Terms and Conditions for Sellers of [goods] through the [Pawitz.com] System

These terms and conditions are the contract between you and [Pawitz.com] (“us”, “we”, etc). By visiting or using Our Website, you agree to be bound by them.

We are [Pawitz.com],
Our registered office is at [71 Ratcliffe Gate, Mansfield, Nottinghamshire, NG18 2JB].

1. Definitions

“Commission”	means the commission you pay us, calculated as a percentage of the value of sales made by you through us, net of VAT.
“Content”	means the textual, visual or audio content that is encountered on Our Website. It may include, among other things: text, images, sounds, videos and animations. It includes content Posted by you both directly to offer your Products for sale and indirectly, for any other purpose.
“Device”	includes any computer, device, work station, electronic application or electronic receiving device.
“Fee”	means the annual subscription we charge for setting you up as a supplier to Our Website visitors.
“Our Website”	means any website or Service designed for electronic access by mobile or fixed Device which is owned or operated by us [or any member of the [Pawitz.com] group of companies]. It includes all of the hardware and software installations that enable our website to function.
“Post”	means place on or into Our Website any Content or material of any sort by any means.
“Product”	means any item offered for sale by you on Our Website, whether physical goods or downloads, together with all supporting text, and information in any medium.
“Service”	means all of the services available from Our Website, whether free or charged. For the sake of good order “Service” does not include any service offered for sale on Our Website by any person other than us.
“[Pawitz.com] or Our App”	means our [Pawitz.com website / app] which enables a user of a Device to [mobile device, desktop pc / mobile app to select, order and pay for goods] using that Device via the Internet.

2. Interpretation

In this agreement unless the context otherwise requires:

a reference to one gender shall include any or all genders and a reference to the singular may be interpreted where appropriate as a reference to the plural and vice versa.
a reference to a person includes a human individual, a corporate entity and any organisation which is managed or controlled as a unit.
a reference to a person includes reference to that person’s successors, legal representatives, permitted assigns and any person to whom rights and obligations are transferred or pass as a result of a merger, division, reconstruction or other re-organisation involving that person.
the headings to the paragraphs and schedules (if any) to this agreement are inserted for convenience only and do not affect the interpretation.
any agreement by any party not to do or omit to do something includes an obligation not to allow some other person to do or omit to do that same thing;
[except where stated otherwise], any obligation of any person arising from this agreement may be performed by any other person;
in any indemnity, a reference to costs or expenses shall be construed as including the estimated cost of management time of the indemnified party, [such cost calculated £100 per hour].
all money sums mentioned in this agreement are calculated net of VAT, which will be charged when payment is due.

3. Our contract

The relationship between us is solely that:
- in consideration of the Fee charged by us, we provide for you an Internet market place as an arm’s length contractor.
- we act as your agent solely in the collection of money paid by your buyer.
- we are not partners or joint venturers.
If you place a Product for sale on Our Website, you do so subject to these terms.
When you place a Product on Our Website, you will be bound to provide on Our Website all the information required by the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013.
In consideration of the Fee and the Commission, we provide for you a market place accessible via the [Pawitz.com] The amount of the Fee and the Commission are set out in the Fee schedule, placed on Our Website.
We may change this agreement in any way at any time. The version applicable to your contract is the version which was Posted on Our Website at the time that the contract was made.
In contracting with users of Our App, we make certain assumptions as to your compliance with the law and to the procedures set out on Our Website and named the “Service Level Commitment”. You agree to comply [so far as your business model permits], with those procedures.
Insofar as we provide points of guidance on Our Website, relating to product delivery, returns, payments and other practical matters, such guidance is not to be interpreted as appropriate to your particular Products or circumstances. They do not differentiate between the compliance requirements of different merchants nor do they cover exclusions which may apply to you or to some of your Products. Accordingly, you must not assume that you have complied with the Regulations by adopting our standards. Accordingly, your compliance must be provided by:
- your business procedures;
- all of the pre-purchase information you give to prospective buyers;
- the content on your website.

For the sake of good order, we remind you that the Regulations provide that all information of whatever nature, provided to a buyer, is deemed to be relevant and true.

Although we are not a party to your contract with a buyer introduced to you via Our Website, we shall remove your Products from offer if a customer or Our Website visitor has a valid complaint against you.
Subject to this agreement and to the procedures set out on Our Website, you may enter a Product for sale through Our Website.

4. The Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 (“the Regulations”)

You authorise us to take any action that may reasonably be required from time to time, to protect your interests and ours in connection with a breach or possible breach of the Regulations.
Because we are not your agents except to market your Products and take payment, all your obligations under the Regulations must be fulfilled by you. That means the information you provide to us by entry or upload into Our Website must be clear, sufficient and complete, to comply with the Regulations.
On Our Website, we will provide a route to allow a customer to directly deal with you. That will include options relating to delivery and cancellation of his order.
We will also provide regulatory information relating to returns and cancellation. We expect you to comply with those terms unless the Product you sell, or your business model, requires different terms. The terms on Our Website will be communicated only as information to the buyer and not as contract terms.
Because every reference to a Product of yours, made by you or by us, may be treated by a consumer as contractual, you agree:
- to make clear any contractual term in content you place on Our Website, which may be different from any term on Our Website.
- that no content on your website will contradict content you place on Our Website.

5. Your licence to us

You now warrant that:
- you have the authority to enter into this agreement and bind the person or organisation named by you as the seller and licensor;
- you own the copyright in all Content you may Post to Our Website or that you have the permission of the owner to use it and to grant this licence to us.
- you know of no lawful reason why any person should object to or claim for infringement of, any intellectual property right relating to any Content you may Post.
In Posting data through our Service you grant to us an irrevocable, sub-licensable, licence to display your Product in images and text in the public domain. In doing so you understand and accept that we shall grant a sub-licence to any person in any terms we may from time to time decide, to download your Product images or any other Content, to his mobile phone.
We will use that licence only for commercial purposes in reference to [Pawitz.com] and will stop using it after a commercially reasonable period of time.
You agree to waive of your right to be identified as the author and your right to object to derogatory treatment of your Content as provided in the Copyright, Designs and Patents Act 1988 s80.
Posting Content does not change your ownership of the copyright in it. We have no claim over it and we will not protect your rights for you.
You understand that you are personally responsible for your breach of intellectual property rights, defamation, or any law, which may occur as a result of any Content having been Posted by you;
You accept all risk and responsibility for determining whether any Content is in the public domain and not confidential.
Please notify us of any security breach or unauthorised use of your account.

6. Your Product placement

You agree:

not knowingly to place any Product for sale which is not of merchantable quality or which requires for its setup or use a level of technical expertise which is not fully explained to a customer before purchase.
to make suitable arrangements for the delivery of each Product, including packaging and carriage, so that you can comply with the delivery terms you have given to us.
immediately to remove from sale on Our Website any Product which for any reason, you are unable to supply.
not to re-place any Product we remove from offer for sale.

7. Your account and personal information

When you visit Our Website, you accept responsibility for any action done by any person in your name or under your account or password. You should take all necessary steps to ensure that the password is kept confidential and secure and should inform us immediately if you have any reason to believe that your password has become known to anyone else, or if the password is being, or is likely to be, used in an unauthorised manner.
You agree that you have provided accurate, up to date, and complete information about yourself. We are not responsible for any error made as a result of such information being inaccurate.
You agree to notify us of any changes in your information immediately.
We may terminate your account immediately and without notice to you if you fail to notify us of any such changes.

8. The selling procedure

You agree that a contract to sell a Product offered by you is a firm and binding contract as soon as your customer’s payment has been accepted by our payment service provider.
Deliveries of hard copy and physical Products will be made from your premises, by post or by a carrier instructed by you subject to the contract between you and your customer. In your contract with customer you should clearly specify the mode of delivery and expense involved.
In the absence of information to the contrary, you agree to despatch a Product within [three days] of notification of order by us, by a method likely to reach the buyer within a further [seven days].
You will notify the customer by email on the date of sending, that the Product has been dispatched and of the expected delivery date.
If at any time, any customer notifies you of non-delivery within the time scale offered by you on Our Website, you will investigate immediately and advise the customer of what you are doing to rectify the issue and when you expect to be able to deliver the Product.
If it is apparent that a customer has not received a Product within 14 days of the expected delivery date, you will refund money paid, including any delivery charge. This is a condition of your contract with us because our reputation, as well as yours, is at stake in those circumstances.
Products may be offered for sale subject to any discount or promotion arranged between you and us.
Subject to discounts and promotions, Products are offered for sale at a fixed price, inclusive of VAT.
All Products will be subject to a delivery charge which will be shown at the pay point. The delivery charge will be fixed by you for each item offered for sale. It may be changed at your discretion. Once you have sold an item, the delivery charge offered by you at the time of purchase cannot be increased.
You agree to provide an adequate stock of any Product placed by you for sale through Our Website and to tell us, through your control panel, if at any time your supply is exhausted. If that happens, you must also remove the Product from sale or mark it as unavailable.
You agree to comply with the requirements implied in the returns policy set out on Our Website.

9. Products returned

You agree that you will at all times:

reply promptly and in any event within [48 hours] to any customer message or other correspondence;
comply with the law relating to all aspects of the contract between you and your customer, relating in particular to your obligations to provide full information and accept cancellation and returns. However, you may also offer more favourable terms to your customers as per your own returns and refunds policy set out on your website or otherwise in your terms and conditions.
when you have an obligation to return money to a customer for any reason, you will do so immediately in line with the returns and refunds policy set out on Our Website;
immediately tell your customer in the event that Products bought are not available.
comply with our procedures relating to satisfaction of an order, Products returned and payment, as set out on Our Website from time to time.
provide information to us in respect of any claim for non-delivery and any dispute as to payment, so as to enable us to identify the possibility of fraud.

10. Our Commission and payment to you

We sell your Product at the price you place on it, subject to these terms and subject also to the requirements we set out on Our Website from time to time.
Our Fees and Commission are payable on demand. You irrevocably authorise us to deduct them from sums paid to us by your buyer.
Our Website selling system is an automated system which can be followed by you through a “control panel”.
The proportion of each sale receipt retained by us is as set out elsewhere on Our Website.
Where our Commission is based on a percentage of the sale price, you may not artificially inflate the delivery charge and reduce the price of the Product in order to reduce our Commission. If we believe that you do so, we may immediately cease to deal with you.
We will pay you within [1 day] of confirmed dispatch of order.
If you have a bank account located in the United Kingdom, we will transfer money via the Internet, in full.
If you do not have an account in the United Kingdom, we will transfer money in any sum at your request and at your cost. We will pay for the transfer if the sum due is over the limit specified from time to time on Our Website.
We will send you an invoice for our charges.
If we do or could earn interest on any cash balance in our control for the period between payment by a customer and our accounting to you, we are free to keep that interest and have no obligation to account for it to you.
If an action by a buyer results in a charge back to our account, you agree that we may deduct the sum charged back together with any fee paid to our service provider and bank, from any sum due to you.
If you or we accept any return from a customer and consequently refund his payment, we are not obliged to repay Commission to you.
If in our discretion we believe that your performance as a seller results in a significant number of charges back and / or buyer disputes or if we believe you are in breach of this agreement, we are free to hold back payments to you until we are satisfied that disputes have been settled and / or breach rectified.

11. Value added Tax

Fees and Commissions specified on Our Website are exclusive of VAT.
Whether or not you are located in UK you must provide to us a valid UK VAT registration number.
If you are located in the UK, we will show and retain the amount of VAT due on our charge for our services in addition to the amount of Commission due to us.

If you are located in the UK, and you provide a valid UK VAT registration number, we will not charge or deduct VAT from sums due to you.
[Pawitz.com] has the right to demand additional information about your business so far as it may affect your VAT registration, at any time, from you or from a governmental authority.

12. Advertising your Product

If you accept our offer to advertise, market or promote your Product, the following conditions apply.

We may use the services of a specialist internet marketing business associated with us.
Without prior consent of the other; neither we nor you will contract with any other person or company for specialist services. Here your obligation is limited to the extent of the price charged and due to us.
The price charged to you will include all payments we make to others.
We give no guarantee as to the success of any advertising placed.
We shall receive no secret commission on advertising services. But note that the service supplier is associated with us.

13. Your Product warranties

You warrant that:

any Product you place on Our Website for sale:
- does not infringe the intellectual property rights of any person;
- does not offend against the law of any country whose citizens might purchase it;
- is not intended primarily to advertise any business, except your business, so far only as it is carried on through [our name].
you own the intellectual property rights in any Product you place on Our Website for sale, or that you have the permission of the copyright owner:
- to place the Product on Our Website for sale;
- to receive the net proceeds of such sales as arise;
- to defend the copyright in the Product.

14. Indemnity

You agree to indemnify us against any loss, damage or liability, suffered by us at any time and arising out of:

any act, neglect or default of yours in connection with this agreement or with any Product of yours or with your use of our Services;
your breach of this agreement;
your failure to comply with any law;
any act, neglect or default by any agent, employee, licensee or customer of yours;
a claim or assessment or order to pay tax based on any sum paid by us.
a contractual claim arising from your use of the Services

This indemnity shall include all costs reasonably incurred by us without the need to prove they were necessary.

15. Restrictions on what you may Post to Our Website

We invite you to contribute Content to Our Website in several ways, as for example to upload information and sales material to promote your products/services. We have to regulate your use of Our Website to protect our business and our staff, to protect other users of Our Website and to comply with the law. These provisions apply to all users of Our Website.

We do not undertake to moderate or check Content Posted, but we do protect our business vigorously. If we believe Content Posted breaches the law, we shall co-operate fully with the law enforcement authorities in whatever ways we can.

You agree that you will not use or allow anyone else to use Our Website to Post Content, upload Content or undertake any activity which is or may:

be unlawful, or tend to incite another person to commit a crime;
be obscene, offensive, threatening, violent, malicious or defamatory;
be sexually explicit or pornographic;
be likely to deceive any person or be used to impersonate any person, or to misrepresent your identity, age or affiliation with any person;
use a Posting to solicit responses unconnected with the purpose of Our Website or the terms proposed by this agreement;

16. Your Posting: restricted content

In connection with the restrictions set out below, we may refuse or edit or remove a Posting which does not comply with these terms.

In addition to the restrictions set out above, a Posting must not contain:

hyperlinks, other than those specifically authorized by us;
keywords or words repeated, which are irrelevant to the Content Posted.
the name, logo or trademark of any organisation other than yours.
inaccurate, false, or misleading information;
material or links to material that exploits people in a sexual, violent or other manner, or solicits personal information from anyone under 18 years old.

17. Removal of offensive Content

We are under no obligation to monitor or record the activity of any customer for any purpose, nor do we assume any responsibility to monitor or police Internet-related activities. However, we may do so without notice to you and without giving you a reason.
If you are offended by any Content, the following procedure applies:
- Your claim or complaint must be submitted to us in the form available on Our Website, or contain the same information as that requested in our form. It must be sent to us by post or email.
- we shall remove the offending Content as soon as we are reasonably able;
- after we receive notice of a claim or complaint, we shall investigate so far as we alone decide;
- we are free to either re-instate your content, or not, as we decide.

18. Security of Our Website

If you violate Our Website we shall take legal action against you.
You now agree that you will not, and will not allow any other person to:
- modify, copy, or cause damage or unintended effect to any portion of Our Website, or any software used within it.
- link to Our Website in any way that would cause the appearance or presentation of Our Website to be different from what would be seen by a user who accessed Our Website by typing the URL into a standard browser;
- download any part of Our Website, without our express written consent;
- collect or use any product listings, descriptions, or prices;
- collect or use any information obtained from or about Our Website or the Content except as intended by this agreement;
- aggregate, copy or duplicate in any manner any of the Content or information available from Our Website, other than as permitted by this agreement or as is reasonably necessary for your use of the Services;
- hide or remove the banner advertisements on any page of Our Website;
- share with a third party any login credentials to Our Website;
Despite the above terms, we now grant a licence to you to:
- create a hyperlink to Our Website for the purpose of promoting an interest common to both of us. You can do this without specific permission. This licence is conditional upon your not portraying us or any Product or Service in a false, misleading, derogatory, or otherwise offensive manner. You may not use any logo or other proprietary graphic or trademark of ours as part of the link without our express written consent.
- you may copy the text of any page for your personal use in connection with our business.

19. Storage of data

You agree that bandwidth and storage requirement shall not exceed the amount ordered by you.
If your bandwidth and storage requirement exceeds the contractually ordered amount we may in our discretion:
- charge the price currently charged by us for the additional usage you have used, such charges to be paid within 30 days of the invoice date or.
- if in our opinion your usage puts at risk the continued Services provision to other customers, we may limit the Services we provide to what we have agreed in our contract with you. We may not be able to give you notice of this.

We may, from time to time, set a limit on the number of messages you may send, store, or receive through the Service. We may delete messages in excess of that limit. We shall give you notice of any change to your limit, except in an emergency.
We maintain reasonable procedures for general backup of data for our own purposes but we give no warranty that your data will be saved or backed up in any particular circumstances unless we have made specific contractual arrangements with you in writing.

20. Copyright and other intellectual property rights

All Content on Our Website, for example page text, graphics, logos, images, audio clips, digital downloads, data compilations, and software, is the property of either us or our affiliates or suppliers of products for sale. It is all protected by international copyright laws.
You may not copy, modify, publish, transmit, transfer or sell, reproduce, create derivative works from, distribute, perform, display, or in any way exploit any of the Content, in whole or in part, except as is expressly permitted in this agreement or with our written consent.
For the sake of good order you should note that copyright exists in compilations and graphic images, shapes and styles, as well as in raw text.

21. Disclaimers and limitation of liability

The law differs from one country to another. This paragraph applies so far as the applicable law allows.
All implied conditions, warranties and terms are excluded from this agreement. If in any jurisdiction an implied condition, warrant or term cannot be excluded, then this sub paragraph shall be deemed to be reduced in effect, only to the extent necessary to release that specific condition, warranty or term.
We make no representation or warranty that our Service will be:
- useful to you;
- of satisfactory quality;
- fit for a particular purpose;
- data-secure;
- available or accessible, without interruption, or without error.
We claim no expert knowledge in any subject. We disclaim any obligation or liability to you arising directly or indirectly from information you take from Our Website.
We shall not be liable to you for any loss or expense arising out of or in connection with your use of Our Website, which is indirect or consequential loss, or economic loss or other loss of turnover, profits, business or goodwill. This applies whether in an action of contract, negligence or otherwise, even if such loss was reasonably foreseeable or we knew you might incur it.
We will do all we can to maintain access to Our Website, but it may be necessary for us to suspend all or part of our Service for repairs, maintenance or other good reasons. We may do so without telling you first.
You acknowledge that our Service may also be interrupted for reasons beyond our control.
You agree that we are not liable to you for any loss whether foreseeable or not, arising as a result of interruption to our Service.
You now expressly release us from any and all claims and liability known and unknown, arising in any way from a dispute between you and a buyer.
Our Website contains links to other Internet websites. We have neither power nor control over any such website. You acknowledge and agree that we shall not be liable in any way for the content of any such linked website, nor for any loss or damage arising from your use of any such website.
Our total liability under this agreement, however it arises, shall not exceed the sum of £ [10,000]. This applies whether your case is based on contract, tort or any other basis in law.
This paragraph (and any other paragraph which excludes or restricts our liability or provides an indemnity to us) applies to our directors, officers, employees, subcontractors, agents and affiliated companies (who may enforce this clause under the Contracts (Rights of Third Parties) Act 1999 / Contracts (Rights of Third Parties) (Scotland) Act 2017, as well as to us.
If you become aware of any breach of any term of this agreement by any person, please tell us by [state action required]. We welcome your input but do not guarantee to agree with your judgement.
Nothing in this agreement shall be construed as limiting or excluding our liability for death or personal injury caused by our negligence.

22. Data Protection Act 2018 Compliance

Your own personal data will be held and processed by us in the ways set out in our privacy policy.
Insofar as we process personal and other data of the buyers or other person with whom you interact in the course of your business following terms apply:
- to satisfy your legal obligations and ours, we will agree to comply with the provisions of the Schedule.
- those obligations shall continue to apply after expiry or termination of this agreement for any reason.

23. Miscellaneous matters

If any term or provision of this agreement is at any time held by any jurisdiction to be void, invalid or unenforceable, then it shall be treated as changed or reduced, only to the extent minimally necessary to bring it within the laws of that jurisdiction and to prevent it from being void and it shall be binding in that changed or reduced form. Subject to that, each provision shall be interpreted as severable and shall not in any way affect any other of these terms.
The rights and obligations of the parties set out in this agreement shall pass to any permitted successor in title.
No failure or delay by any party to exercise any right, power or remedy will operate as a waiver of it nor indicate any intention to reduce that or any other right in the future.
Any communication to be served on either of the parties by the other shall be delivered by hand or sent by [first class] post or recorded delivery or by e-mail.

It shall be deemed to have been delivered:

if delivered by hand: on the day of delivery;

if sent by post to the correct address: within 72 hours of posting;

If sent by e-mail to the address from which the receiving party has last sent e-mail: within 24 hours if no notice of non-receipt has been received by the sender. [Take care before agreeing to accept service by e-mail. It may be convenient, but you could miss or accidentally delete the message]

In the event of a dispute between us, you undertake to attempt to settle the dispute by engaging in good faith with us in a process of mediation before commencing arbitration or litigation.
In the event of any conflict between any term of this agreement and the provisions of the articles of a limited company or any comparable document intended to regulate any other corporate or collective body, then the terms of this agreement shall prevail.
The validity, construction and performance of this agreement shall be governed by the laws of [England and Wales / Scotland / Northern Ireland] and you agree that any dispute arising from it shall be litigated only in that country.

Schedule – Data Protection Act 2018 Compliance

1. Definitions

In this Schedule, the following words shall have the following meanings:

“Act”	means the Data Protection Act 2018.
“Associate”	means any corporate or other form of organisation or any individual person with whom you have an association which does, or could, entail the transfer of personal data to us for processing.
“ICO”	means the Information Commissioner’s Office.
“Data Protection Legislation”	means all or any of: (a) the GDPR, (b) the applied GDPR, (c) the Act, (d) regulations made under the Act (e) regulations made under section 2(2) of the European Communities Act 1972 which relate to the GDPR or the Law Enforcement Directive.
“the GDPR”	means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation).
“the applied GDPR”	means the GDPR as applied by Chapter 3 of Part 2 of the Act.
“Law Enforcement Directive”	means Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA.

“data controller”, “data processor”, “sub-processor”, “data subjects”, “personal data”, “process”, “processed” and “processing” shall have the meanings respectively, as defined in the Act.

In this agreement, “personal data”, is limited to data which comes into our hands in some way connected to this agreement.

2. Data Protection

The obligations described in this Schedule are in addition to our obligations under the Data Protection Legislation.
To enable us to provide the Services under this agreement, you authorise us to process personal data on your behalf.
We both agree that you and your Associates are data controllers, and we are your data processor in relation to personal data.
Details of the anticipated processing activities are set out at Appendix 1 to this Schedule.

3. How we shall process data

We shall at all times comply with the provisions and obligations imposed by the Data Protection Legislation and, in particular, shall:

process personal data only to the extent necessary to provide the Services;
ensure that every person processing personal data under this agreement does so strictly on a need-to-know basis, has received training on their obligations relating to handling of personal data and is bound by confidentiality obligations no less stringent than our confidentiality obligations under this agreement;
in order to use commonly accepted international communications and money transfer protocols, it will be necessary to use sub-contractors for certain service provision. We shall not necessarily be aware of the identity of every organisation involved in the train of communications. When that happens, we accept full responsibility for our compliance with the Data Protection Legislation.
subject to the exceptions mentioned in the last previous sub-paragraph, we will not use subcontractors for personal data processing under this agreement without your prior written consent.
wherever possible, enter into a written contract with each such sub-processor, which includes the same obligations on the sub-processor as those imposed on us by You under this agreement.
subject to the other provisions of this Schedule, not process personal data or permit any third party to process personal data outside of the European Economic Area (EEA) unless:
- EU standard contractual clauses approved by the European Commission or the ICO are entered into between you or your relevant Associate as data exporter, and the relevant recipient of the personal data as data importer; or
- the recipient of the personal data has entered into a data processing agreement with you; or
- the recipient of the personal data is regulated within the United States of America solely by the U.S. Department of Commerce, is certified under the EU/US Privacy Shield framework, and continues to be certified for the period within which it processes the personal data; or
- the recipient of the personal data has entered into binding corporate rules, which are valid in respect of the processing of personal data under this agreement and have been approved by the European Commission or the ICO; or
- the transfer is to a recipient located within a jurisdiction whose law relating to the processing of personal data has been approved by the European Commission or the ICO (subject to any applicable restrictions).
have in place at all times appropriate technical and organisational measures to ensure a level of security appropriate to the risk presented by processing the personal data, to prevent accidental, unauthorised or unlawful destruction, loss, alteration, or access to personal data, including as a minimum whatever security measures you notify and instruct us to use. Examples of such measures are:
- the pseudonymisation and encryption of personal data;
- the ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services; and
- a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of processing;
maintain a written record of all categories of processing activities carried out on your behalf and when you ask, copy it to you. The record shall contain:
- Our name and contact details and (where applicable) those of our approved sub-processors and details of their respective data protection officers;
- the categories of personal data, data subjects and processing activities carried out on behalf of you and your Associates;
- where applicable, transfers of personal data to a third country (i.e. non-EU Member State) or an international organisation, including identification of that third country and documentation evidencing implementation of suitable safeguards; and
- a general description of the technical and organisational security measures we have installed as referred to in Article 32(1) of the GDPR;
when you ask, give to you or to the ICO, access to our employees, data processing facilities, procedures, and records to inspect and audit compliance with the Data Protection Legislation and the terms of this agreement. We shall (and shall ensure any sub-processor shall) give all reasonable cooperation and assistance.
immediately tell you (and in any event within 24 hours) after becoming aware of any actual or suspected unlawful destruction, loss, alteration, disclosure of, or access to, personal data transmitted, stored or otherwise processed by you or any sub-processor under this agreement;
provide reasonable assistance to you in:
- responding to data subject’s requests to exercise their rights under the Act;
- responding to communications received from the ICO relating to the processing of personal data under this agreement, including notifying You immediately of any such communication;
- taking measures to address data security incidents, including, where appropriate, measures to mitigate their possible adverse effects;
- promptly upon your request, transfer personal data to a third party in compliance with a request from a data subject to exercise their right to data portability;
- make available to you on request all information necessary to demonstrate compliance with the obligations set out in this Schedule; and
- at your request (no more than once in every calendar year) complete and return without delay your information security and data protection questionnaires.

4. Post termination

Upon termination of this agreement, we and any sub-processor shall:
- physically destroy all copies of media upon which any personal data was supplied and any further copies made by us;
- return all personal data stored in hard copy to you;
- delete all personal data stored in soft copy, by some method which prevents future re-activation of that data;
Where we or our sub-processor is required to retain personal data in order to comply with applicable law, we will tell you and will retain such personal data only in our capacity as a data processor and shall comply with our obligations as a data processor, as far as applicable law permits.

5. Warranty and acceptance of liability

We represent and warrant that the information provided in any response to any request by you shall be complete, true and accurate, and will not misrepresent our business or practices in respect of our ability to comply with the Data Protection Legislation and our obligations under this agreement.
If any act or omission of ours or our sub-processors results in data transmitted or processed under this agreement being lost or degraded so as to be unusable, then we shall be liable to you for the cost of reconstituting the data and/or yours and your Associate’s costs in recreating such data.

Appendix 1 to Schedule

Data Processing Activities

What we or you may process in each category

We shall process this basic personal data
- Name
- Address
- Email address
- Telephone number
- Date of birth
- Technical information relating to electronic communication, which is personal information only when associated with the name or identity of the data subject
- [list all other depending on whether data passes]
We shall process the data of these data subjects

Data of buyers, so far as their data is required in order to satisfy our obligations under this contract and comply with the Data Protection Legislation.

This is why and how we shall process personal data
- Our processing of personal data will be limited to such activity as is reasonably required to satisfy our obligations under this contract.
- We shall not make contact with any data subject nor seek additional data from any other source.
Retention period
- We may retain personal data, along with much other data, for six years, for these reasons:
  - for accounting and taxation purposes;
  - to provide evidence if required in connection with a legal claim;
  - for any other reason where the law provides a six years limitation period;
- If any event occurs which requires us lawfully to continue to retain data beyond that period, then we may do so.