Brannock Medical Supplies - Data Processing Agreement (signed)
Documentexecuted Brannock Medical Supplies · dpa · executed · 12 Apr 2024
Executed data processing agreement dated 12 Apr 2024 between Brannock Medical Supplies and BG-Demo. BG-Demo processes personal data only on Brannock's instructions inside Brannock's own Snowflake account. It states no price, availability figure or response times.
What it says
What this says
As at Fri 9 Oct 2026Executed data processing agreement dated 12 Apr 2024 between Brannock Medical Supplies and BG-Demo. BG-Demo processes personal data only on Brannock's instructions inside Brannock's own Snowflake account. It states no price, availability figure or response times.
What it is: an executed DPA that sits alongside the master agreement and order form. It covers personal data of NHS trust, GP practice and care home contacts and Brannock staff who use the brain.
Commits: BG-Demo acts only on documented instructions and tells Brannock "without undue delay" of a personal data breach. It will not move personal data "outside the United Kingdom" without written agreement.
Unusual: nothing off the standard terms. The agreement has no end date and runs for as long as BG-Demo handles personal data under the master agreement.
Not settled: the document gives no price, service levels or renewal date, and the customer signatory is unnamed ("Authorised signatory"). Those sit in the master agreement and order form, which are not in this file.
As found in this document
As at Fri 9 Oct 2026- Date signed12 Apr 2024Source: the AI read of this record
- Date start12 Apr 2024Source: the AI read of this record
- InstructionsProcess personal data only on Brannock's instructions and only to provide the brain.Source: the AI read of this record
- Engaging another partyNot engage another party to process personal data without telling Brannock first and giving it the chance to object.Source: the AI read of this record
- Data locationNot move personal data outside Brannock's Snowflake account, or outside the United Kingdom, without Brannock's written agreement.Source: the AI read of this record
- Breach notificationTell Brannock without undue delay on becoming aware of a personal data breach.Source: the AI read of this record
- End of servicesReturn or delete personal data as Brannock instructs, unless the law requires otherwise.Source: the AI read of this record
- AuditAllow reasonable audits on sensible notice, during business hours and without disrupting service for other customers.Source: the AI read of this record
Body
Brannock Medical Supplies - Data Processing Agreement (signed)
Status: Executed
This agreement is made on 12 Apr 2024 between Brannock Medical Supplies, a distributor of clinical consumables based in Nottingham ("Brannock"), and BG-Demo, a London data business ("BG-Demo"). It sits alongside the master agreement and order form between the parties.
1. Purpose and scope
- Brannock uses the BG-Demo B-Glass to give its key-account managers a joined-up view of orders, delivery queries and contract renewals.
- In doing so, BG-Demo handles personal data on Brannock's behalf. This agreement sets out how.
- The brain is built and run inside Brannock's own Snowflake account. Personal data stays in that account.
2. Roles
Brannock decides why and how personal data is used. BG-Demo acts only on Brannock's documented instructions, which are the master agreement, the order form and this agreement.
3. Categories of data and people
Read the whole document (3,398 characters)
- People: contacts at NHS trusts, GP practices and care homes; Brannock staff who use the brain.
- Data: names, work contact details, job roles and records of orders, deliveries and contract correspondence held in the connected systems.
- No special category data is intended to be processed. Brannock will tell BG-Demo before connecting any source that holds it.
4. What BG-Demo will do
- Process personal data only on Brannock's instructions and only to provide the brain.
- Make sure that anyone at BG-Demo with access is bound by a duty of confidence.
- Apply sensible technical and organisational security measures, including access controls and logging within Brannock's Snowflake account.
- Not engage another party to process personal data without telling Brannock first and giving it the chance to object.
- Help Brannock respond to requests from individuals exercising their rights.
- Help Brannock with security obligations, breach notification and impact assessments.
- Tell Brannock without undue delay on becoming aware of a personal data breach.
- At the end of the services, return or delete personal data as Brannock instructs, unless the law requires otherwise.
5. What Brannock will do
- Make sure it has a lawful basis for the personal data it asks BG-Demo to handle.
- Give clear and lawful instructions.
- Keep control of which sources are connected and who has access to the brain.
6. Location of data
BG-Demo will not move personal data outside Brannock's Snowflake account, or outside the United Kingdom, without Brannock's written agreement. Dedicated data residency can be arranged as an add-on if required.
7. Audit
BG-Demo will give Brannock the information reasonably needed to show compliance with this agreement and will allow reasonable audits on sensible notice, during business hours and without disrupting service for other customers.
8. Term
This agreement starts on the date above and continues for as long as BG-Demo handles personal data for Brannock under the master agreement.
9. Governing law
This agreement is governed by the law of England and Wales, and the courts of England and Wales have jurisdiction.
Signatures
| For Brannock Medical Supplies | For BG-Demo | |
|---|---|---|
| Name | Authorised signatory | Priya Raman |
| Title | Authorised signatory of Brannock Medical Supplies | Account Executive |
| Date | 12 Apr 2024 | 12 Apr 2024 |