Service Providers and Subprocessors

What this page tells you

This page is published by Inchol Solutions Inc. It names the outside companies that handle personal information for us. For each one it says what the company does with that information, what kinds of personal information are involved and where it is held. We call those companies service providers, or providers for short.

It covers the websites and services listed on the Privacy Policy. That page states which websites, products and applications this set of policies covers, and we do not repeat the list here so that there is only one of it.

One row in the tables below, payroll, concerns information about our own employees rather than about competitors, parents or guardians, competition organizers or account holders. Other companies that handle information only about our own staff are not listed here. Whether they belong on this page or in a notice written for employees has not been settled.

Keeping this list current

We maintain this list to identify the third-party subprocessors we currently use to process personal information on behalf of our customers. We make reasonable efforts to keep this list accurate and up to date.

Our subprocessors may change from time to time as our services, technology, and business needs evolve. We will update this list when we add, replace, or discontinue subprocessors that process customer personal information.

Where required by applicable law or our agreement with a customer, we will provide notice of material changes to our subprocessors.

What we require before a provider receives your information

Before we disclose personal information to a service provider, we require a written agreement with that provider, and it must cover three things.

1. The purpose. What the provider may use the information for.
2. The protection required. How the provider must look after it.
3. Notice to us of any personal information breach. If information the provider holds for us is lost, stolen or reached by someone who should not have it, the provider must tell us.

We remain accountable for personal information while it is with a provider. Handing it to someone else does not move the responsibility off us.

That is the rule we apply. We are not, on this page, certifying that every provider named below is already under an agreement of that kind. A competition organizer who needs that confirmed for a named provider can ask us, and we answer from what we can show rather than from a policy statement.

The providers we have identified

Each table has the same four columns.

• Provider. The name of the service as you would know it. We have not recorded the legal entity we contract with for each row, so the column does not give it. A procurement reviewer matching this page against an agreement can ask us for the contracting entity.
• What they do. The work the provider does with personal information for us.
• Personal information involved. The kinds of personal information the provider handles, in the words the Privacy Policy uses for them.
• Location. The country where the provider holds the information for us. Not the country of the company's head office. If we know only the trading bloc, the cell says so, and if we cannot give one country the cell explains why.

Two terms are used in the tables.

• Competitor records means a competitor's name, date of birth or age division, gender where the competition uses gendered divisions, studio or team affiliation, entry and routine details, scores, placements and judges' critiques.
• Account information means an account holder's name, email address, telephone number, postal or billing address, login credentials and purchase and order history.

Platform hosting and delivery

Payments

Business operations

Changes to this list

This list changes when any of these happens.

• We add a provider.
• We replace one provider with another.
• What a provider does with personal information changes.
• Where a provider holds personal information changes.
• We stop using a provider.

We give our customers at least 30 days’ written notice before adding a new service provider that will process their data, so they have an opportunity to raise any concerns. We give that notice to the contact each competition organizer has given us for privacy matters.

The earlier version also said that we review this list every three months. That has gone too, because the page carried no date of any review, so you had no way to test it. When this list is reviewed we will give the date of the review at the head of this page. A date you can check is worth more than a schedule you cannot. We review this list at least once every three months, and whenever a provider is added, replaced or dropped. The Privacy Officer carries out the review and records it.

In the meantime, the version and the date at the head of this page are meant to change whenever its content does.

Questions and requests

We answer questions about this page ourselves: what a named provider does, where it holds information, and what we require of it. Write to our Privacy Officer at the address below.

Most of the personal information in the tables above is competitor information that we hold on a competition organizer's documented instructions. We cannot answer a request about that information, or change or delete it, without the organizer's instruction. Send the request to us anyway. What we do with it, how we check who you are, how long each step takes and what to do if you are not satisfied are all on Your Privacy Rights.

How to contact us

• Inchol Solutions Inc.
• Privacy Officer: Kevin Sun, Chief Technology Officer
• Email: dpo@inchol.com
• Telephone: 1-877-807-2183

The address dpo@inchol.com reaches our Privacy Officer.

The telephone number is toll free within Canada and the United States. It may not be reachable from outside North America. If you are in the United Kingdom, the European Economic Area or anywhere else outside North America, please use email or post.

If your complaint is about the Privacy Officer, write to our postal address marked for the attention of the Chief Executive Officer, who then takes the decisions the Privacy Officer would normally take.

Our postal address is on Your Privacy Rights.

Related pages

• Privacy Policy. What we collect about you, why, who else sees it, where it is held and how long we keep it.
• Your Privacy Rights. What you can ask us to do, how to ask, how long we take, and what to do if you are not satisfied.
• Cookies and Analytics. What cookies and tags our websites serve, what each does, and what you can do about it.
• How We Protect Your Information. How we protect personal information, what we do when something goes wrong, and how to tell us about a problem.
• Privacy and Security Policies. Where to find the answer to your question, in one step.