WorkCura · ExcelTTC Limited

WorkCura Subprocessors

Third-party service providers that may process personal data to help ExcelTTC Limited provide WorkCura.

Transparency at WorkCura

Subprocessors

ExcelTTC Limited uses carefully selected service providers to operate, secure and support WorkCura. This page explains who may process personal data for us, why we use them, what information may be involved and the safeguards that apply.

Effective: 18 July 2026 Last reviewed: 18 July 2026 Applies to: WorkCura services

What is a subprocessor?

When ExcelTTC Limited processes personal data on a customer's behalf in providing WorkCura, a subprocessor is another organisation we appoint to carry out part of that processing. Subprocessors may, for example, provide cloud infrastructure, data storage, security, payment or support services.

ExcelTTC Limited remains responsible for selecting appropriate providers and requires subprocessors to protect personal data through contractual, organisational and technical safeguards appropriate to their role.

Current subprocessors

The following providers may process personal data in connection with the delivery of WorkCura.

Provider	Primary purpose	Personal data involved	Processing location	Effective
Hostinger	Application and infrastructure hosting, database, storage, backups and associated technical services, according to our service configuration.	WorkCura account, workforce, shift, timesheet, compliance, uploaded-file and technical log data hosted through the service.	The data-centre region selected for ExcelTTC Limited's Hostinger services, plus locations used by authorised support and service providers subject to appropriate safeguards.	18 July 2026
Stripe	Subscription checkout, billing, payment processing, refunds, customer portal and payment-event handling.	Agency and billing contact details, customer and subscription identifiers, transaction, invoice, payment-status and refund information. Card details are entered directly into Stripe's payment environment.	International, as described in Stripe's current service-provider list and privacy documentation, with appropriate transfer safeguards where required.	18 July 2026

Provider details

Hostinger

Hosting & infrastructure

Applicable provider entity

The Hostinger contracting entity identified in ExcelTTC Limited's current Hostinger account, order or service agreement.

Purpose of processing

Hosting and delivering the WorkCura application and its supporting infrastructure, which may include database, storage, backup, availability, security and technical-support functions depending on the services configured.

Categories of personal data

Information hosted within WorkCura, including user account and authentication data; agency, facility and healthcare-worker information; shift, availability and timesheet data; compliance records and uploaded documents; communications; and IP address, device, diagnostic and application-log data.

Data subjects

Agency administrators and personnel, facilities and their representatives, healthcare workers, authorised platform users, website visitors and people whose information customers enter into WorkCura.

Location & transfers

The primary region is the data-centre location selected for ExcelTTC Limited's Hostinger account. Limited processing may also occur where Hostinger's authorised personnel or providers operate. Contractual transfer mechanisms, including applicable standard contractual clauses and the UK International Data Transfer Addendum, apply where required.

Safeguards & official information

Data Processing Agreement Privacy Policy Trust Centre Hosting Agreement

Stripe

Payments & billing

Applicable provider entity

The Stripe contracting entity identified in ExcelTTC Limited's current Stripe Services Agreement. The applicable Stripe entity may depend on the account location and services used.

Purpose of processing

Secure subscription checkout, recurring billing, invoice and payment administration, payment authentication, refunds, fraud prevention, customer billing portal services and delivery of payment and subscription events to WorkCura.

Categories of personal data

Agency name, customer or billing contact details, billing address where supplied, Stripe customer and subscription identifiers, plan selection, invoice and transaction details, payment status, refund information and related technical metadata. Payment-card details entered into Stripe Checkout are handled directly by Stripe and are not intended to be stored by WorkCura.

Data subjects

Agency account owners, administrators, billing contacts and other authorised users who initiate or manage a WorkCura subscription or payment.

Location & transfers

Stripe and its authorised service providers operate internationally. Current provider locations and functions are maintained in Stripe's service-provider list. Appropriate contractual transfer mechanisms and supplementary safeguards apply where required by data protection law.

Safeguards & official information

Data Processing Agreement Service Providers & Subprocessors Privacy Policy Privacy Centre

How we protect personal data

Due diligence

We assess providers in proportion to the nature of the service, the personal data involved and the risks to individuals.

Contractual controls

We require appropriate confidentiality, security, data-protection, assistance, deletion or return, and audit-related commitments.

International transfers

Where data leaves the UK or another protected jurisdiction, we use an adequacy regulation or recognised contractual safeguards where legally required.

Changes to this list

We may appoint, replace or remove subprocessors as WorkCura develops. We will update this page and its review date when the list changes. Where required by our agreement or applicable law, we will give customers advance notice of a new subprocessor and a reasonable opportunity to raise a documented objection based on data-protection grounds.

Unless a different period applies under the customer's agreement, objections should be sent within 10 business days after the relevant notice. We will work in good faith to review the concern and consider a commercially reasonable solution. If no reasonable solution is available, the parties' contractual rights will apply.

Questions or objections?

Contact ExcelTTC Limited if you need more information about a provider, want to confirm the current processing region or contracting entity, or wish to raise a data-protection concern.

ExcelTTC Limited
Company number: NI740696
24 Phoenix Fields, Ballymena, BT42 2BF, United Kingdom

contactus@workcura.com

This page should be read with the WorkCura Privacy Policy, Terms of Use and any Data Processing Agreement that applies to the customer's use of WorkCura. Some third parties involved in a transaction—such as banks, card networks, regulators or professional advisers—may act as independent controllers rather than subprocessors.