GDPR Art. 28
Subprocessors.
The third parties we rely on to operate this website. Each one processes a narrow slice of personal data on our behalf, under a signed Data Processing Agreement.
Last review: 2026-04-29
01
Active subprocessors
| Provider | Purpose | Data | Region | Legal |
|---|---|---|---|---|
| Vercel Inc. | Static hosting, edge caching, request routing for natura.inc | IP address, request metadata, basic logs | USA / EU edge nodes | DPA + SCCs (EU → US), GDPR-compliant |
| Resend (Resend Inc.) | Transactional email delivery (signup confirmation) and team notifications | Email address, IP address (delivery logs), email content | USA | DPA + SCCs (EU → US) |
02
Change notification
We notify you of material changes to this list at least 30 days in advance through:
- An update to this page with a new last-review date.
- An email to subscribers, where the change affects how their data is processed.
03
Object to a subprocessor
You may object to the use of a specific subprocessor at any time by writing to privacy@natura.inc. If we cannot reasonably accommodate the objection, you have the right to terminate any service that depends on that subprocessor.
04
Related
- Privacy policy — the legal basis and rights framework.
- Cookie policy — client-side storage we set ourselves.
- Submit a data subject request (access, deletion, portability).