Coorabell Logistics - Data Processing Agreement (signed)
Documentexecuted Coorabell Logistics: documents · dpa · executed · 2026-04-29
Executed data processing agreement between BB-Demo Limited as Data Processor and Coorabell Logistics as Data Controller, dated 29 Apr 2026. It sits under the Master Services Agreement and states no price, availability or response-time terms.
What it says
What this says
Current to 11 Oct 26Executed data processing agreement between BB-Demo Limited as Data Processor and Coorabell Logistics as Data Controller, dated 29 Apr 2026. It sits under the Master Services Agreement and states no price, availability or response-time terms.
What it is: a standard DPA filed under Coorabell Logistics Contracts, headed "Executed: 29 Apr 2026". It covers processing scope, security, sub-processors, data subject rights, audit, transfers and data return.
Commits: BB-Demo processes personal data "only on the written instructions of the Data Controller". On termination of the MSA it must delete or return all Customer Data "within 30 days" at the controller's election.
Unusual: sub-processing needs "the prior written authorisation of the Data Controller", which is a prior-consent rule rather than notice. Audit is allowed "on reasonable notice" with no frequency limit.
Not settled: the signature lines show underscores only and the signatories are unnamed (each is just "Director"). The MSA effective date is not stated, so the term is only "for as long as the MSA remains in effect". No tier, price, data residency location or service level appears.
As found in this document
Current to 9 Oct 26- Date signed29 Apr 2026Source: object_read:doc_101_005
- Processing instructionsprocess personal data only on the written instructions of the Data Controllerprocess personal data only on the written instructions of the Data Controller · Source: object_read:doc_101_005
- Sub-processorsnot sub-process personal data without the prior written authorisation of the Data Controllernot sub-process personal data without the prior written authorisation of the Data Controller · Source: object_read:doc_101_005
- Data return on terminationdelete or return all Customer Data within 30 daysdelete or return all Customer Data within 30 days · Source: object_read:doc_101_005
- AuditData Controller (or its auditor) may inspect facilities and records on reasonable noticeData Controller (or its auditor) may inspect facilities and records on reasonable notice · Source: object_read:doc_101_005
- Termcontinue for as long as the MSA remains in effectcontinue for as long as the MSA remains in effect · Source: object_read:doc_101_005
The document
Body
Coorabell Logistics - Data Processing Agreement (signed)
Executed: 29 Apr 2026
Parties
BB-Demo Limited ("Data Processor") and Coorabell Logistics ("Data Controller").
1. Processing Scope
The Data Processor shall process Customer Data in accordance with the Master Services Agreement executed by the parties.
2. Data Protection Obligations
2.1 The Data Processor shall process personal data only on the written instructions of the Data Controller.
2.2 The Data Processor shall ensure that persons authorised to process personal data have committed to confidentiality or are under an appropriate legal obligation.
2.3 The Data Processor shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption, access controls and regular security testing.
3. Sub-processors
The Data Processor shall not sub-process personal data without the prior written authorisation of the Data Controller. The Data Processor shall ensure all sub-processors are bound by equivalent data protection obligations.
4. Data Subject Rights
Read the whole document (2,237 characters)
The Data Processor shall promptly assist the Data Controller in fulfilling the Data Controller's obligations to respond to data subject requests.
5. Audit and Inspection
The Data Controller (or its auditor) may inspect the Data Processor's facilities and records relevant to data processing, on reasonable notice.
6. International Data Transfers
Any transfer of personal data outside the UK or EEA shall be subject to appropriate safeguards as required by law.
7. Termination and Data Return
Upon termination of the Master Services Agreement, the Data Processor shall, at the Data Controller's election, delete or return all Customer Data within 30 days.
8. Term
This Agreement shall come into force on the effective date of the Master Services Agreement and shall continue for as long as the MSA remains in effect.
Execution
For and on behalf of BB-Demo Limited:
Signature: \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_
Director
Date: 29 Apr 2026
For and on behalf of Coorabell Logistics:
Signature: \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_
Director
Date: 29 Apr 2026
Unusual terms
Current to 9 Oct 26- prior written authorisation for sub-processors
- audit on reasonable notice