Terms and Conditions UK

Terms and Conditions

Dudobi Limited (“Dudobi”) provides a range of IT services, including managed services and professional services for cloud-based web and software applications (“Cloud Services”). In consideration of the Charges (as defined below), Dudobi agrees to provide the Cloud Services to you on the terms and conditions set out below.

MASTER SERVICES AGREEMENT

  1. SCOPE OF THE AGREEMENT
    1. This Agreement (including the Schedules below) sets out the entire agreement of the parties in relation to the provision of Cloud Services by Dudobi to you.
  2. YOUR RESPONSIBILITIES AND WARRANTIES
    1. The Client may be an incorporated entity (such as a company or close corporation), trust, partnership, or individual.
    2. By entering into this Agreement, the Client warrants that;
      1. they are legally authorised to do so and indemnify Dudobi against any loss or damage that we may sustain resulting from the person’s lack of authority; and
      2. all the information supplied to Dudobi at any time relating to the entity, trust, partnership, association or other person who they represent is true, accurate, and complete.
    3. Dudobi reserves the right to treat all misrepresentations by you or the person representing you as fraud and the person indemnifies us against any loss or damage that we may sustain resulting from the person’s lack of authority.
    4. You, the Client, shall provide Client Content to Dudobi for use in connection with the performance of Dudobi’s obligations under this Agreement (“Permitted Purpose”).
    5. It shall be your responsibility to maintain your own equipment, data and communication lines required to access your web application, website or Client Content.
    6. You acknowledge that Dudobi’s ability to perform its obligations under this Agreement is, where relevant, dependent upon your reasonable cooperation with Dudobi as well as the accuracy and completeness of any information and data which you provide to Dudobi. Therefore, you shall:
      1. where given reasonable notification in advance, provide Dudobi with access to, and use of, all information, data, documentation and computer time reasonably deemed necessary by Dudobi; and
      2. appoint someone who shall provide professional and prompt liaison with Dudobi and have the necessary expertise and authority to act on your behalf.
    7. You will obtain all necessary releases, licences, permits or other authorisations necessary for the permitted use of the Client Content by Dudobi as provided for in this Agreement. You shall also comply with all relevant legislation in relation to your use of the Services, including but not limited to data protection legislation.
    8. All internet use is susceptible to breaches of security and you must take reasonable security precautions in light of your business and the services you use. Dudobi will provide security as part of the Cloud Services where agreed, but you are fully responsible for security other than that.
    9. You must comply with the Acceptable Use Policy and Dudobi reserves the right to suspend services where a breach of such policy occurs. You agree to reimburse Dudobi for its costs and expenses arising from any breach of the Acceptable Use Policy, or a breach of a third party’s rights by the Client Content, data or equipment.
  3. DUDOBI’S RESPONSIBILITIES AND WARRANTIES
    1. Dudobi represents and warrants that;
      1. in performing its obligations under this Agreement, it shall use good quality materials, and shall provide services in a professional, workmanlike and timely manner, in accordance with generally accepted IT industry standards and with all reasonable care, skill and diligence,
      2. it has the facilities, infrastructure, capacity and capability to provide the Services, and
      3. it will provide the Services in accordance with all applicable laws and regulations.
    2. Despite this warranty, the Services are provided “as is” and “as available”. No warranty of any kind is given, whether express or implied, including warranties of merchantability, title, or non-infringement, except where such a warranty is specifically required by law.
    3. Dudobi reserves the right, at its own expense, to change the location or configuration of the Cloud Services; provided, however, that Dudobi shall not arbitrarily or discriminatorily require such changes. Dudobi and you shall work in good faith to minimise any disruption to your services that may be caused by such changes in location or configuration of the Cloud Services.
  4. RELATIONSHIP BETWEEN PARTIES
    1. Nothing in this agreement shall be construed as;
      1. constituting a temporary employment service,
      2. creating a partnership between the Parties and neither Party shall have any authority to incur any liability on behalf of the other or to pledge the credit of the other party.
    2. The Parties shall at all times owe each other a duty of good faith.
    3. The relationship between the Parties will not be an exclusive one and both Parties will be free to enter into agreements similar to this one with third parties.
  5. CHARGES
    1. In consideration of the supply of the Cloud Services, in accordance with the terms of this Agreement and as outlined in a signed service order, Dudobi will invoice in advance Charges for all Services except for Charges that are dependent upon usage of Services, which are invoiced in arrears.
    2. Dudobi reserves the right to charge you additional fees for any ancillary services provided to you, pursuant to clause 7.1 above.
    3. You shall pay the Charges to Dudobi within thirty (30) days from the date of an invoice. Payment shall only be deemed received by Dudobi upon receipt of cleared funds.
    4. The Charges are stated exclusive of Value Added Tax and you shall pay Value Added Tax on the Charges at the rate and in the manner prescribed by law from time to time.
    5. If you reasonably dispute any portion of an invoice, you must pay the undisputed portion of the invoice and notify Dudobi in writing of the disputed amount within thirty (30) days after delivery of the relevant invoice. You waive the right to dispute any Charges not disputed within thirty (30) days after delivery of the relevant invoice.
    6. If you fail to pay any sum when due, Dudobi shall be entitled to bear interest at the maximum rate permissible by law. Dudobi reserves the right to send overdue accounts to a collection agency.
    7. The Charges shall be reviewed no more than once annually and shall be notified to you in writing 30 days in advance of their implementation.
    8. Where applicable, we will give you a VAT invoice in electronic format. You agree that by submitting an application form to us when making an application for Services, the application is seen as your confirmation to accept electronic invoices for claiming input tax.
  6. OWNERSHIP OF INTELLECTUAL PROPERTY RIGHTS
    1. Nothing in this Agreement shall grant to either party any right, title or interest in or to any Intellectual Property Rights of the other party.
    2. All Intellectual Property Rights created and/or developed by Dudobi pursuant to the terms of this Agreement (other than those Intellectual Property Rights relating solely to the Client Content) is (and shall remain) the sole property of Dudobi (the “Dudobi IPR”).
    3. You shall fully indemnify Dudobi against all reasonable claims, demands, actions, losses and damages (excluding indirect or consequential damages) costs, charges and expenses (including, but not limited to, reasonable legal costs and disbursements) arising from or incurred by reason of any infringement or alleged infringement by the Client Content (when used for the Permitted Purpose) of any third party Intellectual Property Rights.
  7. CLIENT CONTENT
    1. You shall retain all rights to, and ownership of, the Client Content and any Client IPR.
    2. For the Term of this Agreement, you hereby grant to Dudobi a non-exclusive, worldwide, royalty-free licence:
      1. to make archive or backup copies of the Client Content and/or the Client IPR only as necessary for the Permitted Purpose.
      2. to digitise, convert, install, upload, modify, select, order, arrange, compile, combine and otherwise use any or all of the Client Content and/or the Client IPR, for the sole purpose of developing any Applications for you;
    3. Except as permitted in accordance with this Agreement, Dudobi shall not use the Client Content or the Client IPR without your prior written approval.
    4. Dudobi has no knowledge of, nor interest in, Client content hosted on your behalf and does not in any way contribute to or approve the content. Nothing that we do in the performance of our obligations under the Service will be seen as an assumption of responsibility or liability by us as a result of any content.
  8. THIRD-PARTY PRODUCTS
    1. If Dudobi and you agree that Dudobi will use any third-party software to provide the Cloud Services, then you agree to the licence terms for such software and you further agree that if you resell the services, you will require your customers to also agree to those terms.
    2. You agree that the use of third-party products is in accordance with the product’s standard terms and is at your sole risk and Dudobi is in no way responsible for the product’s performance, features or failures.
  9. DATA PROTECTION
    1. All Client Data allocated to you is personal to you and you will be liable for any loss or damage you or third parties have suffered because of your actions or the actions of a person to whom you have disclosed your Client Data.
    2. If any security violations are reasonably believed to have occurred in connection with your account, we will investigate and, if necessary, change the relevant Client Data, including access codes and passwords, and notify you immediately.
    3. We reserve the right to take any action we find necessary to preserve the security and reliable operation of our infrastructure. You may not do anything (or permit anything to be done) that will compromise our security.
    4. Dudobi agrees and undertakes to you in relation to the processing of Personal Data as follows:
      1. not to process any Personal Data which is disclosed to it, except in accordance with your instructions;
      2. in relation to the use of Personal Data, to hold the Personal Data in strict confidence; not to disclose the Personal Data to any third parties; and not to use any Personal Data for any purpose other than as permitted by you. In particular, Dudobi is not to make any commercial use of the Personal Data whether for itself or a third party;
      3. to ensure that appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of Personal Data and against accidental loss or destruction of or damage to Personal Data;
      4. to provide details, at your request, of any security measures taken in relation to the Personal Data and to procure compliance with such measures at all times;
      5. to return promptly to you, at your request, all tangible and intangible items containing Personal Data together with any copies, destroy any other documents containing Personal Data together with any copies and expunge all Personal Data from any computer, word processor or other device containing it and further confirm compliance with the above in writing to you;
    5. We have systems in place to assist our critical technical infrastructure to recover from a natural or human-induced disaster. However, we do not specify any recovery time and are not liable for any loss or damage you suffer as a result of a disaster. Nothing contained in Our Terms will be seen as a representation that any backups of data we have implemented will be successful or in any way will assist with disaster recovery.
    6. The terms of this clause 11 shall apply to all Personal Data processed by Dudobi on your behalf from time to time and will remain in effect without limit of time.
    7. Both parties warrant that they will duly observe all their obligations under the Data Protection Act 2018 which arise in connection with this Agreement.  Without prejudice to the generality of the preceding sentence, both parties hereby warrant that they will obtain, and at all times maintain, a registration under the Act in relation to the performance of their obligations under this Agreement.
  10. CONFIDENTIALITY
    1. Dudobi and/or you may, in the course of working together pursuant to this Agreement have access to or to have communicated to them certain Confidential Information belonging to the other which is proprietary and must be held in confidence.
    2. Any Confidential Information, whether contained in original or copy documents or in any other form, shall at all times remain the property of the party disclosing the Confidential Information (“the Discloser”) together with all notes, memoranda and drawings that have been made as a result of access to such Confidential Information.
    3. The party receiving Confidential Information (“the Recipient”), shall hold in confidence all Confidential Information disclosed to it by the Discloser, and no Confidential Information will be used by the Recipient for any purpose other than the Permitted Purpose without the prior written permission of the Discloser, unless such information is trivial or obviously already in its possession other than as a result of a breach of this clause; or in the public domain other than as a result of a breach of this clause.
    4. The Recipient shall take all reasonable steps to minimise the risks of unauthorised disclosure of the Confidential Information and will provide proper and secure storage for all information and any papers, drawings or other materials which relate to or are compiled from such information.
    5. The confidentiality obligations expressed in this Agreement shall continue for the Term of this Agreement and for two years thereafter.
    6. Nothing in this Clause shall be deemed or construed to prevent either party, from disclosing any Confidential Information obtained from the other party to any employee, other contractor or any other person engaged by you or Dudobi in connection with this Agreement, provided that the Discloser shall have obtained from the employee, contractor or other person a signed confidentiality undertaking on substantially the same terms as are contained in this Clause.
  11. PUBLICITY
    1. Dudobi reserves the right to make any press announcements or publicise this Agreement in any way, subject to the Client’s prior written approval of the wording of any such release.
  12. NOTICES
    1. Any notice, demand or other communication given or made under or in connection with the matters contemplated by this agreement shall be sent by electronic mail to the address, as notified by each party to the other from time to time.
    2. Any notice or communication required or permitted to be given under this Agreement will be valid and effective only if in writing.
  13. FORCE MAJEURE
    1. For the purposes of this Agreement, the expression “Force Majeure” shall mean any cause affecting the performance by a party of its obligations arising from acts, events, omissions, happenings or non-happenings beyond its reasonable control including fire, flood, civil riot, terrorism or war, delays in transportation, failure of public power supplies, failure of communication facilities, or failure or interruption of services supplied by a third party or any disaster or industrial dispute affecting a third party, for which a substitute third party is not reasonably available.
    2. If either of the parties shall become aware of circumstances of Force Majeure which give rise to or which are likely to give rise to any failure or delay on its part, it shall forthwith notify the other party and shall inform the other of the period which it is estimated that such failure or delay shall continue.
    3. Should a circumstance of Force Majeure persist for a period of greater than 30 (thirty) days, either party may by written notice to the other terminate this Agreement forthwith.
    4. Neither party shall be liable to the other for failure to perform its obligations under this Agreement, which is due to Force Majeure.
  14. WAIVER
    1. No delay, neglect or forbearance on the part of either party in enforcing against the other party any term or condition of this Agreement shall either be or be deemed to be a waiver or in any way prejudice any right of that party under this Agreement.
  15. TERM AND TERMINATION
    1. This Agreement shall subsist for one (1) year from the date agreed on the signed service order (“Effective Date”) and, unless earlier terminated either in whole or in part in accordance with the following provisions of this Clause, shall continue thereafter for successive periods of one (1) year commencing on the anniversary of the date hereof.
    2. Dudobi may, upon written notice to you, suspend or terminate the Cloud Services without liability if you fail to pay any past due balance for such Services (other than those disputed under Clause 5.8) within five (5) days after written notice from Dudobi.
    3. Either party shall have the right at any time to terminate this Agreement by giving at least sixty (60) days advance written notice. Notwithstanding this right, the Client agrees that they will still be liable for any outstanding fees up to the date of cancellation as well as any early cancellation penalties or fees charged by third parties.
    4. Either party may terminate this Agreement forthwith by notice in writing to the other party if the other party is unable to pay its debts or enters into a compulsory or voluntary liquidation, or confirms with or convenes a meeting of its creditors or has a receiver appointed over any or all of its assets or takes or suffers any similar action in consequence of a debt, or ceases or threatens to cease to carry on business, for any reason.
    5. Either party may terminate this Agreement forthwith where the other party fails to perform any of its obligations under this Agreement and has not remedied such failure within fifteen (15) days of having been notified of the failure by the other party.
    6. In the event of any termination of this Agreement, Dudobi shall forthwith return or destroy (as required by you) all the Client Content and you may be required to give up any IP addresses allocated to it, and if you do not, then Dudobi reserves the right to change or remove such IP addresses.
    7. Termination shall not prejudice or affect any right of action or remedy which shall have accrued or shall thereafter accrue to either party, and any clause intended to continue in force shall do so.
    8. If the Client is found to be in breach of this Agreement, Dudobi may, without prejudice to any other rights that they may have and without notice to the Client;
      1. claim immediate payment of all outstanding charges due to us,
      2. terminate or suspend your use of the Services,
      3. terminate our relationship with you; or
      4. list the Client with any credit bureau, Internet Service Provider list or fraud prevention service. By agreeing to the Terms & Conditions, the Client expressly consents to this.
      5. In all instances, we may retain all service fees you have already paid and recover all of our costs associated, including the legal costs of an attorney.
    9. Upon termination of this agreement, subject to due payment by the Client of all undisputed amounts due and payable to Dudobi, Dudobi shall render such reasonable assistance to the Client so as to enable the Client to migrate any Services affected by such termination to a service provider of the Client’s choice. Dudobi reserves the right to charge a fee for such work.
  16. LIMITATION OF LIABILITY
    1. Except in the case of death or personal injury caused by the negligence of Dudobi, Dudobi shall not be liable to you by reason of any representation (unless fraudulent) or any implied warranty, condition or other term, or any duty at common law, or the express terms of this Agreement, for any interruption of service or for any loss of profit or indirect, special or consequential loss, damage, costs, expenses or other claims (whether caused by the negligence of Dudobi, its agents or contractors or otherwise) and Dudobi’s maximum liability under or in connection with this Agreement, whether in contract, tort (including negligence) or other, will in no circumstances exceed the charges paid by you under this Agreement during the previous 3 months.
    2. Our liability for direct damages under clause 18.1 will be excluded where we are held liable because of your use of any third-party services or products which you accessed together with the Services, but which we did not provide to you.
    3. This clause will apply even if you advised Dudobi of the possibility of loss of damage prior to its occurrence.
  17. SEVERABILITY
    1. If any provision of this Agreement is held invalid, illegal or unenforceable for any reason by any court of competent jurisdiction, such provision shall be severed and the remainder of the provision hereof shall continue in full force and effect as if this Agreement had been valid.
  18. SUSPENSION OF SERVICES
    1. Dudobi may temporarily suspend its Service to repair, maintain, upgrade, modify, replace or improve any of its Services. Where circumstances permit, Dudobi will provide prior notice of any service suspension to the Client and endeavour to undertake such maintenance at times of low traffic volume. However, Dudobi will not be held liable for any resulting loss or damage suffered as a result of the service suspension.
    2. Dudobi is entitled to suspend the provision of the Services to the Client under the following circumstances;
      1. where the Client has not made payment of monies owing by the due date as set out in clause 7.3
      2. where such suspension is necessary to maintain security as set out in clause 11.4
    3. Suspensions under clause 20.2 can be performed immediately and without notice, provided that Dudobi shall use reasonable commercial endeavours to communicate such actions.
    4. The period of suspension shall be that which is reasonable under the particular circumstances which gave rise to the suspension.
  19. AMENDMENTS
    1. Dudobi reserves the right to make changes to Our Terms at any time. An updated version of our Terms will be posted on the Website.
    2. It is the Client’s responsibility as a diligent user to check any amended Terms posted on the Website.
  20. CLIENT INDEMNITIES
    1. The Client indemnifies Dudobi from any liability arising from civil or criminal proceedings instituted against us or for any loss or damage you, or a third party, have suffered because of any interruption or unavailability of the Services.
    2. The Client indemnifies Dudobi against all losses suffered or actions against us as a result of: the use of the Services, or any downtime, outage, degradation of the network, interruption in or unavailability of the Services. Included within the range of downtime, outage, degradation of the network, interruption, or unavailability of the Services is any of the following:
      1. software or hardware service, repairs, maintenance, upgrades, modification, alterations, replacement or relocation of premises affecting the Services,
      2. non-performance or unavailability of any of the services given by an electronic communications network or service provider, including, line failure, or in any international services or remote mail Servers,
      3. non-performance or unavailability of external communications networks to which you or our network infrastructure is connected, and
      4. repairs, maintenance, upgrades, modifications, alterations or replacement of any hardware forming part of the Services, or any faults or defects in the hardware.
      5. if Dudobi is sued for something that you have indemnified us for, you will take our place in the lawsuit or be liable to pay us back for any costs, damages and expenses including attorney’s fees on the attorney and own client scale finally awarded against us by a court or agreed to in a written settlement agreement, provided that:
      6. we notify you in writing as soon as we become aware of the indemnified claim so you can take steps to contest it;
      7. you may assume sole control of the defence of the claim or related settlement negotiations; and
      8. we will give you, at your expense, the assistance, information, and authority necessary to enable you to perform your obligations under this clause.
    3. You must pay us any amount due under clause 7.2 as soon as we demand payment. If you contest the amount, you must pay the amount into your attorney’s trust or give us security to cover the amount, until we have resolved the dispute.
  21. DISPUTE RESOLUTION
    1. Dudobi and you agree to resolve in good faith, all disputes or differences which may arise in respect of the construction or effect of this Agreement or the rights, duties and liabilities of the parties or any matter or event connected with or arising out of this Agreement. If a resolution cannot be reached within 30 days, then the matter shall be referred to CEDR (Centre for Effective Dispute Resolution).
    2. If the dispute has not been resolved by the CEDR process within 2 months, then the matter shall be referred to the courts.
  22. APPLICABLE LAW
    1. Unless otherwise agreed in writing between the parties, this Agreement shall be subject to and construed or interpreted in accordance with English law and shall be subject to the exclusive jurisdiction of the English courts to which both parties hereby submit.

SCHEDULE 1 – CLOUD SERVICES SPECIFIC TERMS

  1. CLOUD SERVICES
    1. Dudobi shall provide to you the Cloud Services and such other ancillary services (such as Professional Services) as may be agreed between Dudobi and the Client from time to time, pursuant to these Terms and Conditions and the Acceptable Use Policy, and in consideration for the additional fees, as may be advised.
    2. The Cloud Services shall include virus checking and firewall protection, but Dudobi shall not be liable to you for any unauthorised access to your website, content or data, or through the use of Dudobi’s Cloud Services unless the access was caused by Dudobi’s failure to perform its obligations under this Agreement, and such failure caused the unauthorised access.
    3. Save for routine and emergency maintenance, Dudobi shall provide the Cloud Services on a continual basis and in accordance with the Service Levels. Any break in the continuity of Cloud Services resulting from routine and emergency maintenance will be notified to you as soon as reasonably possible.
    4. If you breach any of these Terms and Conditions, Dudobi reserves the right to suspend the Services. If you wish to reconnect any Cloud Service that has been suspended or terminated by Dudobi, you may do so upon payment of a reconnection fee as set by Dudobi from time to time.
  2. SERVERS AND INFRASTRUCTURE
    1. Dudobi will manage all virtual and physical Servers, including the hardware, software, and upgrades at their sole discretion. Clients will be informed before any adjustments or upgrades and a suitable time will be agreed upon between parties.
    2. Where we supply and install any software, we will do so according to the written specifications agreed to between both Parties. For that purpose, the Client must give Dudobi all the relevant information and cooperation needed to enable us to do the installation. If there are any extra costs involved with the software, which were not present before we contracted with you, these will be for your account. If the Client requires assistance for the installation of the software, you will be charged according to our standard hourly rates.
    3. Dudobi will not be responsible for your use of any software that you may install (and any vulnerabilities including traffic generated that may result from the use of the software). You use such software at your own risk.
  3. TROUBLESHOOTING, AD HOC AND EMERGENCY WORK
    1. Any troubleshooting you request will be charged at our standard hourly rate. If the cause turns out to be due to gross negligence on our part, these charges will be waived. Our directors will decide whether or not an act of gross negligence has been committed.
    2. If you require any ad hoc (on request) work to be done outside business hours, you must specifically schedule this with us. We will only attend to emergency work outside of business hours.
    3. We may invoice you for time spent troubleshooting issues that we find are outside our control and that we cannot reasonably be expected to have prevented or solved quickly. Our directors will decide what is reasonably within or outside our control.

SCHEDULE 2 – DEFINITION OF TERMS

  1. Definition of Terms
    1. “Application(s)” or “Client Application(s)” means each software or web program, both privately and publicly accessible, or located on the Internet, comprised of computer software programs and information, and any associated or linked applications, databases and/or software.
    2. “Charges” means Dudobi’s charges as set out under “Charges” above in clause 7. All charges exclude VAT.
    3. “Client” is any person identified on the application form for Services or in any addendum.
    4. “Client Data” means any username, password or email address we give the Client as part of the Services.
    5. “Client Content” means information, text, graphics, data, databases, photographs, sounds or any other copyright work publicly available on any Application, or provided for publication on any Application either by you or any other third party commissioned by you, together with all User Generated Content and information regarding Users (such as, for example, the number of page impressions, Users’ email addresses or any other information posted by Users or detected by the System about Users).
    6. “Client IPR” means your intellectual property rights.
    7. “Confidential Information” means all information designated as such by either party in writing together with all other information which relates to the business, affairs, products, developments, trade secrets, know-how, personnel, customers and suppliers of either party or information which may reasonably be regarded as the confidential information of the disclosing party (whether or not so designated) and including any materials, trade secrets, know-how, formulas, processes, algorithms, ideas, strategies, inventions, data, network configurations, systems architecture, designs, flow charts, drawings, proprietary information, business and marketing plans, financial and operational information, and all other non-public information relating to the current and/or future operations of a party.
    8. “Cloud Services” or “Services” means those cloud, internet and related services to be provided by Dudobi.
    9. “Intellectual Property Rights” or “IPR” means patents, trademarks, service marks, database rights, design rights (whether registrable or otherwise), applications for any of the foregoing, copyright, know-how, trade or business names, domain names and other similar rights or obligations whether registrable or not in any territory or jurisdiction (including but not limited to the United Kingdom).
    10. “Service Levels” means those service levels for the provision of the Cloud Services.
    11. “Server” means the virtual or physical computer hardware, machinery, or other equipment on which the software operates.
    12. “Term” means the term of this Agreement as set out under “Term and Termination” above.
    13. “Terms and Conditions” or “Terms” means these terms and conditions together with the schedules hereto.
    14. “User(s)” means any member of the public accessing your Cloud Services and/or Applications via the Internet or by any other means.
    15. “User Generated Content” Means all such material posted by Users on any Application, including but not limited to text, graphics, photographs, logos, designs, drawings, designs, artistic and graphical works, and other information.

SCHEDULE 3 – ACCEPTABLE USE POLICY

This policy is designed to help maintain the security, integrity and performance of the Cloud Services. The following terms constitute what is considered acceptable, and if you do not agree to the terms of this Acceptable Use Policy, then you may not use Dudobi’s services.

  1. EMAIL
    1. You shall not and shall use your reasonable endeavours to ensure that your partners, agents and employees do not make use of the Cloud Services to facilitate and further the publication and distribution of spam, chain letters or bulk email.
    2. You shall not and shall use your reasonable endeavours to ensure that your partners, agents and employees do not make use of the Cloud Services to send or cause to be sent or forwarded either large numbers and/or large messages or a message irrespective of size at such frequency that it causes a “denial of service attack” such that the recipient’s email box becomes unable to cope with the volume of email traffic directed at it and/or disables the recipient’s email box.
    3. You shall not and shall use your reasonable endeavours to ensure that your partners, agents and employees do not make use of the Cloud Services to send or forward malicious messages and/or viruses to cause material annoyance and/or materially disrupt the use of the Internet by another user.
    4. You shall not and shall use your reasonable endeavours to ensure that your partners, agents and employees do not cause another Internet user to be subscribed to a mailing list or some other service without their prior express permission.
    5. You shall not and shall use your reasonable endeavours to ensure that your partners, agents and employees do not occasion the forging or creation of a header and/or address to tend to show that a message originates from a machine other than that on which it does originate or that replies to a message are directed to a machine which you neither have a right nor permission to cause replies to be directed.
  2. USE OF CLOUD SERVICES AND STORAGE SPACE
    1. You shall not and shall use your reasonable endeavours to ensure that your partners, agents and employees do not use your Cloud Services for the publication and distribution of spamming software, lists of personal or corporate email addresses (except where each and every addressee has given their permission) or any personal data except where such data is in accordance with the Data Protection Act 2018, regulations made pursuant to the Act, and subsequent legislation.
    2. You shall not and shall use your reasonable endeavours to ensure that your partners, agents and employees do not use unsolicited email messages or cause such to be used in order to draw attention to, promote or otherwise advertise services run under Dudobi’s Cloud Services.
    3. You shall not and shall use your reasonable endeavours to ensure that your partners, agents and employees do not publish, hold or cause to be held or accessed via Dudobi’s Cloud Services any material that is of an illegal nature.
  3. DOMAIN NAMES
    1. You may provide Dudobi with a registered domain name or names and/or as part of the Cloud Services Dudobi may register such domain name(s) selected by you, provided that such domain name is available for registration and does not violate any registration services’ or registrars’ policies, or any law or regulation.
    2. If Dudobi registers a domain name(s) on your behalf, you agree to promptly reimburse Dudobi for any fees paid by Dudobi for registration services with respect to the registration, renewal and maintenance of such domain name(s). In the event of any dispute or cause of action arising out of or related to your domain name used in connection with the Cloud Services, upon your request, Dudobi will attempt to register with a domain registrar an alternative domain name chosen by you. Dudobi shall forthwith, upon your request to do so, transfer to you (and take all necessary steps at your cost to facilitate such transfer of) any domain name which it has registered on your behalf.
    3. You agree to be bound by the terms of InterNIC, ICANN or other relevant domain controlling bodies then current domain name policy and/or the policies of the national DNS registration authorities to which you become subject upon registration of your domain name. The inability to use a domain name shall not entitle you to a refund by Dudobi of any fees paid with respect to the registration of such an unusable domain name.
  4. IP ADDRESSES
    1. Dudobi may provide you with an IP address or addresses as part of the Cloud Services. However, if the Cloud Services are terminated by Dudobi for any reason, then (upon Dudobi’s request and as far as permitted by law), such IP address or addresses shall revert to Dudobi, whereupon you shall cease using such IP address or addresses.
  5. BREACHES
    1. Upon giving you at least seven (7) days prior written notice, Dudobi reserves the right to withdraw its provision of Cloud Services at any time that it becomes aware of or is notified of the misuse, abuse or illegal use of the Cloud Services contrary to either the acceptable use or any statutory regulation or law governing the relationship between Dudobi and you under this Agreement.

SCHEDULE 4 – DATA PROTECTION POLICY STATEMENT

Dudobi is committed to ensuring the information security and data protection of all of its clients, suppliers and employees, in accordance with the EU General Data Protection Regulation (“GDPR”) and the UK Data Protection Act 2018.

  1. Specifically, Dudobi will ensure:
    1. That it provides and maintains a fully GDPR-compliant working environment, adhering to all guidelines required as both a data controller and data processor where applicable.
    2. It incorporates information security and data protection considerations into all aspects of its ongoing operations.
    3. That all employees are provided with the applicable processes, information and training to enable them to perform their duties without jeopardising information security and data protection.
    4. That all relevant information security and data protection information will be communicated to current and future staff members and that their responsibilities are clearly understood.
    5. That information security and data protection standards are maintained, using industry/ICO guidelines wherever applicable.
    6. That it will periodically audit internal processes to check that good information security and data protection in place.
    7. That it will periodically audit and review its Information Security Management System in accordance with its ISO27001 accreditation.

SCHEDULE 5 – DATA PROTECTION SCHEDULE

Dudobi and the Client have entered into an Agreement (“Agreement”) for the provision of Dudobi Services, in the context of which, Dudobi may process Personal Data.

The purpose of this Data Protection Exhibit Agreement (“DP Exhibit”) is to set out the data protection requirements that apply to the provision of Dudobi Services and ensure that the Client and Dudobi comply with Data Protection Laws.

This DP Exhibit is incorporated into and forms part of the Agreement and is in addition to any obligations in relation to data protection therein. In the event of a conflict between the Agreement and this DP Exhibit, the terms of this DP Exhibit shall control.

  1. DEFINITION OF TERMS
    1. “Data Controller” “Data Processor” “Data Subjects” “Personal Data” and “Personal Data Breach” shall have the meanings ascribed to them in the EU General Data Protection Regulation (Regulation 2016/679) (“GDPR”).
    2. “Data Protection Laws” means the provisions of applicable laws regulating the use and processing of data relating to persons, as may be defined in such provisions, including a) prior to 25 May 2018, the EU Data Protection Directive 95/46/EC, b) after 25 May 2018 the GDPR, c) the Electronic Communications Data Protection Directive 2002/58/EC, the Privacy and Electronic Communications (EC Directive) Regulations 2003 and d) all other applicable laws and regulations relating to the processing of personal data.
    3. “Services” means the Dudobi Services to be provided to Client under the Agreement and the applicable Services Exhibit(s).
  2. COMPLIANCE WITH DATA PROTECTION LAWS
    1. Dudobi and the Client agree that the Client is an independent Data Controller with respect to the processing of Personal Data which is necessary for the operation of the Services, and Dudobi is an independent Data Controller with respect to the processing of billing, utilisation, usage patterns/counts/statistics, traffic data and other Client account related information (e.g. name, address, email address)to the extent it is Personal Data, which is necessary for Dudobi’s performance of its obligations under the Agreement and the applicable Services Exhibit(s), or with respect to any Personal Data held for general business purposes.
    2. Dudobi and Client shall each comply at all times with its obligations under Data Protection Laws in respect of any Personal Data processed by it under the Agreement.
  3. DATA PROCESSING
    1. Dudobi acknowledges that it is a Data Processor on behalf of the Client for the purposes of providing Services and performing its related obligations (including incident resolution, support or consultancy services). The subject matter, duration and nature of the processing, the types of Personal Data and applicable Data Subjects are described in the applicable Services Exhibit(s).
    2. In so far as Dudobi processes Personal Data on behalf of the Client as a Data Processor, Dudobi will:
      1. Only process Personal Data in accordance with the Client’s documented instructions, including as set out in the Agreement and this DP Exhibit and ensure that Dudobi personnel process Personal Data only on such instructions of the Client, unless processing is required by EU or member state law to which Dudobi are subject, in which case Dudobi shall, to the extent permitted by such law, inform Client of that legal requirement before processing that Personal Data;
      2. Restrict the disclosure and processing of Personal Data to the extent necessary to provide the Services, or as otherwise permitted under the Agreement and this DP Exhibit, or by Client in writing, and only disclose Personal Data on a need-to-know basis in connection with the Services to those who have committed themselves to confidentiality, or as required by applicable law;
      3. Taking into account the state of the art, costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, implement and maintain appropriate technical and organisational measures designed to protect Personal Data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, and against all other unlawful forms of processing and ensure a level of security appropriate to the risk presented by the processing;
      4. Ensure that only those personnel who need to have access to Personal Data are granted access to it and that such access is granted only for the proper provision of the Services; and
      5. If and to the extent Dudobi retains a copy of any Personal Data, will not retain that Personal Data for longer than is necessary to perform the Services and at the Client’s option, securely destroy or return such Personal Data, except where required to retain the Personal Data by law or regulation. The parties agree that Dudobi shall not actively process such Personal Data and shall be bound by the provisions of this DP Exhibit in respect of any such retained Personal Data. Dudobi shall delete such data promptly after it ceases to be obliged to retain it and shall only process it to the extent required to comply with applicable laws.
    3. Dudobi acknowledges that the Client serves as Data Controller and Dudobi as Data Processor for all customer data hosted on Dudobi’s infrastructure. Dudobi will not process Client data for any purposes unless explicitly requested to do so by the Client.
  4. SUB-PROCESSING
    1. The Client generally authorises Dudobi to appoint sub-processors in accordance with any restrictions in this DP Exhibit and the Agreement.
    2. Prior to disclosing any Personal Data to any sub-processor, Dudobi shall ensure that it has undertaken appropriate due diligence in respect of such sub-processor, and shall ensure the sub-processor enters into a written agreement on terms which provide that the sub-processor has equivalent obligations to those set out in this DP Exhibit. Dudobi shall remain fully liable to Client for any breach of such obligations by the sub-processor.
    3. Dudobi shall maintain an up-to-date list of its sub-processors and shall inform Client with details of any intended change in sub-processors at least 30 days prior to any such change. The Client may object to Dudobi’s appointment or replacement of a sub-processor prior to its appointment or replacement, provided such objection is based on reasonable grounds relating to data protection. In such event, Dudobi will either not appoint or replace the sub-processor or, if this is not possible, the Client may terminate the applicable Service Exhibit (without prejudice to any fees incurred by the Client prior to termination). Dudobi shall not use such sub-processor until any such objections are resolved or the Client has terminated the applicable Service Exhibit.
  5. CO-OPERATION
    1. Dudobi shall, insofar as is possible, promptly notify the Client of any inquiry, complaint notice or other communication it receives from any supervisory authority, or from any Data Subject relating to the Services (including any requests to access, correct, delete, block or restrict access to their Personal Data or receive a machine-readable copy thereof) and, insofar as is possible and to the extent technically feasible, assist the Client with its obligation to respond to any notification or Data Subject rights request in accordance with the timescales set out in the Data Protection Laws.
    2. If the Client reasonably believes that Dudobi’s processing of Personal Data is likely to result in a high risk to the data protection rights and freedoms of Data Subjects, Dudobi shall, on request from the Client, assist the Client in connection with any data protection impact assessment and prior consultation, which may be subject to additional fees and terms, that may be required under Data Protection Laws, taking into account the nature of the processing and the information available to Dudobi.
  6. BREACH REPORTING
    1. Dudobi shall notify the Client without undue delay on becoming aware of any Personal Data Breach involving Personal Data Processed on behalf of the Client using the Services, and thereafter co-operate with the Client and provide assistance as may be reasonably required by the Client in the investigation, remediation and mitigation of such breach. Dudobi shall provide reasonable assistance to the Client in respect of any breach reporting obligations the Client may have, and provide such additional information relating to such breach as the Client may reasonably require.
    2. Dudobi commits to fulfilling their obligation to report any breach deemed to be a substantial risk to Personal Data, directly to the ICO within 72 hours of becoming aware of such an event.
  7. AUDITS
    1. Dudobi will maintain all information necessary to demonstrate compliance with its obligations identified in this DP Exhibit and a written record of all processing of Personal Data on behalf of the Client and, upon reasonable request grant the Client and its auditors and agents a right of access to and to take copies of records relating to compliance and all processing of such Personal Data on behalf of the Client in order to assess whether Dudobi has complied with its obligations in respect of the processing of Personal Data. Upon reasonable notice, Dudobi shall allow the Client to, or where applicable, shall cooperate with the Client and Dudobi’s third-party providers to arrange for access to premises and other materials and personnel and shall provide reasonable assistance in order to assist the Client in exercising its audit rights under this clause provided that:
      1. such access shall occur at a mutually agreeable time and the scope of the visit will be mutually agreed upon;
      2. such access shall not unreasonably interfere with Dudobi’s operations; and
      3. access to Dudobi premises and systems shall be subject to Dudobi’s reasonable access requirements and security policies and shall not compromise any confidential information to which the Client has no entitlement.
  8. TRANSFERS
    1. Dudobi shall not transfer any Personal Data outside the EEA except to the extent authorised by the Client.
  9. FUTURE AMENDMENTS
    1. The Parties may amend this DP Exhibit at any time during the term of the Agreement by written agreement if necessary to comply with any legal requirement or guidance from a supervisory authority, or if required to take account of any changes to the processing of Personal Data pursuant to the Agreement and applicable Services Exhibit(s).