Subprocessor List

Legal

Subprocessor List

Last updated: 8 August 2026

This page lists the subprocessors HostLuma uses to deliver its services — the third parties that may process personal data on our behalf. It's referenced from our Privacy Policy and Data Processing Agreement.

Two things this list does not cover: your own website's or app's third-party services (a plugin, analytics tool, or payment gateway you connect yourself is a relationship between you and that vendor, not ours), and discontinued systems (we previously used a billing platform, WHMCS, that has been fully retired and holds no live customer data).

We'll update this page when a subprocessor is added or removed, and material changes will also be reflected in the "last updated" date. Customers on a Data Processing Agreement with us are entitled to advance notice of new subprocessors — see the DPA for how to object.

Infrastructure & hosting

Subprocessor	Purpose	Location	What it may process
OVH SAS	Physical servers our platform runs on (WHM/cPanel, LiteSpeed, MySQL, the Portal, provisioning systems)	France	Everything — this is the underlying infrastructure for all HostLuma services
CloudLinux, Inc. (incl. Imunify360)	Per-account resource isolation (CageFS) and server-level malware/intrusion detection	US-headquartered; scanning runs on our OVH servers	Operational and security metadata from hosted accounts; not designed to access website content directly

Domains & DNS

Subprocessor	Purpose	Location	What it may process
Openprovider B.V.	Domain registrar — registers and renews domains customers purchase through HostLuma	Netherlands	Registrant contact details (name, email, address) submitted at the time of a domain order
ClouDNS	Authoritative DNS hosting for domains and services we manage	Global anycast network	DNS zone/record data; not typically personal data, though some records (e.g. contact-form CNAMEs) may indirectly reference a customer's domain

Payments

Subprocessor	Purpose	Location	What it may process
Stripe	Payment processing for subscriptions and one-off purchases (hosted Stripe Checkout)	Stripe Payments Europe, Ltd. (Ireland), with global infrastructure	Card and payment details (we never receive or store full card numbers), billing email, name, transaction history

Content delivery & source control

Subprocessor	Purpose	Location	What it may process
Bunny.net (BunnyWay d.o.o.)	CDN for AI App Hosting preview and production traffic	EU (Slovenia), global edge network	Visitor IP addresses and request metadata passing through the CDN in transit
GitHub, Inc. (Microsoft)	Source repository hosting and deployment integration for AI App Hosting customers who connect a GitHub repository	United States	GitHub account identifiers, installation/repository identifiers, and repository contents you authorise us to deploy

Certificates

Subprocessor	Purpose	Location	What it may process
Internet Security Research Group (Let's Encrypt)	Free automated TLS certificates (via cPanel AutoSSL)	United States	Domain names only

Backups (in-house, not a third party)

Backups are taken with JetBackup, software we run entirely on our own OVH servers. JetBackup Ltd does not host, receive, or have access to your backup data — backups never leave our infrastructure. It's listed here for transparency, not because it's a data-receiving subprocessor.

Not currently in use

We do not use a third-party analytics, advertising, or session-recording provider on the HostLuma Portal.
We do not use a third-party application-monitoring or error-tracking service (e.g. Sentry, Datadog) at this time.
Business Email is an architecture currently in development and is not yet a live product; no subprocessor is engaged for it yet. This list will be updated before that service launches.

UK-based managed WordPress hosting built for speed, security and reliability. Powered by LiteSpeed Enterprise, CloudLinux and NVMe storage. Every server is tuned, monitored and optimised personally. No call centres. No outsourcing. No ticket roulette. Just real support.

Speak Directly With
Host Luma

Real UK support with no outsourcing or ticket roulette. Get help with hosting, billing and WordPress support directly from the Host Luma team.

💬 Start WhatsApp Support → 💬 Open Live Chat ✉ support@hostluma.co.uk 💳 Customer Billing Portal

Live support daily 12pm–7pm UK time
Average response time under 1 hour