Sub-processor List

Aperim Pty Ltd (ABN 46150699737; ACN 150699737) is incorporated in New South Wales, Australia and operates the aicial brand. In this list, “aicial” refers to that brand; “we”, “us” and “our” refer to Aperim Pty Ltd; and “you” refers to a customer or other reader of this list.

A sub-processor is a third party we engage to help process personal data in connection with providing aicial’s services — for example, by hosting infrastructure, storing data or delivering email on our behalf. This list identifies our current sub-processors, the functions they perform and where they process data.

See our Privacy Policy for how we handle personal data more generally, and our Data Processing Agreement (DPA) for our contractual commitments as a processor or service provider. This list forms part of the arrangements described in the DPA, and the DPA governs in the event of any conflict between it and this list.

We currently engage one sub-processor to help provide aicial’s services and operate our website.

Cloudflare, Inc.

Cloudflare currently provides:

• hosting and compute (Cloudflare Workers);
• our database (Cloudflare D1); and
• bot and abuse protection on our forms (Cloudflare Turnstile).

We have also engaged Cloudflare’s own Email Service for delivery of transactional email. As our planned self-serve software service and additional integrations are built, we expect to bring object storage, caching and background job processing — and other Cloudflare infrastructure — into use. We will update this entry, or add a new sub-processor entry, before each of those comes into actual use.

Personal data processed. Because Cloudflare provides all of aicial’s technical infrastructure, it may process any category of personal data that we process in the course of operating our website and delivering aicial’s services, rather than a narrow, fixed subset.

Corporate location. Cloudflare, Inc. is headquartered in the United States.

Processing location. Cloudflare’s global network, which may process data in multiple jurisdictions depending on where a request is served, rather than a single fixed location. Our Privacy Policy describes the safeguards that apply to an international transfer of personal data.

As we build the planned self-serve software service and additional integrations, we expect to engage additional sub-processors. Before we do, we will update this list to add the new sub-processor, the function it performs and where it processes data.

Customers will receive advance notice of a new sub-processor and may object on the grounds and within the timeframe the DPA sets out. See our Data Processing Agreement for that notice and objection process.

We review this list whenever we engage a new sub-processor, and at least annually even where nothing has changed, to confirm it remains accurate. The version, effective date and last-reviewed date shown at the top of this page identify the current list and when we last confirmed it.

For questions about this list or the sub-processors we engage, contact:

Aperim Pty Ltd, which operates the aicial brand
ABN 46150699737
ACN 150699737
New South Wales, Australia
Email: privacy@aicial.com