Terms and Conditions

16. In addition to the Fees, we can recover from you a) reasonable incidental expenses including, but not limited to, travelling expenses, hotel costs, subsistence and any associated expenses, if agreed in writing in advance.
17. b) the cost of services provided by third parties and required by us for the performance of the Services, and c) the cost of any materials required for the provision of the Services.
18. SATT, GDPR and MPAS do not incur incidental expenses (a) third party expenses (b) or additional materials expenses (c).
19. You must pay us for any additional services provided by us that are not specified in the quotation in accordance with our then current, applicable daily rate in effect at the time of performance or such other rate as may be agreed in writing between us. The provisions of clause 14 also apply to these additional services.

Cancellation and amendment

18. We can withdraw, cancel or amend a quotation if it has not been accepted by you, or if the Services have not started, within a period of 14 days from the date of the quotation, (unless the quotation has been withdrawn).
19. Either we or you can cancel an order for any reason prior to your acceptance (or rejection) of the quotation or as per clause 10.
20. If you want to amend any details of the Services, you must tell us in writing as soon as possible. We will use reasonable endeavours to make any required changes and additional costs will be included in the Fees and invoiced to you.
21. If, due to circumstances beyond our control, including those set out in clause 42 below (Circumstances beyond a party’s control), we have to make any change in the Services or how they are provided, we will notify you immediately. We will use reasonable endeavours to keep any such changes to a minimum.

Payment

22. We will invoice you for payment of the Fees in accordance with the terms of payment we have agreed on receipt of a Purchase Order or Purchase Confirmation.
23. Infosec Cloud standard payment terms are that you must pay the Fees due within 21 days of the date of our invoice or otherwise in accordance with any credit terms agreed between us.
24. Without limiting any other right or remedy we have for statutory interest, if you do not pay within the period set out above, we will charge you interest at the rate of 2% per annum above the base lending rate of the Bank of England from time to time on the amount outstanding until payment is received in full.
25. All payments due under these Terms and Conditions must be made in full without any deduction or withholding except as required by law and neither of us can assert any credit, set- off or counterclaim against the other in order to justify withholding payment of any such amount in whole or in part.
26. If you do not pay within the period set out above, we can suspend any further provision of the Services and cancel any future services which have been ordered by, or otherwise arranged with, you.
27. Receipts for payment will be issued by us only at your request.
28. All payments must be made in British Pounds unless otherwise agreed in writing between us.

Renewal

29. Subject to clause 10, the Supply of the Services detailed shall commence on the Commencement Date and shall continue for the Minimum Term and thereafter the Services Contract shall automatically extend for the Extended Term at the end of the Minimum Term and at the end of each Extended Term. A party may give notice in writing to the other party no later than 90 days before the end of the Minimum Term or the relevant Extended Term, to terminate the Services Contract at the end of the Minimum Term or the relevant Extended Term, as the case may be.

Sub-Contracting and assignment

30. Subject to clause 54, we can at any time assign, transfer, charge, subcontract or deal in any other manner with all or any of our rights under these Terms and Conditions and can subcontract or delegate in any manner any or all of our obligations to any third party.
31. In regards the service provision of SATT, GDPR and MPAS, this condition is void as it is not required.
32. You must not, without our prior written consent, assign, transfer, charge, subcontract or deal in any other manner with all or any of your rights or obligations under these Terms and Conditions.
33. In regards the service provision of SATT, GDPR and MPAS, this condition is void as it is not required.

Termination

32. We can terminate the provision of the Services immediately if you:
33. commit a material breach of your obligations under these Terms and Conditions; or
34. fail to make pay any amount due under the Contract on the due date for payment;
35. Either party can terminate the provision of the Services immediately if they:
36. are or become or, in our reasonable opinion, are about to become, the subject of a bankruptcy order or take advantage of any other statutory provision for the relief of insolvent debtor; or
37. enter into a voluntary arrangement under Part 1 of the Insolvency Act 1986, or any other scheme or arrangement is made with its creditors; or
38. convene any meeting of a creditors, enter into voluntary or compulsory liquidation, have a receiver, manager, administrator or administrative receiver appointed in respect of the assets or undertakings or any part of them, any documents are filed with the court for the appointment of an administrator in respect of the individual or organisation, notice of intention to appoint an administrator is given by the organisation or any directors or by a qualifying floating charge holder (as defined in para. 14 of Schedule B1 of the Insolvency Act 1986), a resolution is passed, or petition presented to any court for the winding up or for the granting of an administration order in respect of the individual or organisation, or  any proceedings are commenced relating to the insolvency or possible insolvency.

Intellectual property

34. We reserve all copyright and any other intellectual property rights which may subsist in any goods supplied in connection with the provision of the Services. We reserve the right to take any appropriate action to restrain or prevent the infringement of such intellectual property rights.
35. All services, and content thereof, provided, if not tampered with, are the responsibility of Infosec Cloud and therefore solely our liability responsibility in the event of a 3rd party claim.

Liability and indemnity

36. Our liability under these Terms and Conditions, and in breach of statutory duty, and in tort or misrepresentation or otherwise, shall be limited as set out in this clause.
37. The total amount of our liability is limited to the total amount of Fees payable by you under the Contract.
38. We are not liable (whether caused by our employees, agents or otherwise) in connection with our provision of the Services or the performance of any of our other obligations under these Terms and Conditions or the quotation for:
39. any indirect, special or consequential loss, damage, costs, or expenses or;
40. any loss of profits; loss of anticipated profits; loss of business; loss of data; loss of reputation or goodwill; business interruption; or, other third party claims; or
41. any failure to perform any of our obligations if such delay or failure is due to any cause beyond our reasonable control; or
42. any losses caused directly or indirectly by any failure or your breach in relation to your obligations; or
43. any losses arising directly or indirectly from the choice of Services and how they will meet your requirements or your use of the Services or any goods supplied in connection with the Services.
44. You must indemnify us against all damages, costs, claims and expenses suffered by us arising from any loss or damage to any equipment (including that belonging to third parties) caused by you or your agents or employees up to the amount of Fees paid by you in the contract year in which the right of indemnification accrues.
45. In regards the service provision of SATT, GDPR and MPAS, this condition is void as equipment is not required.
46. Nothing in these Terms and Conditions shall limit or exclude our liability for death or personal injury caused by our negligence, or for any fraudulent misrepresentation, or for any other matters for which it would be unlawful to exclude or limit liability.

Circumstances beyond a party’s control

41. Neither of is liable for any failure or delay in performing our obligations where such failure or delay results from any cause that is beyond the reasonable control of that party. Such causes include, but are not limited to: power failure, Internet Service Provider failure, industrial action, civil unrest, fire, flood, storms, earthquakes, acts of terrorism, acts of war, governmental action or any other event that is beyond the control of the party in question. If the delay continues for a period of 90 days, either of us may terminate or cancel the Services to be carried out under these Terms and Conditions.

Pricing

42. We shall automatically apply an annual increase in the Fees based on the Consumer Price Index (CPI) plus 3.9%. We use the CPI figure published by the Office for National Statistics (www.ons.gov.uk) in January and will apply the change in April each year. In the event that the rate of CPI is negative, we will only increase the Fees by 3.9% in the relevant year. For example, a previous monthly charge of £100 + VAT would become £109.30 + VAT assuming a January CPI of 5.4%.
43. Subject to applicable regulations, we shall increase our Fees for any Services (including without limitation by revising any tariff) as a result of any increase in charges made to us by third party providers by a sum equal to any such increase. In such circumstances you shall not have the right to cancel the Contract.
44. Where we propose to increase our Fees for any Services (including by revising without limitation any Tariff) as a consequence of a regulatory change and that the increase is no greater than the additional cost to us caused by the regulatory change, we will give you written notice of any such increase not less than 30 days before the proposed date of the increase. In such circumstances you shall not have the right to cancel the Contract.

Data Protection

45. When supplying the Services to the Customer, the Service Provider may gain access to and/or acquire the ability to transfer, store or process personal data of employees of the Customer.
46. The parties agree that where such processing of personal data takes place, the Customer shall be the ‘data controller’ and the Service Provider shall be the ‘data processor’ as defined in the General Data Protection Regulation (GDPR) as may be amended, extended and/or re- enacted from time to time.
47. In regards the service provision of SATT, GDPR and MPAS, Infosec Cloud only require the e-mail addresses of the Customer. These are used to communicate our training, education and/or compliance services and data is stored in our Tier 3 Hosting Centre in the UK.
48. For the avoidance of doubt, ‘Personal Data’, ‘Processing’, ‘Data Controller’, ‘Data Processor’ and ‘Data Subject’ shall have the same meaning as in the GDPR.
49. The Service Provider shall only Process Personal Data to the extent reasonably required to enable it to supply the Services as mentioned in these terms and conditions or as requested by and agreed with the Customer, shall not retain any Personal Data longer than necessary for the Processing and refrain from Processing any Personal Data for its own or for any third party’s purposes.
50. The Service Provider shall not disclose Personal Data to any third parties other than employees, directors, agents, sub-contractors or advisors on a strict need-to-know basis and only under the same (or more extensive) conditions as set out in these terms and conditions or to the extent required by applicable legislation and/or regulations.
51. Prior to sub-contracting the processing of any personal data, the Service Provider shall seek approval from the Customer.
52. The Service Provider shall implement and maintain technical and organisational security measures as are required to protect Personal Data Processed by the Service Provider on behalf of the Customer.
53. Further information about the Service Provider’s approach to data protection are specified in its Data Protection Policy, which can be found https://focusgroup.co.uk/infosec-cloud/. For any enquiries or complaints regarding data privacy, you can contact our Data Protection Officer at the following e-mail address: dpo@focusgroup.co.uk.

Communications

53. All notices under these Terms and Conditions must be in writing and signed by, or on behalf of, the party giving notice (or a duly authorised officer of that party).
54. Notices shall be deemed to have been duly given:
55. when delivered, if delivered by courier or other messenger (including registered mail) during the normal business hours of the recipient;
56. when sent, if transmitted by fax or email and a successful transmission report or return receipt is generated;
57. on the fifth business day following mailing, if mailed by national ordinary mail; or
58. on the tenth business day following mailing, if mailed by airmail.
59. All notices under these Terms and Conditions must be addressed to the most recent address, email address or fax number notified to the other party.

No waiver

56. No delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy nor stop further exercise of any other right, or remedy.

Severance

57. If one or more of these Terms and Conditions is found to be unlawful, invalid or otherwise unenforceable, that / those provisions will be deemed severed from the remainder of these Terms and Conditions (which will remain valid and enforceable).

Compliance with Laws

58. The parties agree that during their dealings they will comply with all relevant laws and regulations, including the Modern Slavery Act 2015 and the Bribery Act 2010.

Law and jurisdiction

59. This Agreement shall be governed by and interpreted according to the law of England and Wales and all disputes arising under the Agreement (including non-contractual disputes or claims) shall be subject to the exclusive jurisdiction of the English and Welsh courts.