Hollowmere Care Group - Data Processing Agreement (signed)
Documentexecuted Hollowmere Care Group: documents · dpa · executed · 2026-03-27
Executed Data Processing Agreement under the Master Subscription Agreement and Order Form. Hollowmere Care Group is controller and B-Brain processor. The data stays in the customer's own Snowflake account. It states no price, availability or response-time figures.
What it says
What this says
Current to 11 Oct 26Executed Data Processing Agreement under the Master Subscription Agreement and Order Form. Hollowmere Care Group is controller and B-Brain processor. The data stays in the customer's own Snowflake account. It states no price, availability or response-time figures.
What it is: an executed DPA, signed 27 Mar 2026, that applies "whenever B-Brain processes personal data on behalf of the Customer". Matteo Ricci signed for B-Brain; the customer signatory is shown only as "Authorised signatory", so the name and role are not stated.
Commits: B-Brain processes only on documented instructions, keeps access to named staff, and will tell the Customer of a breach "without undue delay". It will not transfer data outside the United Kingdom without a lawful mechanism and written agreement.
Unusual: the records may contain health information, flagged as special category data. Sub-processors are under general authorisation with prior notice and a right to object.
Not settled: no service levels, price, fees or connector dates appear here. The breach clause sets no hour limit, and the liability cap sits in the Master Subscription Agreement, which is not in this document.
As found in this document
Current to 9 Oct 26- Date signed27 Mar 2026Source: object_read:doc_023_006
- Date start27 Mar 2026Source: object_read:doc_023_006
- Processing instructionsB-Brain will process Customer Personal Data only on the Customer's documented instructionsB-Brain will process Customer Personal Data only on the Customer's documented instructions · Source: object_read:doc_023_006
- Location of processingB-Brain will not move Customer Personal Data out of the Brain Environment except as the Customer instructs in writingB-Brain will not move Customer Personal Data out of the Brain Environment except as the Customer instructs in writing · Source: object_read:doc_023_006
- International transfersB-Brain will not transfer Customer Personal Data outside the United Kingdom unless a lawful transfer mechanism is in place and the Customer has agreed in writingB-Brain will not transfer Customer Personal Data outside the United Kingdom unless a lawful transfer mechanism is in place and the Customer has agreed in writing · Source: object_read:doc_023_006
- Personal data breachesB-Brain will tell the Customer without undue delay after becoming aware of a personal data breachB-Brain will tell the Customer without undue delay after becoming aware of a personal data breach · Source: object_read:doc_023_006
- Sub-processorsB-Brain will keep a current list and tell the Customer before adding or replacing a sub-processorB-Brain will keep a current list and tell the Customer before adding or replacing a sub-processor · Source: object_read:doc_023_006
- Return and deletionOn termination B-Brain will remove its access and delete any copies of Customer Personal Data it holds outside the Brain EnvironmentOn termination B-Brain will remove its access and delete any copies of Customer Personal Data it holds outside the Brain Environment · Source: object_read:doc_023_006
- Termtakes effect on signature and continues for as long as B-Brain processes Customer Personal Data on the Customer's behalftakes effect on signature and continues for as long as B-Brain processes Customer Personal Data on the Customer's behalf · Source: object_read:doc_023_006
The document
Body
Unusual terms
Current to 9 Oct 26- Special category health data may be present
- General authorisation for sub-processors with objection right
- Breach notice without a stated hour limit
- Customer signatory not named