Career Allies Sub-processors

Current as of 6 May 2026

Stay Nimble Ltd (Company No. 11129024)

This page lists the sub-processors Stay Nimble Ltd uses to deliver the Career Allies programme. We publish this list in the interests of transparency and to support our partner organisations in meeting their own data protection obligations. The list is referenced from the Career Allies Privacy Policy and the Career Allies Partner Agreement (Schedule 2: Data Processing Agreement).

A sub-processor is a third-party service that processes personal data on our instructions to help us deliver Career Allies. Each sub-processor is bound by a written contract that imposes data protection obligations consistent with UK GDPR.

We notify partner organisations at least thirty days in advance of adding or replacing a sub-processor that processes Partner Personal Data.

Portal and learning experience

Vercel

• Provider: Vercel Inc.
• Purpose: hosting of the Career Allies portal and microsite.
• Data processed: data in transit; standard server logs.
• Location of processing: United States, with safeguards in place for international transfer through the EU-U.S. Data Privacy Framework.

Supabase

• Provider: Supabase Inc.
• Purpose: database and authentication for the Career Allies portal.
• Data processed: name, email address, enrolment, progress, certification status, and other records held in the portal.
• Location of processing: configured to use UK/EU regions.

Amazon Web Services: Simple Email Service

• Provider: Amazon Web Services Inc., used by Supabase to deliver authentication emails.
• Purpose: delivery of magic-link emails that sign users into the Career Allies portal.
• Data processed: email address only. No name or other identifying data is sent through SES.
• Location of processing: configured for UK/EU regions.

Tally

• Provider: Tally B.V.
• Purpose: delivery of course content and (following migration from Typeform) collection of programme feedback.
• Data processed: data submitted via Tally forms, which may include name, email, and programme responses depending on the form.
• Location of processing: European Union.

Typeform

• Provider: Typeform S.L.
• Purpose: collection of programme feedback responses. In use until migration to Tally is complete, after which Typeform will be removed from this list.
• Data processed: feedback responses, which may include name and email depending on the form.
• Location of processing: European Union.

Vimeo

• Provider: Vimeo Inc.
• Purpose: hosting of learning videos.
• Data processed: videos are unlisted, which means viewers do not need a Vimeo account to watch them. Vimeo therefore receives standard technical information about the viewer's device and connection but not the viewer's name or email.
• Location of processing: United States, with safeguards in place for international transfer.

Live sessions and communications

Calendly

• Provider: Calendly LLC. Stay Nimble uses a paid plan with a data processing agreement in place.
• Purpose: scheduling of Learning Circles and other live sessions.
• Data processed: name, email, and scheduling information when a session is booked.
• Location of processing: United States, with safeguards in place for international transfer.

Google Workspace (Google Meet)

• Provider: Google LLC.
• Purpose: hosting of Learning Circles. Stay Nimble's underlying processor relationship with Google is governed by the Google Workspace Data Processing Addendum.
• Data processed: information provided when joining a meeting (typically the participant's name) and standard meeting metadata.
• Location of processing: configured for UK/EU regions where available; safeguards in place for any international transfer.

GetResponse

• Provider: GetResponse Sp. z o.o.
• Purpose: sending learning support emails during the certification and ongoing communications to certified Career Allies.
• Data processed: name, email address, email engagement information (delivery, opens, clicks).
• Location of processing: European Union.

Certification

Navigatr

• Provider: Open Badge Network Ltd (operating as Navigatr).
• Purpose: issuance of CPD-accredited digital badges.
• Data processed: name, email, and badge metadata sent as issuing instructions. Once the badge holder creates a Navigatr account to claim the badge, the relationship between the badge holder and Navigatr is direct and governed by Navigatr's own terms and privacy policy.
• Location of processing: United Kingdom.

Services that are not sub-processors of Career Ally personal data

The following services form part of the wider Career Allies experience but are not sub-processors of Career Ally personal data. We list them here for transparency.

Slack (Career Allies community)

• Provider: Slack Technologies LLC (a Salesforce company).
• Why it is not a sub-processor: Slack membership is voluntary and separate from Career Allies certification. Allies who choose to join the community create their own Slack accounts directly with Slack. Stay Nimble does not transfer Career Ally personal data to Slack on the Ally's behalf. Anything posted in the community is governed by Slack's own terms of service and privacy policy.

Ask.Nim (embedded AI assistant)

• Provider: Stay Nimble Ltd (Ask.Nim is Stay Nimble's own product).
• Why it is not a sub-processor of Career Ally personal data: Ask.Nim is embedded into the Career Allies portal and learning content via iframe. The embedded version does not receive any data identifying the user. There is no transfer of name, email, account, or session information from Career Allies to Ask.Nim. Anything an Ally chooses to share with Ask.Nim during a conversation is processed under the Ask.Nim privacy policy.

Changes to this list

This list is reviewed regularly and updated when sub-processors change. Partner organisations are notified at least thirty days in advance of changes that affect Partner Personal Data, in accordance with Schedule 2 of the Career Allies Partner Agreement.

Questions about this list, or about how we handle data more generally, can be sent to info@staynimble.co.uk.

Last updated 6 May 2026.