What it says
What this says
Current to 13 Oct 26Executed Data Processing Agreement signed 14 Aug 2025 under the Master Services Agreement. Kenmure Business Telecom is controller, BB-Demo is processor for the Enterprise-tier Company Brain. It states no price, availability or response-time figures.
What it is: a standard UK GDPR processing agreement, marked "Status: Executed" and signed 14 Aug 2025 by Tom Ashdown for BB-Demo. The customer signatory is shown only as "Authorised signatory", so the evidence does not show who signed for Kenmure.
Commits: BB-Demo acts "only on the Customer's documented instructions", tells the customer of a breach "without undue delay", and uses sub-processors only with "general written authorisation". Data stays inside the customer's own Snowflake account.
Unusual: nothing off standard terms. No fixed notice period for breaches, no fixed audit frequency, and no service credits.
Not settled: price, service levels, term and renewal sit in the Master Services Agreement and order form, which this document does not reproduce.
As found in this document
Current to 9 Oct 26- Date signed14 Aug 2025Source: object_read:doc_156_006
- Processing instructionsacts only on the Customer's documented instructionsacts only on the Customer's documented instructions · Source: object_read:doc_156_006
- Breach notificationwithout undue delay after becoming aware of a personal data breachwithout undue delay after becoming aware of a personal data breach · Source: object_read:doc_156_006
- Sub-processorsonly with the Customer's general written authorisationonly with the Customer's general written authorisation · Source: object_read:doc_156_006
- International transfersnot transferred outside the United Kingdom except in line with UK data protection law and the Customer's instructionsnot transferred outside the United Kingdom except in line with UK data protection law and the Customer's instructions · Source: object_read:doc_156_006
- Return and deletionat the Customer's choice, return or delete the Customer's personal dataat the Customer's choice, return or delete the Customer's personal data · Source: object_read:doc_156_006
- Auditreasonable audits by the Customer or its appointed auditor, on reasonable notice and during business hoursreasonable audits by the Customer or its appointed auditor, on reasonable notice and during business hours · Source: object_read:doc_156_006
The document
Body
Kenmure Business Telecom - Data Processing Agreement (signed)
Status: Executed Signed: 14 Aug 2025 Version: 1
This Data Processing Agreement sits under the Master Services Agreement between Kenmure Business Telecom ("the Customer") and BB-Demo ("BB-Demo") signed on the same date.
Roles
The Customer is the controller of the personal data processed through the Company Brain. BB-Demo is the processor and acts only on the Customer's documented instructions.
Subject matter and nature of processing
| Item | Detail |
|---|---|
| Purpose | Providing the Company Brain at the Enterprise tier: indexing, searching and answering questions over the systems the Customer connects |
| Location | Inside the Customer's own Snowflake account |
| Data subjects | The Customer's staff, and the contacts of the Customer's business customers |
| Data types | Contact details, account and service records, fault and ticket history, billing records and call or email content from connected systems |
| Duration | For as long as the Master Services Agreement is in force, and until return or deletion under this agreement |
BB-Demo's obligations
Read the whole document (3,206 characters)
- Process personal data only to provide the service and on the Customer's instructions.
- Make sure every person with access is bound by a duty of confidence.
- Apply appropriate technical and organisational security measures, including access controls, encryption and logging suitable to the risk.
- Help the Customer respond to requests from individuals exercising their rights under UK GDPR.
- Help the Customer with security, breach notification, impact assessments and consultation with the regulator where relevant.
Personal data breaches
BB-Demo will tell the Customer without undue delay after becoming aware of a personal data breach affecting the Customer's data, and will give the information the Customer reasonably needs to meet its own obligations.
Sub-processors
BB-Demo will use a sub-processor only with the Customer's general written authorisation, will bind it to terms no less protective than these, and remains responsible for its performance. BB-Demo will tell the Customer of intended changes so that it can object.
International transfers
Personal data will not be transferred outside the United Kingdom except in line with UK data protection law and the Customer's instructions.
Audit
BB-Demo will make available the information needed to show compliance with this agreement and will allow reasonable audits by the Customer or its appointed auditor, on reasonable notice and during business hours.
Return and deletion
On ending of the Master Services Agreement, BB-Demo will, at the Customer's choice, return or delete the Customer's personal data. Because the data sits in the Customer's own Snowflake account, the Customer keeps control of it throughout.
Governing law
This agreement is governed by the laws of England and Wales.
Signatures
| For BB-Demo | For Kenmure Business Telecom |
|---|---|
| Name: Tom Ashdown | Name: Authorised signatory |
| Title: Account Executive | Title: Authorised signatory, Kenmure Business Telecom |
| Date: 14 Aug 2025 | Date: 14 Aug 2025 |