Haddon Rook Logistics - Data Processing Agreement (signed)
Documentexecuted Haddon Rook Logistics · dpa · executed · 2025-12-24
Executed data processing agreement dated 24 Dec 2025, with BB-Demo Limited as processor and Haddon Rook Logistics as controller. It states no availability, P1 response time or price. It cites an MSA dated 7 Jan 2026, which is later than the DPA.
What it says
What this says
Current to 13 Oct 26Executed data processing agreement dated 24 Dec 2025, with BB-Demo Limited as processor and Haddon Rook Logistics as controller. It states no availability, P1 response time or price. It cites an MSA dated 7 Jan 2026, which is later than the DPA.
What it is: a data processing agreement under which BB-Demo Limited processes personal data for Haddon Rook Logistics "solely to provide the Company Brain subscription and associated services". It covers contact details, transaction data, call recordings, emails and CRM records.
Commits: the processor must obtain "the prior written consent of the Data Controller" before engaging sub-processors, notify breaches "without undue delay", certify compliance annually and delete or return data on termination. The DPA runs for the MSA term and two years after termination.
Unusual: the DPA is dated 24 Dec 2025 but refers to an MSA "dated 7 Jan 2026", so it predates the agreement it sits under. The signature blocks name no individual signatories.
Not settled: price, service levels, connector dates, renewal and the MSA term. Those sit in the MSA and order form, which this document does not contain.
As found in this document
Current to 9 Oct 26- Date signed24 Dec 2025Source: object_read:doc_168_005
- Durationfor the duration of the Master Service Agreement and for two years following termination, unless longer retention is required by applicable lawfor the duration of the Master Service Agreement and for two years following termination, unless longer retention is required by applicable law · Source: object_read:doc_168_005
- Sub-processorsonly with the prior written consent of the Data Controlleronly with the prior written consent of the Data Controller · Source: object_read:doc_168_005
- Auditon reasonable notice, with certification of compliance provided annuallyon reasonable notice, with certification of compliance provided annually · Source: object_read:doc_168_005
- Data breach notificationwithout undue delay upon becoming aware of any personal data breachwithout undue delay upon becoming aware of any personal data breach · Source: object_read:doc_168_005
- Return or deletionon termination of the Master Service Agreement, securely delete or return all personal data at the Data Controller's electionon termination of the Master Service Agreement, securely delete or return all personal data at the Data Controller's election · Source: object_read:doc_168_005
The document
Body
Haddon Rook Logistics, Data Processing Agreement
This Data Processing Agreement ("DPA") is entered into on 24 Dec 2025 between:
- BB-Demo Limited, a company incorporated in England and Wales with its registered office in London ("Data Processor")
- Haddon Rook Logistics, a company with its registered office in Northampton ("Data Controller")
1. Scope and Purpose
The Data Processor shall process personal data on behalf of the Data Controller solely to provide the Company Brain subscription and associated services in accordance with the Master Service Agreement dated 7 Jan 2026.
2. Categories of Data Processed
The Data Controller instructs the Data Processor to process the following categories of personal data:
- Contact details (names, email addresses, phone numbers)
- Account and transaction data from the Data Controller's systems
- Call recordings and transcripts
- Email messages and metadata
- Customer records held in the Data Controller's CRM
3. Data Subjects
Data subjects include employees, contractors and customers of the Data Controller.
4. Duration
Read the whole document (2,925 characters)
This DPA applies for the duration of the Master Service Agreement and for two years following termination, unless longer retention is required by applicable law.
5. Data Subject Rights
The Data Processor shall, in a timely manner:
- Assist the Data Controller in fulfilling data subject access requests
- Assist the Data Controller in responding to data subject rights requests
- Support deletion and restriction of processing where lawful
6. Sub-processors
The Data Processor may engage sub-processors only with the prior written consent of the Data Controller. The Data Processor shall remain liable for the performance of any sub-processor.
7. Security
The Data Processor shall implement and maintain appropriate technical and organisational measures to ensure the security of personal data processed, including encryption, access controls and regular security reviews.
8. Audit and Monitoring
The Data Controller may audit the Data Processor's compliance with this DPA on reasonable notice. The Data Processor shall provide certification of compliance annually.
9. Confidentiality
Personnel engaged by the Data Processor in processing personal data shall be under a binding obligation of confidentiality.
10. Data Breach Notification
The Data Processor shall notify the Data Controller without undue delay upon becoming aware of any personal data breach and shall cooperate fully in any investigation and remediation.
11. Return or Deletion
Upon termination of the Master Service Agreement, the Data Processor shall, at the Data Controller's election, securely delete or return all personal data processed.
For BB-Demo Limited:
Signed by a duly authorised representative
For Haddon Rook Logistics:
Signed by a duly authorised representative
Date: 24 Dec 2025
Unusual terms
Current to 9 Oct 26- DPA dated before the MSA it cites
- Two-year post-termination duration
- Prior written consent for sub-processors