This page is published by Inchol Solutions Inc. It names the outside companies that handle personal information for us. For each one it says what the company does with that information, what kinds of personal information are involved and where it is held. We call those companies service providers, or providers for short.
It covers the websites and services listed on the Privacy Policy. That page states which websites, products and applications this set of policies covers, and we do not repeat the list here so that there is only one of it.
One row in the tables below, payroll, concerns information about our own employees rather than about competitors, parents or guardians, competition organizers or account holders. Other companies that handle information only about our own staff are not listed here. Whether they belong on this page or in a notice written for employees has not been settled.
We maintain this list to identify the third-party subprocessors we currently use to process personal information on behalf of our customers. We make reasonable efforts to keep this list accurate and up to date.
Our subprocessors may change from time to time as our services, technology, and business needs evolve. We will update this list when we add, replace, or discontinue subprocessors that process customer personal information.
Where required by applicable law or our agreement with a customer, we will provide notice of material changes to our subprocessors.
Before we disclose personal information to a service provider, we require a written agreement with that provider, and it must cover three things.
We remain accountable for personal information while it is with a provider. Handing it to someone else does not move the responsibility off us.
That is the rule we apply. We are not, on this page, certifying that every provider named below is already under an agreement of that kind. A competition organizer who needs that confirmed for a named provider can ask us, and we answer from what we can show rather than from a policy statement.
Each table has the same four columns.
Two terms are used in the tables.
| Provider | What they do | Personal information involved | Location |
|---|---|---|---|
| Amazon Web Services | Hosts platform services and stores competition data, photographs and video | Competitor records, photographs and video, account information | United States |
| DigitalOcean | Hosts platform services and stores photographs and video | Competitor records, photographs and video, account information | United States |
| Bunny.net | Content delivery network. Delivers photographs and video to the people who view them | Photographs and video, IP addresses of viewers | No single country. The company is established in Slovenia and delivers from a network of computers in many countries. We have not recorded which of them serve our content |
| Dropbox | Stores competition photographs and video, and documentation | Competitors’ photographs and video | United States |
| Provider | What they do | Personal information involved | Location |
|---|---|---|---|
| Helcim | Processes card payments | Name, email address, billing address, payment card details | Canada |
| PayPal | Processes payments | Name, email address, payment account details | United States |
| Provider | What they do | Personal information involved | Location |
|---|---|---|---|
| Google Workspace | Our email, calendar and file storage | Any personal information in our correspondence and documents | United States |
| Cyberimpact | Sends our marketing email | Name and email address of subscribers | Canada |
| LiveAgent | Support ticketing and live chat | Name, email address and the content of support enquiries | European Union. The country is not recorded |
| Pipedrive | Records our contact with competition organizers and the progress of a sale | Business contact details of the people we deal with at competition organizers | European Union. The country is not recorded |
This list changes when any of these happens.
We give our customers at least 30 days’ written notice before adding a new service provider that will process their data, so they have an opportunity to raise any concerns. We give that notice to the contact each competition organizer has given us for privacy matters.
The earlier version also said that we review this list every three months. That has gone too, because the page carried no date of any review, so you had no way to test it. When this list is reviewed we will give the date of the review at the head of this page. A date you can check is worth more than a schedule you cannot. We review this list at least once every three months, and whenever a provider is added, replaced or dropped. The Privacy Officer carries out the review and records it.
In the meantime, the version and the date at the head of this page are meant to change whenever its content does.
We answer questions about this page ourselves: what a named provider does, where it holds information, and what we require of it. Write to our Privacy Officer at the address below.
Most of the personal information in the tables above is competitor information that we hold on a competition organizer's documented instructions. We cannot answer a request about that information, or change or delete it, without the organizer's instruction. Send the request to us anyway. What we do with it, how we check who you are, how long each step takes and what to do if you are not satisfied are all on Your Privacy Rights.
The address dpo@inchol.com reaches our Privacy Officer.
The telephone number is toll free within Canada and the United States. It may not be reachable from outside North America. If you are in the United Kingdom, the European Economic Area or anywhere else outside North America, please use email or post.
If your complaint is about the Privacy Officer, write to our postal address marked for the attention of the Chief Executive Officer, who then takes the decisions the Privacy Officer would normally take.
Our postal address is on Your Privacy Rights.