Service Providers and Subprocessors

Version 2.0. Published 16 September 2026.

What this page tells you

This page is published by Inchol Solutions Inc. It names the outside companies that handle personal information for us. For each one it says what the company does with that information, what kinds of personal information are involved and where it is held. We call those companies service providers, or providers for short.

It covers the websites and services listed on the Privacy Policy. That page states which websites, products and applications this set of policies covers, and we do not repeat the list here so that there is only one of it.

One row in the tables below, payroll, concerns information about our own employees rather than about competitors, parents or guardians, competition organizers or account holders. Other companies that handle information only about our own staff are not listed here. Whether they belong on this page or in a notice written for employees has not been settled.

Keeping this list current

We maintain this list to identify the third-party subprocessors we currently use to process personal information on behalf of our customers. We make reasonable efforts to keep this list accurate and up to date.

Our subprocessors may change from time to time as our services, technology, and business needs evolve. We will update this list when we add, replace, or discontinue subprocessors that process customer personal information.

Where required by applicable law or our agreement with a customer, we will provide notice of material changes to our subprocessors.

What we require before a provider receives your information

Before we disclose personal information to a service provider, we require a written agreement with that provider, and it must cover three things.

  1. The purpose. What the provider may use the information for.
  2. The protection required. How the provider must look after it.
  3. Notice to us of any personal information breach. If information the provider holds for us is lost, stolen or reached by someone who should not have it, the provider must tell us.

We remain accountable for personal information while it is with a provider. Handing it to someone else does not move the responsibility off us.

That is the rule we apply. We are not, on this page, certifying that every provider named below is already under an agreement of that kind. A competition organizer who needs that confirmed for a named provider can ask us, and we answer from what we can show rather than from a policy statement.

The providers we have identified

Each table has the same four columns.

Two terms are used in the tables.

Platform hosting and delivery

ProviderWhat they doPersonal information involvedLocation
Amazon Web Services Hosts platform services and stores competition data, photographs and video Competitor records, photographs and video, account information United States
DigitalOcean Hosts platform services and stores photographs and video Competitor records, photographs and video, account information United States
Bunny.net Content delivery network. Delivers photographs and video to the people who view them Photographs and video, IP addresses of viewers No single country. The company is established in Slovenia and delivers from a network of computers in many countries. We have not recorded which of them serve our content
Dropbox Stores competition photographs and video, and documentation Competitors’ photographs and video United States

Payments

ProviderWhat they doPersonal information involvedLocation
Helcim Processes card payments Name, email address, billing address, payment card details Canada
PayPal Processes payments Name, email address, payment account details United States

Business operations

ProviderWhat they doPersonal information involvedLocation
Google Workspace Our email, calendar and file storage Any personal information in our correspondence and documents United States
Cyberimpact Sends our marketing email Name and email address of subscribers Canada
LiveAgent Support ticketing and live chat Name, email address and the content of support enquiries European Union. The country is not recorded
Pipedrive Records our contact with competition organizers and the progress of a sale Business contact details of the people we deal with at competition organizers European Union. The country is not recorded

Changes to this list

This list changes when any of these happens.

We give our customers at least 30 days’ written notice before adding a new service provider that will process their data, so they have an opportunity to raise any concerns. We give that notice to the contact each competition organizer has given us for privacy matters.

The earlier version also said that we review this list every three months. That has gone too, because the page carried no date of any review, so you had no way to test it. When this list is reviewed we will give the date of the review at the head of this page. A date you can check is worth more than a schedule you cannot. We review this list at least once every three months, and whenever a provider is added, replaced or dropped. The Privacy Officer carries out the review and records it.

In the meantime, the version and the date at the head of this page are meant to change whenever its content does.

Questions and requests

We answer questions about this page ourselves: what a named provider does, where it holds information, and what we require of it. Write to our Privacy Officer at the address below.

Most of the personal information in the tables above is competitor information that we hold on a competition organizer's documented instructions. We cannot answer a request about that information, or change or delete it, without the organizer's instruction. Send the request to us anyway. What we do with it, how we check who you are, how long each step takes and what to do if you are not satisfied are all on Your Privacy Rights.

How to contact us

The address dpo@inchol.com reaches our Privacy Officer.

The telephone number is toll free within Canada and the United States. It may not be reachable from outside North America. If you are in the United Kingdom, the European Economic Area or anywhere else outside North America, please use email or post.

If your complaint is about the Privacy Officer, write to our postal address marked for the attention of the Chief Executive Officer, who then takes the decisions the Privacy Officer would normally take.

Our postal address is on Your Privacy Rights.