The following sub-processors are currently engaged by Mat Mad LTD in the delivery of the HauliK platform and driver application.
| Provider | Purpose | Data processed | Location / transfer notes |
|---|---|---|---|
| Supabase Inc. | Database, authentication, file storage and realtime infrastructure | Fleet and driver operational data, uploaded files and photos, authentication credentials and session tokens | EU region where configured; provider edge, support and operational processing may occur in other locations under Supabase terms. |
| Vercel Inc. | Web platform hosting, CDN delivery and edge middleware | Request metadata, HTTP headers, performance logs and error logs generated during web platform delivery | Global edge network. Vercel is a US-incorporated entity and processing may occur in locations used to deliver the service. |
| Stripe Inc. | Payment processing and subscription billing portal | Billing contact details (name, email), subscription and payment metadata, Stripe customer ID. HauliK does not store raw card details — payment card data is handled entirely by Stripe. | US (Stripe Inc.) with EU data residency options. Transfers are covered by Standard Contractual Clauses or equivalent. |
| Resend Inc. | Transactional email delivery | Recipient email address, invitation content, account notification content and support notification content | US. Transfers are covered by appropriate international transfer mechanisms. |
| Expo (Expo Go / EAS) | Mobile application build infrastructure, over-the-air update delivery and push notification relay | Push notification tokens (for relay purposes), notification payload metadata, app build and update metadata | US. Expo is a US-incorporated entity. |
| Apple Inc. — Apple Push Notification Service (APNs) | Push notification delivery to iOS devices | Device push token and notification payload (title, body, data). Apple does not receive fleet or driver operational data. | Apple global infrastructure (US and international). Apple acts as an independent controller for its own device and account services. |
| Google LLC — Firebase Cloud Messaging (FCM) | Push notification delivery to Android devices | Device push token and notification payload (title, body, data). Google does not receive fleet or driver operational data. | Google global infrastructure (US and international). Google acts as an independent controller for its own device and account services. |
4. App Store and Platform Providers
The following providers distribute the HauliK Driver mobile application. They act as independent controllers for their own app store and device-management services and are not data processors of Mat Mad LTD for those purposes.
| Provider | Purpose | Data processed | Location / transfer notes |
|---|---|---|---|
| Apple Inc. — Apple App Store | iOS application distribution and update delivery | App download, installation and update data as handled by Apple under its own terms. HauliK does not receive individual download-level personal data from Apple. | Apple global infrastructure. Apple acts as an independent controller for App Store account and purchase data. |
| Google LLC — Google Play Store | Android application distribution and update delivery | App download, installation and update data as handled by Google under its own terms. HauliK does not receive individual download-level personal data from Google Play. | Google global infrastructure. Google acts as an independent controller for Play Store account and purchase data. |
5. How We Notify Changes
When Mat Mad LTD engages a new sub-processor or makes a material change to an existing sub-processor arrangement, it will:
- update this page to reflect the change;
- where practicable, provide reasonable advance electronic notice to registered account administrators.
Customers may object to a new sub-processor on reasonable data-protection grounds by contacting info@matmad.co.uk within 30 days of the notice. The right to object is set out in the HauliK DPA.
6. Contact
For questions about this sub-processor list or data processing arrangements, please contact: