Skip to content

Privacy record

Subprocessors

A provider-by-provider record of the services supporting the public website and the data categories each service can receive.

Public recordList dated September 1, 2026

The providers below process information in connection with this public website. Trunnion may receive identifier-free aggregate page-load counts containing date, hour, broad device class, and country code, with no page path or visitor/session ID, until rejected. Raw IP and user-agent values are reduced transiently and are not retained in aggregate storage. Detailed analytics and advertising receive data only after the corresponding consent. Operational form-receipt reporting does not depend on that choice.

Subprocessors and service providers for viceroynm.com
ProviderFunctionData categories receivedLocation
RenderWebsite hosting, lead API compute, and managed PostgreSQL databaseWebsite content; contact, application, and privacy-request form submissions; infrastructure and request logsUnited States
CloudflareContent delivery network and edge security in front of the website; terminates visitor connections for all site trafficVisitor IP addresses, request metadata, and security telemetry for every visitorUnited States (global edge network)
SquarespaceDomain registration and DNS administration only, not website hostingNo visitor or form data; DNS configuration recordsUnited States
GoogleGoogle Analytics only after analytics consentWith consent, page URL and title, referrer, device and browser characteristics, interactions, and consent stateUnited States
ResendTransactional email delivery of contact, application, and privacy-request notificationsNotification recipient and submitted form contents needed to alert authorized Viceroy personnel; delivery metadata and logsUnited States
Trunnion AI analyticsPrivate form-receipt reporting plus optional site analytics (an affiliated Duskbridge-group service)A reporting copy of submitted contact and procurement form fields independent of analytics consent. For applications, only name, email, selected role, form identity, and source page are copied; resume links and narrative responses are excluded. Privacy-rights forms are excluded. With consent, page URL and title, referrer, campaign values, device and browser characteristics, interactions, and consent state are also processed.United States
MetaMeta Pixel advertising measurement, loaded only after advertising consent (off by default)With consent: visit and conversion events and browser characteristicsUnited States

Data processing agreements

Enterprise and government customers who require a data processing agreement covering website interactions, or documentation of the intercompany processing relationship with the Trunnion AI analytics service, can request one by emailing privacy@viceroynm.com with the subject "DPA request."

Necessary technology is always active because it provides security and remembers this choice.