Website terms of use

1.1 These terms set out how you may use boxtick.uk (the website). Please read them before you use the website or send us an enquiry.

1.2 By using the website, you agree to these terms. If you do not agree, please do not use the website.

1.3 These terms cover the website only. If your business signs up to BoxTick™, takes part in a pilot or becomes a partner, a separate written agreement will apply to that service. If that agreement conflicts with these terms, the agreement takes priority.

1.4 You may want to print or save a copy of these terms for future reference.

2.1 BoxTick™ is a trading name of The Programme Group Limited, a company registered in England and Wales under company number 13511776, with its registered office at International House, 10 Churchill Way, Cardiff, CF10 2HE, Wales. Our VAT number is 386883725. In these terms, we, us and our mean The Programme Group Limited, trading as The Programme Group and BoxTick.

2.2 We are registered with the Information Commissioner's Office under registration number ZC275135.

2.3 You can contact us by email at hello@boxtick.uk.

3.1 The website, and the services described on it, are for businesses and other organisations only. They are not offered to consumers.

3.2 When you send us an enquiry, you confirm that you are acting for a business or organisation, and that you are authorised to make the enquiry on its behalf.

3.3 The website is intended for organisations based in the United Kingdom. We do not claim that its content is appropriate for, or that our services are available in, other countries.

4.1 BoxTick™ provides compliance support, tools and evidence. We are not a law firm, and nothing on the website is legal advice.

4.2 The content on the website is general information only. Which laws and standards apply to a business, and what it needs to do to meet them, depends on its own circumstances.

4.3 You should not rely on the website alone when making decisions about your organisation's legal or regulatory obligations. Where you need advice on your own circumstances, you should take it from a suitably qualified professional.

4.4 Your organisation remains responsible for deciding what action to take and for meeting its own legal and regulatory obligations.

5.1 You can ask us for a free scan of a business website through the website. When you submit a request, you confirm that:

1. you are authorised to act for the organisation that owns or operates the web address you submit; and
2. the information you give us is accurate.

5.2 A scan looks only at information that is publicly available on, or about, the web address you submit. We do not log in to any system, test its security, try to bypass any controls or access anything that is not publicly available.

5.3 Scan results are indicative only. They may be incomplete or out of date, and they are based only on what is publicly visible. A scan is not an audit, a legal opinion, a security test or a certification of any kind, including Cyber Essentials.

5.4 Until our scanning service is live, a scan request is treated as an expression of interest, and we will contact you about it.

5.5 We may decline or stop any scan request at our discretion, including where we cannot confirm that it has been made with the authority of the organisation concerned.

6.1 We aim to keep the information on the website accurate and up to date, but we do not promise that it is complete, accurate or current at all times. Laws, guidance and standards change, and we may update the website without notice.

6.2 Prices shown on the website are for guidance only and exclude VAT unless we say otherwise. They are not an offer that you can accept.

6.3 A contract for any BoxTick™ service is formed only when an order form or written agreement has been signed or accepted by both parties. That agreement will set out the price, the services and the terms that apply.

7.1 Registering interest, requesting a scan, or making a founding client, pilot or partner enquiry does not create any obligation on you or us to enter into an agreement.

7.2 Any founding client, pilot or partner arrangement will be subject to a separate written agreement.

7.3 We will use the information you give us when you make an enquiry as described in our privacy notice.

8.1 We, or our licensors, own all intellectual property rights in the website and its content, including text, designs, graphics, software, the BoxTick™ name and the BoxTick logo.

8.2 You may view the website and print or download extracts for your organisation's own internal use when considering our services.

8.3 You must not copy, reproduce, republish, sell or use any part of the website's content for commercial purposes, or create competing materials from it, without our written permission.

8.4 BoxTick™, The Programme Group and TPG names and logos are our trade marks. You must not use them without our written permission.

9.1 You must use the website lawfully and in line with these terms. You must not:

1. give false or misleading information, or make an enquiry or scan request on behalf of an organisation you are not authorised to represent;
2. introduce viruses, malware or any other harmful material;
3. try to gain unauthorised access to the website, its servers or any connected system or database;
4. carry out any security testing, scanning or load testing of the website, except as allowed under clause 10;
5. use automated tools to scrape, copy or harvest content or data from the website;
6. disrupt, overload or impair the website or interfere with anyone else's use of it; or
7. use the website to send unsolicited marketing.

9.2 We may suspend or restrict access to the website, or decline an enquiry, if we reasonably believe these terms have been broken. We may also report any breach to the relevant authorities.

10.1 If you believe you have found a security vulnerability in the website, please tell us straight away by emailing hello@boxtick.uk with the subject line "Security". Please include enough detail for us to reproduce the issue.

10.2 When looking into and reporting an issue, please:

1. only do what is needed to show the issue exists;
2. do not access, change or delete data that is not yours, or keep any data you come across;
3. do not disrupt the website or our services; and
4. give us a reasonable time to fix the issue before telling anyone else about it.

10.3 We will acknowledge your report and keep you informed. We will not take legal action against anyone who reports an issue in good faith and in line with this clause.

11.1 The website includes links to other websites, such as the Information Commissioner's Office and our service providers. These links are for information only. We have no control over those websites and are not responsible for their content, availability or privacy practices.

11.2 You may link to our home page, as long as you do so fairly and lawfully and do not suggest any association with, approval of or endorsement by us where none exists. We may withdraw this permission at any time.

12.1 We may update, suspend or withdraw all or part of the website at any time, for business or operational reasons. We do not promise that the website will always be available or free from errors.

12.2 We may change these terms from time to time. The date at the top of this page shows when they were last updated. Please check this page each time you use the website.

13.1 Nothing in these terms limits or excludes our liability for:

1. death or personal injury caused by our negligence;
2. fraud or fraudulent misrepresentation; or
3. any other liability that cannot be limited or excluded by law.

13.2 The website is provided free of charge and on an "as is" basis. To the extent the law allows, we exclude all conditions, warranties and other terms that might otherwise be implied into these terms about the website or its content.

13.3 Subject to clause 13.1, we will not be liable to you, whether in contract, tort (including negligence), breach of statutory duty or otherwise, for any of the following arising from your use of, or inability to use, the website or any content on it, including any free scan results:

1. loss of profits, sales, business or revenue;
2. business interruption;
3. loss of anticipated savings;
4. loss or corruption of data;
5. loss of business opportunity, goodwill or reputation;
6. any fine, penalty or regulatory action against your organisation; or
7. any indirect or consequential loss or damage.

13.4 Subject to clause 13.1, our total liability to you for all claims arising from your use of the website, including any free scan, is limited to £100.

13.5 We are not responsible for viruses or other harmful material that may affect your devices or data because of your use of the website. You should use your own virus protection.

13.6 If your organisation uses a paid BoxTick™ service, our liability for that service is set out in the agreement for that service, not in these terms.

14.1 We use personal information you give us through the website as described in our privacy notice.

14.2 Our cookie notice explains the cookies used on the website. We do not currently use advertising, social media or analytics cookies.

14.3 If you have a concern about how we handle personal information, please follow our complaints procedure.

14.4 If you have any other complaint about the website, please email hello@boxtick.uk and we will respond as soon as we reasonably can.

15.1 These terms, and any dispute or claim arising out of or in connection with them or the website (including non-contractual disputes or claims), are governed by the law of England and Wales.

15.2 The courts of England and Wales have exclusive jurisdiction over any such dispute or claim.

15.3 If any part of these terms is found to be unenforceable, the rest of the terms will remain in force.

15.4 If we do not enforce any of these terms straight away, we can still enforce them later.