Carrowkeel Software - Data Processing Agreement (signed)
Documentexecuted Carrowkeel Software: documents · dpa · executed · 2025-08-01
Executed data processing agreement, effective 1 Aug 2025, with Carrowkeel Software as controller and BB-Demo as processor. It sits under the master agreement and order form and states no price, availability or response times.
What it says
What this says
Current to 11 Oct 26Executed data processing agreement, effective 1 Aug 2025, with Carrowkeel Software as controller and BB-Demo as processor. It sits under the master agreement and order form and states no price, availability or response times.
What it is: an executed DPA signed on 1 Aug 2025 by Sophie Ling for BB-Demo and an unnamed authorised signatory for Carrowkeel Software. It "sits under the master agreement and any order form between the parties".
Commits: BB-Demo will process personal data "only on the customer's documented instructions" and tell the customer "without undue delay" after becoming aware of a personal data breach. It also accepts audits on reasonable notice and will delete or return data when the services end.
Unusual: nothing off the standard terms. Sub-processors are covered by general authorisation, with notice of intended changes so the customer can object.
Not settled: the text gives no price, service levels, breach notification deadline in hours, or renewal date. The evidence does not show the signatory's name or role beyond "Authorised signatory".
As found in this document
Current to 9 Oct 26- Date signed1 Aug 2025Source: object_read:doc_085_006
- Date start1 Aug 2025Source: object_read:doc_085_006
- Processing instructionsprocess personal data only on the customer's instructions, unless required to do otherwise by lawprocess personal data only on the customer's instructions, unless required to do otherwise by law · Source: object_read:doc_085_006
- Breach notificationtell the customer without undue delay after becoming aware of a personal data breachtell the customer without undue delay after becoming aware of a personal data breach · Source: object_read:doc_085_006
- Sub-processorsBB-Demo will tell the customer of any intended change so that the customer has a fair opportunity to objectBB-Demo will tell the customer of any intended change so that the customer has a fair opportunity to object · Source: object_read:doc_085_006
- Auditallow audits by the customer or its appointed auditor, on reasonable notice and during business hoursallow audits by the customer or its appointed auditor, on reasonable notice and during business hours · Source: object_read:doc_085_006
- Return and deletionat the customer's choice, delete or return the personal data it holdsat the customer's choice, delete or return the personal data it holds · Source: object_read:doc_085_006
- Termcontinues for as long as BB-Demo processes personal data for the customercontinues for as long as BB-Demo processes personal data for the customer · Source: object_read:doc_085_006
The document
Body
Carrowkeel Software - Data Processing Agreement (signed)
Status: Executed
Effective date: 1 Aug 2025
This agreement sets out how BB-Demo processes personal data on behalf of its customer in providing the company brain. It sits under the master agreement and any order form between the parties.
Parties
| Role | Party |
|---|---|
| Controller (the customer) | Carrowkeel Software, Dublin |
| Processor | BB-Demo, London |
| BB-Demo account owner | Sophie Ling, Account Executive |
| BB-Demo customer success manager | Elena Novak |
Definitions
In this agreement, "personal data", "processing", "controller", "processor" and "data subject" have the meanings given to them in applicable data protection law. "Services" means the company brain and related support supplied by BB-Demo under the order form.
Scope and purpose of processing
BB-Demo processes personal data only to provide the services to the customer and only on the customer's documented instructions. The company brain is built and run inside the customer's own Snowflake account, so the customer keeps control of where its data sits.
Read the whole document (3,772 characters)
The categories of data subject are the customer's staff, its customers and the contacts of its letting-agent clients, to the extent they appear in the systems the customer chooses to connect. The types of personal data are business contact details, support ticket content, renewal records and product usage records.
Obligations of the processor
BB-Demo will:
- process personal data only on the customer's instructions, unless required to do otherwise by law, in which case it will tell the customer first where permitted;
- ensure that everyone authorised to process the data is bound by confidentiality;
- keep appropriate technical and organisational measures in place to protect the data;
- help the customer respond to requests from data subjects;
- help the customer meet its obligations on security, breach notification and impact assessments;
- tell the customer without undue delay after becoming aware of a personal data breach.
Sub-processors
The customer gives general authorisation for BB-Demo to use sub-processors. BB-Demo will tell the customer of any intended change so that the customer has a fair opportunity to object. BB-Demo remains responsible for the acts of its sub-processors and will bind them to terms no less protective than these.
International transfers
Personal data will be processed within the customer's Snowflake account. Where any transfer outside the country of the customer is needed, BB-Demo will only make it under a lawful transfer mechanism and in line with the customer's instructions. This agreement applies under the data protection law of Ireland and of the United Kingdom where each applies.
Audit and information
BB-Demo will make available the information reasonably needed to show compliance with this agreement and will allow audits by the customer or its appointed auditor, on reasonable notice and during business hours, subject to confidentiality.
Return and deletion
On ending of the services, BB-Demo will, at the customer's choice, delete or return the personal data it holds, and will remove the company brain's indexed copies from the customer's environment, unless the law requires retention.
Liability and term
Liability under this agreement follows the limits in the master agreement. This agreement continues for as long as BB-Demo processes personal data for the customer.
Signatures
Signed for and on behalf of each party on 1 Aug 2025.
| For the customer | For BB-Demo | |
|---|---|---|
| Name | Authorised signatory, Carrowkeel Software | Sophie Ling |
| Title | Authorised signatory | Account Executive |
| Date | 1 Aug 2025 | 1 Aug 2025 |