All of your data is stored on their servers in the UK. However, a number of their suppliers (including providers of their content delivery, cloud platform, payment systems and mailing services) are based outside of the European Economic Area, which may require them to transfer your personal data to jurisdictions which are not subject to equivalent standards of data protection laws (including the US). Where such international transfers are necessary, they will ensure that these are made subject to appropriate safeguards (including by using EU Commission approved standard contractual clauses). All organisations who they transfer data to in the US are certified under the Privacy Shield framework.