What it says
What this says
As at Fri 9 Oct 2026Executed data processing agreement between BG-Demo Limited (Processor) and Corriemoor Foods (Controller), signed 14 Jul 2023. It sets security, subprocessor, deletion and audit terms. It states no price, availability or response time.
What it is: a data processing agreement under which BG-Demo Limited processes personal data for Corriemoor Foods. Both parties are dated 14 Jul 2023 in the signature table.
Commits: the Processor acts only on documented instructions and keeps "Encryption of Data in transit (TLS 1.2 or higher) and at rest (AES-256)". It must delete all Data within thirty days of termination.
Unusual: subprocessors need the Controller's prior written consent, which is stricter than a notice-only model. Audit is on ten business days' notice, once per calendar year unless a prior audit revealed a material breach.
Not settled: the Corriemoor Foods signatory name and title are blank. The text sets no term, price, service level or renewal date, and refers to a related order form that is not part of this document.
As found in this document
As at Fri 9 Oct 2026- Date signed14 Jul 2023Source: the AI read of this record
- Processing instructionsThe Processor shall process Data only on documented instructions of the Controller, unless required to do so by law.Source: the AI read of this record
- EncryptionEncryption of Data in transit (TLS 1.2 or higher) and at rest (AES-256)Source: the AI read of this record
- Subprocessorsonly with the Controller's prior written consentSource: the AI read of this record
- Data deletiondelete all Data within thirty days unless required by law to retain itSource: the AI read of this record
- Auditon ten business days' notice, not more than once per calendar year unless a prior audit revealed a material breachSource: the AI read of this record
The document
Body
Corriemoor Foods - Data Processing Agreement (signed)
Parties:
- BG-Demo Limited ("Processor")
- Corriemoor Foods ("Controller")
1. Definitions
"Data" means personal data as defined in the Data Protection Act 2018. "Services" means the provision of B-Glass as set out in the related order form. "Processor" means BG-Demo Limited. "Controller" means Corriemoor Foods.
2. Processing Instructions
The Processor shall process Data only on documented instructions of the Controller, unless required to do so by law.
3. Security
The Processor shall maintain appropriate technical and organisational measures to protect Data, including:
- Encryption of Data in transit (TLS 1.2 or higher) and at rest (AES-256)
- Role-based access controls
- Regular security assessments
4. Subprocessors
The Processor may engage a subprocessor only with the Controller's prior written consent. A current list of subprocessors is available on request.
5. Data Subject Rights
The Processor shall assist the Controller in fulfilling its obligations to data subjects seeking to exercise their rights under data protection law.
6. Data Deletion
Read the whole document (1,679 characters)
Upon termination of the Services, the Processor shall delete all Data within thirty days unless required by law to retain it.
7. Audit
The Controller may audit the Processor's compliance with this Agreement on ten business days' notice, not more than once per calendar year unless a prior audit revealed a material breach.
Signatures
| For and on behalf of | Signatory Title | Date |
|---|---|---|
| BG-Demo Limited | Chief Executive Officer and Co-founder | 14 Jul 2023 |
| Corriemoor Foods | 14 Jul 2023 |
Unusual terms
As at Fri 9 Oct 2026- Subprocessors need prior written consent
- Audit on ten business days' notice
- Deletion within thirty days of termination