Bayard Lane Payments - Data Processing Agreement (signed)
Documentexecuted Bayard Lane Payments: documents · dpa · executed · 2026-02-27
Executed DPA between BB-Demo (Processor) and Bayard Lane Payments (Controller), dated 27 Feb 2026, covering the Company Brain service for the merchant success team. It states no service levels, price or term; those sit in the underlying Service Agreement.
What it says
What this says
Current to 11 Oct 26Executed DPA between BB-Demo (Processor) and Bayard Lane Payments (Controller), dated 27 Feb 2026, covering the Company Brain service for the merchant success team. It states no service levels, price or term; those sit in the underlying Service Agreement.
What it is: a data processing agreement under which BB-Demo processes personal data only on the Controller's documented instructions, for "unified analytics, search and reporting capabilities". Priya Raman signed for BB-Demo on 27 Feb 2026.
Commits: BB-Demo to encryption in transit and at rest, role-based access controls, regular security audits, staff training, help with data subject requests, and return or secure deletion on termination at the Controller's written instruction. It also accepts audit rights on reasonable notice.
Unusual: nothing off the standard terms. Liability is "subject to limitations in the underlying Service Agreement", and data location is whatever the Controller specifies there.
Not settled: the signature line for Bayard Lane Payments reads only "Authorised Representative", so the document does not show who signed for the customer. It also states no price, term, renewal date or service levels, and does not name any sub-processors.
As found in this document
Current to 9 Oct 26- Date signed27 Feb 2026Source: object_read:doc_098_006
- Date start27 Feb 2026Source: object_read:doc_098_006
- Processing instructionsAll processing shall be carried out only in accordance with documented instructions from the Controller.All processing shall be carried out only in accordance with documented instructions from the Controller. · Source: object_read:doc_098_006
- Data securityEncryption of personal data in transit and at restEncryption of personal data in transit and at rest · Source: object_read:doc_098_006
- Data subject rightsreasonable assistance to the Controller in responding to requests from data subjects exercising their rightsreasonable assistance to the Controller in responding to requests from data subjects exercising their rights · Source: object_read:doc_098_006
- Return or deletionat the Controller's written instruction, return or securely delete all personal data and copies thereofat the Controller's written instruction, return or securely delete all personal data and copies thereof · Source: object_read:doc_098_006
- Audit rightspermit audits upon reasonable noticepermit audits upon reasonable notice · Source: object_read:doc_098_006
The document
Body
Bayard Lane Payments - Data Processing Agreement
Effective date: 27 February 2026
1. Parties
This Data Processing Agreement ("DPA") is entered into on 27 February 2026 between BB-Demo (Processor) and Bayard Lane Payments (Controller).
2. Scope
The Processor shall process personal data on behalf of the Controller in connection with the provision of the Company Brain service, enabling the Controller's merchant success team to see platform tickets, calls and volumes in a unified view.
3. Data Categories and Purpose
The Processor shall process the following categories of personal data as provided by the Controller:
- Personnel and staff records
- Merchant and customer contact information
- Call and communication transcripts
- Ticket and support data
- Usage and transaction information
Purpose: To provide unified analytics, search and reporting capabilities to the Controller's merchant success organisation.
4. Processing Instructions
Read the whole document (2,867 characters)
All processing shall be carried out only in accordance with documented instructions from the Controller. The Processor shall not process personal data for any purpose beyond that specified in the underlying Service Agreement.
5. Data Subject Rights
The Processor shall provide reasonable assistance to the Controller in responding to requests from data subjects exercising their rights, including access, rectification, erasure and portability, within timescales required by applicable law.
6. Sub-processors
Any sub-processor appointed by the Processor shall be bound by data protection obligations equivalent to those in this DPA.
7. Data Security
The Processor shall implement and maintain appropriate technical and organisational security measures including:
- Encryption of personal data in transit and at rest
- Access controls and role-based permissions
- Regular security audits and vulnerability assessments
- Staff training on data protection obligations
8. Data Transfers
Personal data shall be processed and stored in the location or locations specified by the Controller in the Service Agreement.
9. Return or Deletion
Upon termination of services, the Processor shall, at the Controller's written instruction, return or securely delete all personal data and copies thereof.
10. Audit Rights
The Processor shall make available to the Controller all information necessary to demonstrate compliance with this DPA and permit audits upon reasonable notice.
11. Liability
The Processor is liable for damages caused by processing that infringes data protection law, subject to limitations in the underlying Service Agreement.
Executed:
For BB-Demo: _______________________________ Priya Raman Account Executive
Date: 27 February 2026
For Bayard Lane Payments: _______________________________ Authorised Representative