Bayard Lane Payments - Data Processing Agreement (signed)
Documentexecuted Bayard Lane Payments · dpa · executed · 27 Feb 2026
Executed DPA between BG-Demo (Processor) and Bayard Lane Payments (Controller), dated 27 Feb 2026, covering B-Glass service for the merchant success team. It states no service levels, price or term; those sit in the underlying Service Agreement.
What it says
What this says
As at Fri 9 Oct 2026Executed DPA between BG-Demo (Processor) and Bayard Lane Payments (Controller), dated 27 Feb 2026, covering B-Glass service for the merchant success team. It states no service levels, price or term; those sit in the underlying Service Agreement.
What it is: a data processing agreement under which BG-Demo processes personal data only on the Controller's documented instructions, for "unified analytics, search and reporting capabilities". Priya Raman signed for BG-Demo on 27 Feb 2026.
Commits: BG-Demo to encryption in transit and at rest, role-based access controls, regular security audits, staff training, help with data subject requests, and return or secure deletion on termination at the Controller's written instruction. It also accepts audit rights on reasonable notice.
Unusual: nothing off the standard terms. Liability is "subject to limitations in the underlying Service Agreement", and data location is whatever the Controller specifies there.
Not settled: the signature line for Bayard Lane Payments reads only "Authorised Representative", so the document does not show who signed for the customer. It also states no price, term, renewal date or service levels, and does not name any sub-processors.
As found in this document
As at Fri 9 Oct 2026- Date signed27 Feb 2026Source: the AI read of this record
- Date start27 Feb 2026Source: the AI read of this record
- Processing instructionsAll processing shall be carried out only in accordance with documented instructions from the Controller.Source: the AI read of this record
- Data securityEncryption of personal data in transit and at restSource: the AI read of this record
- Data subject rightsreasonable assistance to the Controller in responding to requests from data subjects exercising their rightsSource: the AI read of this record
- Return or deletionat the Controller's written instruction, return or securely delete all personal data and copies thereofSource: the AI read of this record
- Audit rightspermit audits upon reasonable noticeSource: the AI read of this record
Body
Bayard Lane Payments - Data Processing Agreement
Effective date: 27 February 2026
1. Parties
This Data Processing Agreement ("DPA") is entered into on 27 February 2026 between BG-Demo (Processor) and Bayard Lane Payments (Controller).
2. Scope
The Processor shall process personal data on behalf of the Controller in connection with the provision of B-Glass service, enabling the Controller's merchant success team to see platform tickets, calls and volumes in a unified view.
3. Data Categories and Purpose
The Processor shall process the following categories of personal data as provided by the Controller:
- Personnel and staff records
- Merchant and customer contact information
- Call and communication transcripts
- Ticket and support data
- Usage and transaction information
Purpose: To provide unified analytics, search and reporting capabilities to the Controller's merchant success organisation.
4. Processing Instructions
Read the whole document (2,857 characters)
All processing shall be carried out only in accordance with documented instructions from the Controller. The Processor shall not process personal data for any purpose beyond that specified in the underlying Service Agreement.
5. Data Subject Rights
The Processor shall provide reasonable assistance to the Controller in responding to requests from data subjects exercising their rights, including access, rectification, erasure and portability, within timescales required by applicable law.
6. Sub-processors
Any sub-processor appointed by the Processor shall be bound by data protection obligations equivalent to those in this DPA.
7. Data Security
The Processor shall implement and maintain appropriate technical and organisational security measures including:
- Encryption of personal data in transit and at rest
- Access controls and role-based permissions
- Regular security audits and vulnerability assessments
- Staff training on data protection obligations
8. Data Transfers
Personal data shall be processed and stored in the location or locations specified by the Controller in the Service Agreement.
9. Return or Deletion
Upon termination of services, the Processor shall, at the Controller's written instruction, return or securely delete all personal data and copies thereof.
10. Audit Rights
The Processor shall make available to the Controller all information necessary to demonstrate compliance with this DPA and permit audits upon reasonable notice.
11. Liability
The Processor is liable for damages caused by processing that infringes data protection law, subject to limitations in the underlying Service Agreement.
Executed:
For BG-Demo: _______________________________ Priya Raman Account Executive
Date: 27 February 2026
For Bayard Lane Payments: _______________________________ Authorised Representative