Back to Privacy Policy

Sub-processors

Last updated: 26 May 2026

The following named service providers process personal information on behalf of Third Wave BBQ (TWB) Perks. Each is bound by a written data-processing agreement that requires them to handle your data only for the purposes we've set and in line with the Australian Privacy Principles (APP 8.1).

By claiming a voucher you consent to your personal information being transferred to and processed in the jurisdictions listed below for the purposes described.

Named processors

  • MailerLite

    EU / United States

    Purpose:
    Marketing email subscriber list + opt-in newsletter sends.
    Data shared:
    First name, email, mobile (for SMS-also subscribers), nearest venue, partner-source tag.
  • MailerSend

    United States

    Purpose:
    Transactional voucher email delivery (sent regardless of marketing consent because the customer claimed the voucher).
    Data shared:
    First name, email, voucher code, partner name, offer title.
  • ClickSend

    Australia (with carrier-level global routing)

    Purpose:
    Outbound transactional + opt-in marketing SMS delivery, and inbound STOP-reply receipt.
    Data shared:
    Mobile number, SMS body text.
  • Anthropic (Claude)

    United States

    Purpose:
    AI assistance for internal editorial drafting (quarterly partner guides). No customer PII is sent — only partner-side public copy.
    Data shared:
    No personal information about claimants is shared.
  • Cloudflare Turnstile

    United States / global edge

    Purpose:
    Anti-bot challenge on the public claim form.
    Data shared:
    Browser-derived interaction signals + the visitor’s IP address.
  • Sentry

    Overseas (United States)

    Purpose:
    Server-side error monitoring. PII fields are scrubbed before transmission; IP + user agent may be captured as context.
    Data shared:
    Error stack traces with PII redacted; IP + user-agent in error context only.
  • DigitalOcean

    Sydney, Australia

    Purpose:
    Hosting (VPS + managed database + object-storage backups).
    Data shared:
    All application data — at rest on encrypted block-storage volumes. No employee access without ticketed change-control.
  • GitHub

    United States

    Purpose:
    Source-code hosting + CI build pipeline. No production customer data is ever pushed here; only application source code.
    Data shared:
    No personal information about claimants is shared.

Changes

We update this list before adding any new sub-processor. If you have a question about a specific processor, contact [email protected].