Sub-processor Appendix
Last updated: May 27, 2026
To support delivery of our services, Lumo Pages (“Processor”) engages third-party service providers for data processing. This appendix lists those sub-processors and their roles, in line with our Data Processing Agreement.
1. Core infrastructure and security
| Sub-processor | Purpose | Data location | Transfer mechanism |
|---|---|---|---|
| Hostinger International Ltd. | Cloud hosting, database management, infrastructure | European Union (Netherlands / Lithuania) | Adequacy / GDPR compliance |
| Cloudflare, Inc. | CDN, DDoS protection, web security | Global (edge locations) | EU-U.S. Data Privacy Framework (DPF) / SCCs |
2. Service functionality and AI
| Sub-processor | Purpose | Data location | Transfer mechanism |
|---|---|---|---|
| Google Cloud (Gemini) | AI-assisted content generation (builder prompts as described in our Privacy Policy) | USA / Global | DPF / SCCs |
| Make.com (Celonis) | Workflow automation and internal operations | EU (Germany) | Adequacy / GDPR compliance |
| Trello (Atlassian) | Internal project management and support tracking | USA / Global | DPF / SCCs |
3. Analytics and payments
| Sub-processor | Purpose | Data location | Transfer mechanism |
|---|---|---|---|
| Google Analytics | Website and product usage analysis (where consented / configured) | USA / Global | DPF / SCCs |
| Hotjar Ltd. | Behavior analytics and UX research | EU (Malta) | Adequacy / GDPR compliance |
| Paddle | Payment processing and subscription management | UK | DPF / SCCs |
4. Marketing communications
| Sub-processor | Purpose | Data location | Transfer mechanism |
|---|---|---|---|
| MailerLite (UAB MailerLite) | Email marketing to users who opt in at registration | European Union (Lithuania) | Adequacy / GDPR compliance |
5. Important clarifications
- AI (Gemini): As described in our Privacy Policy and DPA, AI processing is limited to prompts and instructions you provide in the builder as designed. We do not intentionally route respondent form submissions to AI providers for processing.
- Data minimization: Sub-processors receive only the data needed for their specific function.
6. Changes
We update this list when we engage new sub-processors. Please review this page periodically. For questions, contact [email protected].