A public transparency record of the third party providers that process personal data on behalf of the platform. Maintained quarterly, in keeping with section 42 of the Data Protection Act, Cap. 411C.
The platform engages a small number of third party service providers. Each is contractually obliged to process personal data only on the instructions of Sheria Smart, to maintain appropriate technical and organisational safeguards, and to assist with data subject rights requests in good time. The full list is reproduced below.
Section 26 of the Data Protection Act permits a data subject to object, on legitimate grounds, to specific processing of their personal data. Objections to a particular subprocessor may be registered by writing to support@sheriasmart.com, with “Subprocessor objection” in the subject line and the name of the subprocessor concerned. The platform responds within seven days, setting out the options available under the Data Protection Act and the Privacy Notice.
1 May 2026. This page is reviewed quarterly. Material changes, including the addition of a new subprocessor, the removal of an existing one, or a change in the jurisdiction in which a subprocessor operates, are notified by email to subscribed users at least thirty days before they take effect.