Copperlane Payroll - Data Processing Agreement (signed)
Documentexecuted Copperlane Payroll · dpa · executed · 16 May 2025
Signed DPA between BG-Demo Limited as Data Processor and Copperlane Payroll as Data Controller, dated 16 May 2025. It sets processing, security, sub-processor and audit terms, with 5 business days for data subject request assistance. It states no price or service levels.
What it says
What this says
As at Fri 9 Oct 2026Signed DPA between BG-Demo Limited as Data Processor and Copperlane Payroll as Data Controller, dated 16 May 2025. It sets processing, security, sub-processor and audit terms, with 5 business days for data subject request assistance. It states no price or service levels.
What it is: an executed DPA that "supplements the Master Services Agreement" between BG-Demo Limited and Copperlane Payroll. Both signature blocks are dated 16 May 2025, signed for each side by a Director.
Commits: the Processor acts "only on documented written instructions from the Controller" and must "Delete or return personal data at the end of the service, unless retained as required by law". It will give reasonable assistance "within 5 business days" on data subject requests.
Unusual: data is processed "within the United Kingdom and European Union", with no transfer outside the EEA without the Customer's written consent. Snowflake is the only named sub-processor, running in the Customer's own account.
Not settled: the document gives no price, availability, support or refresh terms, and no renewal date. The DPA runs for the term of the Master Services Agreement, whose dates are not in this document.
As found in this document
As at Fri 9 Oct 2026- Date signed16 May 2025Source: the AI read of this record
- Processing instructionsProcess personal data only on documented written instructions from the ControllerSource: the AI read of this record
- Data subject request assistancewithin 5 business days, provide reasonable assistance to the Controller in fulfilling any data subject request for access, deletion or portabilitySource: the AI read of this record
- International transfersNo data is transferred outside the EEA without the Customer's written consent and appropriate safeguards.Source: the AI read of this record
- End of serviceDelete or return personal data at the end of the service, unless retained as required by lawSource: the AI read of this record
- Termruns for the term of the Master Services Agreement and continues for as long as any personal data is heldSource: the AI read of this record
The document
Body
Copperlane Payroll - Data Processing Agreement (signed)
1. Scope
This Data Processing Agreement ("DPA") supplements the Master Services Agreement between BG-Demo Limited ("Data Processor") and Copperlane Payroll ("Data Controller").
This DPA sets out the terms under which the Processor will process personal data on behalf of the Controller in the delivery of B-Glass service.
2. Data Processing
The Processor will:
- Process personal data only on documented written instructions from the Controller
- Ensure persons authorised to process personal data are bound by confidentiality
- Implement appropriate technical and organisational security measures
- Implement and maintain data subject rights procedures
- Assist the Controller in responding to data subject access requests
- Delete or return personal data at the end of the service, unless retained as required by law
3. Security Measures
The Processor maintains:
- Encryption of data at rest and in transit
- Access controls and authentication
- Regular security reviews and vulnerability assessments
- Incident response procedures
- Staff training on data protection
4. Sub-processors
Read the whole document (2,454 characters)
The Processor may engage sub-processors in the delivery of the service. Current sub-processors include:
- Snowflake (data warehouse, running within the Customer's own account)
The Customer will be notified of any other sub-processor engagements.
5. International Transfers
The Processor processes data within the United Kingdom and European Union. No data is transferred outside the EEA without the Customer's written consent and appropriate safeguards.
6. Audit and Inspection
The Processor will:
- Allow the Controller to audit its compliance with this DPA
- Provide information on request regarding processing activities
- Make available staff with knowledge of data protection obligations
7. Term
This DPA runs for the term of the Master Services Agreement and continues for as long as any personal data is held.
8. Data Subject Rights
The Controller is responsible for fulfilling data subject rights. The Processor will, within 5 business days, provide reasonable assistance to the Controller in fulfilling any data subject request for access, deletion or portability.
Signatures
BG-Demo Limited
_________________________________ Director Date: 16 May 2025
Copperlane Payroll
_________________________________ Director Date: 16 May 2025
Unusual terms
As at Fri 9 Oct 2026- Processing limited to UK and EU
- Written consent needed for transfers outside the EEA
- 5 business day assistance on data subject requests