Last updated: 2026-06-13
Deposits & Partial Payments: Sub-processors
This page lists the sub-processors Kainabinoids GmbH (“we”) engages to operate the Deposits & Partial Payments Wix app. We act as a data processor under Article 28 GDPR; the merchant that installs the App on its Wix account is the controller. Each sub-processor below processes data only to help us deliver the service, under data-protection terms equivalent to those in our Data Processing Agreement.
Current sub-processors
| Sub-processor | Role | What it processes | Location |
|---|---|---|---|
| Cloudflare, Inc. | Backend hosting and storage. The App’s backend runs on Cloudflare Workers; the order ledger (order ids, deposit/balance amounts, due dates, status, payment-link references) and the merchant’s configuration are stored in Cloudflare D1. | Order-level ledger and merchant configuration. No buyer name, email, or payment data. | Cloudflare D1 EU region (EEUR / Zurich). Cloudflare Inc. is US-headquartered; out-of-EEA access is covered by its DPA + EU Standard Contractual Clauses. |
The Wix platform (not a sub-processor we introduce)
The App operates inside the merchant’s own Wix account (Wix.com Ltd.). The order and customer data already reside in Wix. Reminder emails are sent by Wix Automations and balances are collected via Wix Payment Links — both within the merchant’s existing relationship with Wix. The buyer’s email address and name stay in Wix and are never read or stored by the App; at reminder time the App passes only a Wix contact id (a UUID) to Wix Automations so Wix can send the email. Wix also handles all app billing, tax, and payment.
What we do not use
- No analytics or advertising trackers.
- No content delivery networks for third-party fonts or scripts.
- No external email provider — reminder delivery is handled by Wix Automations, not by us.
- No payment processor of our own. Wix handles all billing, tax, and payment.
Data location
The App’s ledger and configuration are stored in Cloudflare D1 in the EU region (EEUR / Zurich). Order and customer data otherwise remain in the merchant’s Wix account. We do not transfer personal data outside the EU/EEA for our own purposes; where access by Cloudflare from outside the EEA cannot be excluded, it is covered by Cloudflare’s Data Processing Addendum and EU Standard Contractual Clauses.
Changes to this list
We grant controllers a general authorization for the sub-processors above. Before we add or replace a sub-processor, we will update this page and notify the merchant at least 30 days in advance, so the controller can object. If a controller reasonably objects and we cannot resolve the matter, the controller may terminate by uninstalling the App. This commitment is set out in full in our Data Processing Agreement.
Related documents
Contact
Questions about our sub-processors: hello@sitething.at.