Terms of Service

1. Introduction

These Terms of Service govern the provision of managed cyber security services by Complete Cyber Security, a trading name of Fresh Mango Technologies Limited, to businesses and organisations (“Client”, “you”) across the United Kingdom, the British Virgin Islands (BVI) and the United States of America. By engaging our services, you agree to be bound by these terms.

2. Services

We provide managed cyber security services including, but not limited to:

• Cyber Essentials certification and compliance support
• Endpoint detection and response (EDR / MDR)
• Email security and phishing protection
• Cyber awareness training and phishing simulation
• Penetration testing and vulnerability management
• Cyber security assessments and risk reviews
• Incident response and 24/7 SOC monitoring

The specific scope, deliverables and service levels for each engagement are set out in a separate Service Agreement or Statement of Work agreed between the parties.

3. Service agreements

All services are provided under a written Service Agreement that specifies the scope, fees, term, service levels and responsibilities of each party. These Terms of Service apply in addition to, and form part of, each Service Agreement. In the event of any conflict, the Service Agreement takes precedence.

4. Client responsibilities

The Client agrees to:

• Provide accurate and complete information about their IT environment and security requirements
• Grant necessary access to systems, networks and personnel to enable delivery of services
• Maintain appropriate backups of their data before any security testing or remediation work
• Promptly notify us of any security incidents, breaches or concerns
• Use our services only for lawful purposes and in compliance with applicable regulations
• Pay all fees in accordance with the agreed payment terms

5. Fees and payment

Fees for our services are set out in the Service Agreement. Unless otherwise stated, all fees are payable monthly in advance by direct debit or bank transfer. We reserve the right to suspend services where fees remain unpaid for more than 14 days after the due date. All quoted fees exclude applicable VAT or local sales tax unless stated otherwise.

6. Confidentiality

Both parties agree to keep confidential all proprietary and sensitive information disclosed during the engagement. We treat all Client data, system configurations and security findings as strictly confidential and will not disclose such information to third parties without consent, except where required by law or to fulfil our service obligations (e.g. with accredited sub-processors under appropriate agreements).

7. Data protection

We process personal data in accordance with our Privacy Policy and applicable data protection laws. Where we act as a data processor on behalf of the Client, we will enter into a Data Processing Agreement that complies with UK GDPR and applicable international standards.

8. Limitation of liability

Nothing in these terms limits our liability for death or personal injury caused by our negligence, fraud or fraudulent misrepresentation, or any other liability that cannot be excluded by law. Subject to this, our total liability arising out of or in connection with our services shall not exceed the total fees paid by the Client in the 12 months preceding the claim.

We are not liable for any indirect, consequential or special losses, including loss of profits, revenue, data or business opportunities, arising from the use of our services or any security incident.

9. Intellectual property

All reports, documentation, methodologies and tools developed by us remain our intellectual property. The Client is granted a non-exclusive, non-transferable licence to use deliverables solely for their internal business purposes. The Client retains ownership of their data and pre-existing intellectual property.

10. Term and termination

The initial term and renewal provisions are set out in the Service Agreement. Either party may terminate for material breach if the breach is not remedied within 30 days of written notice. Upon termination, the Client remains liable for all fees incurred up to the termination date. We will return or securely destroy Client data in accordance with our data retention policy.

11. Governing law

These terms and any disputes arising from them are governed by the laws of England & Wales, and the parties submit to the exclusive jurisdiction of the English courts. For Clients based in the BVI or USA, alternative governing law and jurisdiction may be specified in the Service Agreement where appropriate.

12. Changes to these terms

We may update these Terms of Service from time to time. The current version will always be available on this page. Material changes will be notified to active Clients at least 30 days before taking effect.

13. Contact

Questions about these Terms of Service should be directed to hello@completecyber.co.uk or by post at: Complete Cyber Security, 6 Brewery Close, Barker Business Park, Melmerby, Ripon, North Yorkshire, HG4 5NL, United Kingdom.