Sub-processors

Glasshouse Ltd ("Glasshouse", "we", or "us") engages certain third-party service providers ("Sub-processors") to assist in the provision of the Glasshouse platform and related services. This page provides a current list of Sub-processors engaged by Glasshouse that may process Customer Data on behalf of our customers.

Our use of Sub-processors is governed by the terms of our Data Processing Agreement ("DPA") and, for enterprise customers, the Enterprise Terms and Conditions. Glasshouse enters into written agreements with each Sub-processor that impose data protection obligations no less protective than those set forth in the DPA.

Glasshouse remains responsible for the acts and omissions of its Sub-processors to the same extent as if it were performing the services directly, in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

Glasshouse may update the list of Sub-processors from time to time as our business and service requirements evolve. We will update this page to reflect any changes to our Sub-processors.

For customers subject to our DPA or Enterprise Terms, Glasshouse shall provide at least thirty (30) days' prior written notice before engaging a new Sub-processor or replacing an existing Sub-processor. Notification shall be sent by email to the contact address specified in the applicable Order Form or DPA.

The notification shall include the name of the proposed Sub-processor, its location, the nature of the processing activities it will perform, and the categories of personal data that may be processed.

Customers may subscribe to Sub-processor update notifications by contacting privacy@glasshouse.sh.

If Customer has a reasonable, good-faith objection to Glasshouse's use of a new or replacement Sub-processor on data protection grounds, Customer shall notify Glasshouse in writing within fifteen (15) days of receiving the Sub-processor change notification. The objection must include the specific grounds for the objection and any relevant supporting information.

Upon receipt of a valid objection, Glasshouse shall use commercially reasonable efforts to: (a) make available a change to the Enterprise Services that avoids the use of the objected-to Sub-processor for the processing of Customer's personal data; or (b) recommend a commercially reasonable alternative Sub-processor that is acceptable to Customer.

If Glasshouse is unable to provide a reasonable alternative within thirty (30) days of receiving Customer's objection, and the parties are unable to reach a mutually acceptable resolution, Customer may terminate the affected Order Form or the portion of the Enterprise Services that requires the use of the objected-to Sub-processor, upon written notice to Glasshouse. In such circumstances, Glasshouse shall refund any prepaid fees for the unused portion of the terminated services on a pro-rata basis.

The right to object and terminate set forth in this Section 4 is Customer's sole and exclusive remedy with respect to Glasshouse's engagement of a new or replacement Sub-processor.

For any questions regarding our Sub-processors or to submit an objection, please contact us at privacy@glasshouse.sh.