Leiekant Accountants - Data Processing Agreement (signed)
Documentexecuted Leiekant Accountants · dpa · executed · 2026-02-20
Executed data processing agreement under which BB-Demo Limited is Processor and Leiekant Accountants is Controller, supplementing the Master Services Agreement. It states no price, availability figure or P1 response time. The customer signature block is unnamed.
What it says
What this says
Current to 13 Oct 26Executed data processing agreement under which BB-Demo Limited is Processor and Leiekant Accountants is Controller, supplementing the Master Services Agreement. It states no price, availability figure or P1 response time. The customer signature block is unnamed.
What it is: a DPA that "supplements the Master Services Agreement and governs the processing of personal data by the Processor on behalf of the Controller". It is marked Executed and dated 20 Feb 2026.
Commits: the Processor must process data only on "documented instructions", keep encryption, access controls, security reviews and incident response in place, and use sub-processors only with "prior written approval of the Controller". The Controller may audit "at any time and at reasonable intervals".
Unusual: nothing off the standard terms. The customer signatory appears only as "Authorised Signatory" with a blank signature line, so the document does not show who signed for Leiekant.
Not settled: no price, service levels, term, renewal date, breach notification period or sub-processor list. Deletion follows termination of the Master Services Agreement and only "at the Controller's written request".
As found in this document
Current to 9 Oct 26- Date signed20 Feb 2026Source: object_read:doc_180_005
- Sub-processorsonly with the prior written approval of the Controlleronly with the prior written approval of the Controller · Source: object_read:doc_180_005
- Security measuresEncryption of data in transit and at restEncryption of data in transit and at rest · Source: object_read:doc_180_005
- Auditat any time and at reasonable intervalsat any time and at reasonable intervals · Source: object_read:doc_180_005
- Return or deletionat the Controller's written request, delete all personal data processed on behalf of the Controller, unless applicable law requires retentionat the Controller's written request, delete all personal data processed on behalf of the Controller, unless applicable law requires retention · Source: object_read:doc_180_005
- Governing lawlaws of England and WalesSource: object_read:doc_180_005
The document
Body
Leiekant Accountants - Data Processing Agreement
Executed
1. Parties and Roles
- BB-Demo Limited ("Processor")
- Leiekant Accountants ("Customer" or "Controller")
2. Scope
This Data Processing Agreement supplements the Master Services Agreement and governs the processing of personal data by the Processor on behalf of the Controller.
3. Data Processing
3.1 Subject Matter
The Processor shall process personal data only for the duration of the Master Services Agreement and for such further period as required by applicable law.
3.2 Nature and Purpose
The Processor shall process personal data only as necessary to provide the contracted services and in accordance with the Controller's documented instructions.
3.3 Categories of Data
The Processor shall process such categories of personal data as the Controller instructs, including contact information, communications history and transaction records.
4. Processor Obligations
4.1 Confidentiality
The Processor shall ensure that any personnel authorised to process personal data have committed to confidentiality.
4.2 Security
Read the whole document (2,514 characters)
The Processor shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit and at rest
- Access controls and authentication
- Regular security reviews
- Incident response procedures
4.3 Sub-processors
The Processor shall use sub-processors only with the prior written approval of the Controller and shall ensure they are bound by equivalent data protection obligations.
5. Controller Rights
The Controller may, at any time and at reasonable intervals, audit the Processor's compliance with this Agreement.
6. Data Subject Rights
The Processor shall assist the Controller in responding to any requests from data subjects exercising their rights under data protection law.
7. Return or Deletion of Data
Upon termination of the Master Services Agreement, the Processor shall, at the Controller's written request, delete all personal data processed on behalf of the Controller, unless applicable law requires retention.
8. Governing Law
This Agreement shall be governed by the laws of England and Wales.
Signatures
For BB-Demo Limited:
Matteo Ricci Account Executive BB-Demo Limited
Date: 20 February 2026
For Leiekant Accountants:
_________________________ Authorised Signatory Leiekant Accountants
Date: 20 February 2026