Sub-processors
Last updated: 4 August 2026 · Applies to all users of Markena worldwide.
UK and EU GDPR require us to tell you who else processes personal data on our behalf, and the UAE PDPL requires equivalent transparency. This page is that list.
S H H P M services co LLC, a limited liability company registered in Dubai, United Arab Emirates under professional trade licence number 1183314, with its registered office at Office 43–44, Bin Darwish Building, Deira, Dubai, United Arab Emirates. We trade as Markena. In these terms "we", "us" and "our" mean S H H P M services co LLC.
This policy is general information about Markena's service and is not legal advice. Mandatory rights under applicable law are not limited by it.
This list reflects the production providers selected for Markena at the date above. Optional providers process data only when the relevant feature is enabled.
1. Current sub-processors
| Provider | What it does | Data involved | Location |
|---|---|---|---|
| Alibaba Cloud Model Studio (DashScope) | Generates text, images, audio and video | Business context, instructions, prompts and reference material you supply | Singapore region; International inference scope (nodes outside mainland China) |
| Stripe | Payment processing, subscription management and payment fraud prevention | Name, email, billing address, payment method. Card numbers go directly to Stripe and never reach us. | Ireland / United States |
| CyberPersons | Sends Markena transactional email and, where a customer verifies a sender, instructed campaign email | Recipient email addresses, sender identity and message content | Frankfurt, Germany |
| Amazon Web Services (AWS) | Runs the application and stores the database and uploaded media | All data held in the Service | Frankfurt, Germany |
| Cloudflare | DNS, TLS termination, content delivery and network security | IP address, request metadata and cached public assets | Global network |
| Google (reCAPTCHA, where enabled) | Signup abuse prevention | IP address, browser signals | United States |
2. Accounts you connect yourself
Where you connect Google Ads, Search Console, Analytics 4, Business Profile, Meta, WordPress, Telegram, an SMS provider or any similar service, those providers are not our sub-processors. They process data under their own terms and their own relationship with you. You authorise each connection directly, you can revoke it at any time from Settings, and their handling of your data is governed by their policies rather than by ours.
3. Our commitments about sub-processors
- Each is engaged under a written contract containing the terms required by Article 28 UK/EU GDPR and the equivalent PDPL requirements.
- Each is bound to confidentiality and to appropriate technical and organisational security measures.
- Each processes personal data only on our documented instructions.
- We assess each one before engagement and review the list at least annually.
- We remain fully liable to you for their performance.
4. Changes to this list
We will update this page before a new sub-processor begins processing personal data, and we will notify account holders at least 14 days beforehand where the change is material. If you object to a new sub-processor on reasonable data protection grounds, tell us within that period at privacy@markena.co.uk. We will try to resolve it; if we cannot, you may terminate the affected part of the service and receive a pro-rata refund of the unused period.
To be notified of changes, email privacy@markena.co.uk and ask to be added to the sub-processor notification list.
5. International transfers
Several sub-processors operate outside the UK and the EEA. Section 7 of the Privacy Policy explains the safeguards we rely on for those transfers and how to request a copy of them.
6. Contact
S H H P M services co LLC, Office 43–44, Bin Darwish Building, Deira, Dubai, United Arab Emirates.
privacy@markena.co.uk