Terms of service

1. Who we are

These terms are between you and [legal name of the business], trading as Brightlock Cyber ("we", "us"). You can contact us at info@brightlockcyber.com.

By using our website, free tools or paid products, you agree to these terms. If you're using them for a business or charity, you confirm you're allowed to agree on its behalf.

2. What we provide

Brightlock Cyber provides cyber security and data protection readiness guidance for UK businesses and charities. This includes free tools, the Cyber Readiness Report, add-ons such as the policy pack and tender pack, the Stay ready subscription, the PHP code check, and services such as fix sessions and certification checks.

Each product page describes what's included. We may improve our products over time, but we won't take away something you've already paid for.

3. What we don't provide

• Certification. We are not a certification body. Cyber Essentials certification is issued only by IASME-licensed certification bodies, and we can't guarantee you'll pass.
• A security audit. Our assessments are based on your answers. We don't test your systems. The PHP code check is an automated check of code you add for common risky patterns. It isn't a penetration test or a full code review, and it can miss problems or flag safe code. Fixed files it produces are suggestions: keep a backup and test them before using them on a live site.
• Legal advice. Our policies, templates and tender answers are templates. Check they fit your business before using them, and take legal advice if you need it.

4. Your answers

Your report is only as accurate as the answers you give. Please answer honestly and for the whole business. You're responsible for any answers you give to customers, certification bodies or buyers, including answers based on our tender pack. Only use statements that are true for your business.

Your assessment answers are saved in your own browser. If you clear your browser data or change device, they may be lost.

5. Prices and payment

Prices are shown on our website in pounds sterling. Payments are taken securely through our website provider's checkout. We'll tell you before you pay if VAT applies.

• One-off products, such as the Readiness Report, policy pack and tender pack, are paid once and stay available to you.
• Stay ready is billed monthly or yearly, depending on the option you choose, until you cancel. The yearly option costs the same as 10 months. We'll remind you by email before a yearly plan renews.
• The PHP code check is billed monthly until you cancel.
• Services, such as fix sessions and certification checks, are confirmed and paid for before they take place.

6. Cancelling and refunds

Stay ready and the PHP code check: cancel at any time by contacting us. You'll keep access until the end of the month or year you've paid for, and won't be charged again.

Digital products: if a report or add-on doesn't work as described, tell us within 14 days and we'll fix it or refund you.

Services: you can rearrange a fix session or cancel for a full refund up to 24 hours before it starts.

If you're buying as a consumer rather than for a business, you also have your rights under UK consumer law, and nothing in these terms affects them.

7. Using our content

Your report, policies and tender answers are for use by your own business. You can copy, edit and share them within your business and with your advisers, IT provider, customers and certification body. You can't resell them or use our tools to provide a service to others without a partner agreement with us.

The Brightlock Cyber name, logo, score and website content belong to us. The score badge may only be displayed with your current, self-assessed score.

8. Our responsibility to you

We provide our products with reasonable care and skill. Because our products are guidance based on your answers, we're not responsible for security incidents, failed certification, lost contracts or fines.

Our total liability to you for any claim is limited to the amount you paid us in the 12 months before the claim. We don't exclude liability where the law doesn't allow it, including for death or personal injury caused by negligence, or for fraud.

9. Fair use of the website

Please don't misuse our website, for example by trying to get around payment, copy our tools, or disrupt the service. We may suspend access if you do.

10. Privacy

Our privacy policy explains how we use personal data.

11. Changes to these terms

We may update these terms. The date at the top shows when they last changed. If a change significantly affects a subscription you've paid for, we'll tell you in advance.

12. Law

These terms are governed by the law of England and Wales, and the courts of England and Wales have jurisdiction. If you live in Scotland or Northern Ireland, you can also bring a claim in your local courts.