Terms & Conditions

1. Application
   • These Terms and Conditions shall apply to the provision of IT Services by the Provider to the Customer.
   • In the event of conflict between these terms and conditions and any other terms and conditions (of the Customer or otherwise), the former shall prevail unless expressly otherwise agreed by the Provider in writing.

2. Definitions and Interpretations
   • In these Terms and Conditions, unless the context otherwise requires, the following expressions have the following meanings:

.

• Any reference in these Terms and Conditions to a statute or a provision of a statute shall be construed as a reference to that statue or provision as amended, re-enacted, or extended at the relevant time.
• The headings in these Terms and Conditions are for convenience only and shall not affect their interpretation.

3. Provider’s obligations
   • With effect from the Commencement Date the Provider shall, in consideration of the Fees being paid in accordance with the terms of payment (as set out in this Agreement), provide the Services with reasonable skill and care.

.

• The Provider will, subject to Clause 4, use reasonable endeavours to maintain the functionality of any Software which may be installed or otherwise operative on the Customer’s Equipment and undertakes to re-install any Software which may have been corrupted or otherwise made unavailable due to hardware failure and to render such technical assistance as may be necessary to secure the satisfactory operation of the Equipment and Software.
• Upon receipt of the Customer’s request for support or rectification of a defect, the Provider shall (subject to its then current commitments) normally begin work on such support or defect within the specified Service Level Agreement timescales and shall carry out all Services during Working Hours until all required work is completed to the reasonable satisfaction of the Customer.
• The Provider may use software tools, including automated and artificial intelligence-based tools, to assist in delivering the Services, including triaging, responding to and resolving support requests, carrying out routine administration of the Customer’s systems, and helping the Provider’s staff to draft documents and correspondence, analyse information and research technical issues. Where the Provider uses such tools, it shall:
  • configure them so that they can access the Customer’s systems and data only to the extent necessary to provide the Services, and limit Customer data and confidential information supplied to them to what is reasonably necessary for that purpose;
  • ensure that actions which may materially affect the Customer’s systems, users, security settings or data are subject to prior approval by a member of the Provider’s staff, either individually or under a documented, pre-approved procedure for specified categories of action, in accordance with the Provider’s internal procedures;
  • maintain a record of the actions such tools take on the Customer’s systems;
  • remain responsible for the performance of the Services as if those actions had been carried out by the Provider’s own personnel;and
  • apply appropriate checks to AI-generated technical advice and scripts before relying on them where errors could materially affect the Customer’s systems, security or data.
• Some activities forming part of the Services, such as monitoring, scheduled reporting, maintenance tasks and the triage of support requests, may be carried out outside Working Hours. This does not extend the Provider’s obligations under clause 3.3 or any Service Level Agreement beyond Working Hours unless expressly stated in Section 4 (Services (Recurring) & Fees).
• Where a response to a support request is generated by automated or artificial intelligence-based tools, the Provider shall make this clear to the recipient, who may at any time ask for assistance from a member of the Provider’s staff. Such assistance shall be provided within the applicable support hours and in accordance with any applicable Service Level Agreement.

4. Customer’s Obligations
   • The Customer:
     • shall notify the Provider at the earliest opportunity of any expected changes to or implementations of any IT, connectivity or telecoms-based system(s), that may affect the services and/or products provided by or supported by the Provider.
     • acknowledges that any work which is required from the Provider relating to any changes/implementations will need to be quoted for in advance.
     • acknowledges that any changes to the ongoing services the Customer requires to be delivered by the Provider will need to be quoted for in advance.
     • shall allow the Provider access to the Equipment and all relevant Software for investigation purposes.

shall provide adequate working space and facilities for the Provider staff and co-operate with them in the diagnosis of any defect or malfunction in the Equipment or Software.

• The Customer shall allow the Provider the use of any Equipment, computer systems, peripherals, or other hardware necessary to enable it to provide the Services and shall be responsible for procuring, installing and maintaining all communications media not supplied by the Provider.
• The Customer will not allow any changes or modifications to the Software to be made by any party other than those authorised by the Provider. If such changes or modifications are carried out without authorisation or appropriate notification, the Provider reserves the right to review these Terms and Conditions and adjust them accordingly.
• The Customer will make freely available to the Provider all documentation associated with the Equipment, working documents, original Software installation media, current data backups, Equipment, and any other relevant hardware for the efficient maintenance of the Equipment and the Software.
• The Customer shall create regular data backups in such a manner as to minimise any potential data loss and to ensure that these are made available to the Provider as required. In the case where backup is monitored by the Provider, the Provider will take all steps necessary and reasonable to maintain regular and successful backups. In the case of offsite backup supplied directly by the Provider, the Provider will manage, monitor, and maintain the regular and successful backups and report failures to the Customer.
• The Customer shall take all reasonable precautions to ensure the safety and health of the Provider’s personnel while such personnel are at the Customer’s premises.
• The Customer shall provide to the Provider, and keep up to date, a list of the individuals who are authorised to request or approve, on the Customer’s behalf, the creation, removal or modification of user accounts, access permissions, passwords, multi-factor authentication settings, licences and security settings (“Authorised Contacts”). The Provider shall be entitled to rely on any such request made or approved by an Authorised Contact, and may decline or delay any such request that is not made or approved by an Authorised Contact or that does not pass the Provider’s identity verification procedures.
• The Customer shall notify the Provider promptly if an Authorised Contact leaves the Customer’s organisation or should otherwise no longer be treated as authorised.

5. General
   • Failure by either the Provider or Customer at any time to enforce any part of the provisions of this Agreement shall not be construed as a waiver by such party of any such provision or in any way affect the validity of this Agreement or any part of it.
   • If any provision of this Agreement shall be prohibited or adjudged by a court of competent jurisdiction to be unlawful, void or unenforceable, such provision shall to the extent required be severed from this Agreement and rendered ineffective as far as possible without modifying the remaining provisions of this Agreement and shall not in any way affect any other circumstances or the validity or enforcement of this Agreement.
   • This Agreement and any other documents referred to in it, constitutes the whole agreement between the parties and replaces and supersedes any previous Agreement, understanding or arrangement between the Provider and Customer relating to the subject matter they cover. Each party acknowledges and agrees that in entering into this Agreement it does not rely on any undertaking, statement, representation, warranty, or understanding (whether in writing or not) of any person relating to the subject matter of this Agreement, other that as expressly set out in this Agreement.
   • The Provider shall be entitled to amend the Terms and Conditions and/or any service specific conditions at any time and will notify the Customer in writing by email. This Agreement shall be amended accordingly with effect from the date of notification. Save in respect of price changes, if the relevant amendment is not required by law and materially affects the Services, the Customer shall have the right to terminate the relevant services affected by the change serving on the Provider no less than 1 calendar months’ written notice by email to [email protected] to terminate the relevant Services, provided that such notice is served within the period of 14 working days commencing on the date of notification. In all other cases, the Customer will be deemed to have accepted the amendment.
   • The Provider may for operational reasons introduce service features and/or process changes and/or change the way in which the Services are delivered provided such changes do not have a material impact on the performance or provision of the service.
   • By entering into this Agreement, the Customer confirms that it has read and understood the Providers privacy policy, which can be found at cloud10.it/privacy-policy The Provider’s processing of personal data on behalf of the Customer in providing the Services is governed by clause 18 (Data Protection).
6. Price
   • The Customer agrees to pay the Fees in accordance with Clause 7 and Section 4 (Services (Recurring) & Fees) above.
   • Following approval, the Provider shall be entitled to recover from the Customer reasonable incidental expenses for materials used and for third party goods and services supplied in connection with the provision of the Services.
   • Following approval, the Customer shall pay the Provider for any additional services provided by the Provider in accordance with the Provider’s hourly rate in effect at the time of the performance or such other rate as may be agreed. Any such charge for additional services shall be invoiced separately.
   • All sums payable under this Agreement are exclusive of any value added tax or other applicable sales tax which shall be added to the sum in question at the applicable standard rate. A VAT invoice shall be provided against any payment.
   • The Provider may increase the Fees for any Services detailed in this Agreement in April (or any replacement month published on The Providers website) each year of the term of this Agreement and any rollover term by the same increase in the Retail Prices Index for the previous 12 months announced by the Office for National Statistics (or successor body).
   • If the Customer requires any third-party licenses as part of the Services and such licenses are provided by the Provider, the Provider shall have the right to pass on to the Customer any increase in the cost of such licenses.
7. Payment
   • So that the Provider can keep its costs as low as possible, payments for all undisputed invoices (or any undisputed parts of any invoices) shall be made by direct debit (unless otherwise agreed) on or before the Due Date appearing on the relevant invoice without any set-off, withholding or deduction except such amount (if any) of tax as that party is required to deduct or withhold by law.
   • Any invoice disputes must be sent to [email protected] within 14 days of the invoice date.
   • In the event that the Provider agrees an invoice may be payable otherwise than by direct debit, the Provider may charge an administration fee of up to £35+vat per invoice dependent on invoice amount (plus any applicable VAT).
   • The time of payment shall be of the essence of these Terms and Conditions. If the Customer fails to make any payment on the due date in respect of any sum due under these Terms and Conditions, then the Provider shall have the right to charge the Customer an administration fee of up to £35+vat per invoice dependent on invoice amount (plus any applicable VAT).
   • If the Provider has not received payment from the Customer of invoiced and undisputed Charges in full and in accordance with the Payment Terms by the Due Date, the Provider may suspend all or part of any Services provided.
8. Suspension of Services
   • Without prejudice to the parties other rights and remedies under this Agreement and otherwise at law and subject to paragraph 7.1, the Provider may suspend the performance of its obligations under this Agreement on prior written notice to the Customer in the event that:
     • The Customer has failed to pay the Fees in full by the due date for payment; or
     • The Provider is required to suspend performance in order to comply with applicable law or request of any governmental department, emergency services organisation or other competent administrative authority provided that if the Provider is entitled to suspend this Agreement pursuant to this paragraph 8.1.2, the Provider shall use its reasonable endeavours to minimise such period of suspension.
     • In the event of an emergency, the Provider may at its sole discretion interrupt or suspend its obligations hereunder for so long as the emergency lasts (but no longer) without giving any notice to the Customer but shall notify the Customer as soon as reasonably practicable following the start of the interruption or suspension and shall use its reasonable endeavours to minimise the period of such interruption or suspension.
   • Where the suspension is implemented as a consequence of the breach, fault, act, or omission of the Customer, the Customer shall reimburse the Provider for all reasonable costs and expenses incurred by the Provider in connection with the implementation of such suspension (including reinstatement of any services detailed in the Agreement).

9. Variation and amendments

• If the Customer wishes to vary the specification of the Services, it must notify the Provider in writing as soon as is reasonably possible. The Provider shall use reasonable endeavours to make any required changes and any additional costs thereby incurred shall be separately invoiced to the Customer.
• If, due to circumstances beyond the Provider’s control, it must make any change in the arrangements relating to the provision of the Services it shall notify the Customer forthwith. The Provider shall endeavour to keep such changes to a minimum and shall seek to offer the Customer arrangements as close to the original arrangements as is reasonably possible in the circumstances.

10. Term
    • This Agreement shall commence on the Commencement Date. Unless terminated earlier in accordance with the terms of this Agreement or this clause, this Agreement shall continue for the Initial Term (as specified in Section 4 Services (Recurring) & Fees) and automatically extends by whichever is lesser of 12 months or the Initial Term (“Extended Term”) at the end of the Initial Term and at the end of each Extended Term. Either party may give written notice to the other party not later than 3 months before the end of the Initial Term or the relevant Extended Term, to terminate this Agreement at the end of the Initial Term or the relevant Extended Term, as the case may be.
11. Termination
    • Without affecting any other right or remedy available to it, the Provider may terminate this Agreement forthwith if:
      • the Customer is in breach of any of its obligations hereunder; or
      • the Customer has entered into liquidation (other than for the purposes of a bona fide amalgamation or reconstruction) whether compulsory or voluntarily or compounds with its creditors generally or has an administrator, administrative receiver or receiver appointed over all or a substantial part of its undertaking or assets; or
      • the Customer has become bankrupt or shall be deemed unable to pay its debts by virtue of Section 123 of the Insolvency Act 1986; or
      • the Customer ceases or threatens to cease to carry on business; or
      • any circumstances whatsoever beyond the reasonable control of the Provider necessitate and justify the termination of the Services.
    • In the event of termination under clause 11.1 the Provider shall retain any sums already paid by the Customer without prejudice to any other rights may have whether at law or otherwise.
    • Termination or expiry of this Agreement shall not affect any rights or obligations which are expressly or by implication intended to continue, including those under clauses 13 (Limitation of liability and indemnity), 14 (Confidentiality) and 18 (Data Protection).
12. Notices
    • Any notice, document or communication given by the Customer shall be given by email to [email protected] or to such email address of which notice has previously been notified by the Provider to the Customer. Any notice by the Provider shall be given by email to the Customer contract contact email address.
    • A notice is deemed to have been received at the time of sending the email.
    • To prove service, it is sufficient to prove that the email was sent to the contact email address as set out above and receipt was acknowledged by return from the email address to which it was sent or otherwise by an authorised representative of the receiving party.
    • The provisions of this clause shall not apply to the service of any proceedings or other documents in any legal action.

13. Limitation of liability and indemnity
    • The Customer shall indemnify the Provider against all damages, costs, claims and expenses suffered by the Provider arising from loss or damage to any equipment (including that of third parties) caused by the Customer, or its agents or employees.
    • Nothing in this Agreement excludes the liability of the Provider for death or personal injury caused by the Provider’s negligence or for fraud or fraudulent misrepresentation.
    • The Provider shall not in any circumstances be liable to the Customer for any types of loss listed below whether arising from breach of contract, tort (including negligence), misrepresentation, restitution, breach of statutory duty or otherwise. The types of loss include:
      • Loss of profits or loss of turnover
      • Loss of revenue
      • Loss of business or contracts
      • Loss of anticipated savings and goodwill
      • Losses arising from loss or corruption of, or damage to, software and/or data
      • Loss of or damage to goodwill;
      • Any other consequential, special or indirect losses; and
      • Any losses suffered by the Customer arising from any claim by a third party for any of the above types of loss.
    • Subject to clause 13.2, the Provider’s total liability to the Customer for all loss or damage arising under or in connection with this Agreement including liability in contract, tort (including negligence), misrepresentation, restitution or otherwise shall not exceed the amount of the Fees paid by the Customer in the 12 months prior to the liability arising.
    • If the Provider’s compliance with any applicable service levels or the performance of any obligations under this Agreement is perverted or delayed by the Customer including any delay or refusal to permit the Provider, its agents or contractors access to premises, systems and personnel for the purpose of providing the Services:
      • Such service levels shall not apply for the period which the Provider, its agents or contractors are delayed or prevented from performing the services
      • The Provider shall not be liable for any costs, charges or losses sustained by the Customer that arise directly or indirectly from such prevention or delay.

14. Confidentiality
    • During the term of the Agreement and after termination or expiration of the Agreement for any reason for a period of 5 years (or, in respect of the Disclosing Party’s technical, security and system information and any personal data, for so long as the Receiving Party or its sub-contractors hold that information, if longer) the following obligations shall apply to the party disclosing confidential information (‘the Disclosing Party’) to the other party (‘the Receiving Party’).
    • Subject to clause 14.3, the Receiving Party:
      • may not use any confidential information for any purpose other than the performance of its obligations under these Terms and Conditions.
      • may not disclose any confidential information to any person except with the prior written consent of the Disclosing Party or as permitted by clause 14.6; and
      • shall make every effort to prevent the use or disclosure of the confidential information.
    • The obligations of confidence referred to in the provisions of this clause shall not apply to any confidential information that:
      • is in the possession of and is at the free disposal of the Receiving Party or is published or is otherwise in the public domain before its receipt by the Receiving Party.
      • is or becomes publicly available on a non-confidential basis through no fault of the Receiving Party.
      • is required to be disclosed by any applicable law or regulation; or
      • is received in good faith by the Receiving Party from a third party who, on reasonable enquiry by the Receiving Party claims to have no obligations of confidence to the other party to these Terms and Conditions in respect of it and who imposes no obligations of confidence upon the Receiving Party.
    • Without prejudice to any other rights or remedies the Disclosing Party may have, the Receiving Party acknowledges and agrees that in the event of breach of this clause the Disclosing Party shall, without proof of special damage, be entitled to an injunction or other equitable remedy for any threatened or actual breach of the provisions of this clause in addition to any damages or other remedies to which it may be entitled.
    • The obligations of the parties under the provisions of this clause shall survive the expiry or the termination of the Agreement for whatever reason.
      
      
    • The Receiving Party may disclose confidential information to its employees, officers, professional advisers, sub-contractors and Sub-processors (as defined in clause 18) who need to know it for the purpose of performing or receiving the Services, provided that the Receiving Party ensures that each such recipient is bound by obligations of confidentiality no less protective than those set out in this clause 14. The Receiving Party shall remain responsible for any breach of this clause 14 by any such recipient.
15. Sub-Contracting and Assignment
    • The Provider may sub-contract any part of the work to be performed under this Agreement, and may use third-party software and service providers (including providers of automated and artificial intelligence-based tools) in delivering the Services. Where a sub-contractor will process Customer Personal Data, clause 18 shall apply. The Provider shall remain responsible for the acts and omissions of its sub-contractors as if they were its own.
    • The Customer shall not assign to a third party any or all its rights or obligations under these Terms and Conditions without the prior written consent of the Provider.
16. Force Majeure
    • Neither the Provider nor the Customer shall be liable to the other or be deemed to be in breach of the Contract by reason of any delay in performing, or any failure to perform, any of its obligations in relation to the Services, if the delay or failure was due to any cause beyond that party’s reasonable control. Without prejudice to the generally of the foregoing, the following shall be regarded as causes beyond either party’s reasonable control: –
      • act of God, explosion, flood, tempest, fire or accident.
      • war or threat of war, sabotage, insurrection, civil disturbance or requisition.
      • acts, restrictions, regulations, byelaws, prohibitions or measures of any kind on the part of any governmental, parliamentary or local authority;
      • import or export regulations or embargoes;
      • strikes, lock-outs, or other industrial actions or trade disputes (whether involving employees of either the Provider or the Customer or of a third party);
      • difficulties in obtaining raw materials, labour, fuel, part or machinery.
      • power failure or breakdown in machinery.
    • If a force majeure event continues for a period of 3 months or more then either party shall be entitled to terminate the Services on written notice to the other party. Neither party shall have any liability to the other in respect of the termination of the Services as a result of a Force Majeure event.
    • Irrespective of the occurrence of any Force Majeure event, the Customer shall continue to pay all Fees due unless the Customer is unable to use the Services in which case the charges, or part thereof depending on the extent to which the customer is unable to use the Services, shall cease until the Services, or relevant part, are available for use.

17. Compliance with Laws and Anti-Bribery laws

Each party shall:

• Comply with all applicable law and laws relating to anti-bribery and anti-corruption including without limitation the Bribery Act 2010 (Anti-Bribery Laws) and shall not do, or omit to do, any act that will cause the other party to be in breach of the Anti-Bribery Laws.
• Not engage in any activity, practice or conduct which would constitute an offence under the Anti-Bribery Laws if such activity, practice or conduct had been carried out in the United Kingdom.
• Promptly report to the other party any request or demand for any undue financial or other advantage of any kind received by it in connection with the performance of the services.
• Maintain throughout the terms of the service provision its own anti-bribery policy including without limitation adequate procedures (as defined in section 7(2) Bribery Act 2010) to ensure compliance with the Anti-Bribery Laws and shall enforce such policy and procedures where appropriate.

18. Data Protection
    • In this clause 18: “Data Protection Legislation” means the UK GDPR (as defined in the Data Protection Act 2018), the Data Protection Act 2018, the Privacy and Electronic Communications (EC Directive) Regulations 2003 and any other law applicable to the processing of personal data, in each case as amended or replaced from time to time; “Customer Personal Data” means any personal data which the Provider processes on behalf of the Customer in providing the Services; “Sub-processor” means any third party appointed by the Provider to process Customer Personal Data; and “controller”, “processor”, “personal data”, “personal data breach”, “processing” and “data subject” have the meanings given to them in the Data Protection Legislation.
    • Each party shall comply with its obligations under the Data Protection Legislation. In respect of Customer Personal Data, the Customer is the controller and the Provider is the processor. The Customer shall ensure that it has all necessary lawful bases, and has given all necessary notices, to enable the Provider to process Customer Personal Data lawfully for the purposes of this Agreement.
    • The subject matter of the processing is the provision of the Services. The duration of the processing is the term of this Agreement and any period afterwards during which the Provider holds Customer Personal Data. The nature and purpose of the processing is the provision of IT support, managed IT, monitoring, cyber security, backup, cloud, connectivity and telecoms services, including handling support requests (with the assistance of automated and artificial intelligence-based tools, as described in clause 3.4) and administering user accounts, and using such tools to assist with service-related drafting, analysis and technical research as described in clause 3.4.The types of personal data processed are names, contact details, job titles, user account and authentication information, device and usage information, IP addresses, the content of support requests and correspondence, and any personal data held in the Customer’s systems, email and files to which the Provider has access. The categories of data subjects are the Customer’s employees, contractors, customers and suppliers, and any other individuals whose personal data is held in the Customer’s systems.
    • The Provider shall:
      • process Customer Personal Data only on the documented instructions of the Customer, which are set out in this Agreement and given through the Customer’s support requests and other written communications, unless required to do otherwise by law, in which case the Provider shall inform the Customer of that legal requirement before processing unless the law prohibits this;
      • ensure that persons authorised to process Customer Personal Data are subject to appropriate obligations of confidentiality;
      • implement appropriate technical and organisational measures to protect Customer Personal Data, taking into account the nature of the processing and the risks involved, including the controls maintained under the Provider’s ISO 27001 certified information security management system;
      • taking into account the nature of the processing, assist the Customer by appropriate technical and organisational measures, insofar as this is possible, in responding to requests from data subjects to exercise their rights;
      • assist the Customer in ensuring compliance with its obligations relating to the security of processing, the notification of personal data breaches, data protection impact assessments and prior consultation with the Information Commissioner, taking into account the nature of the processing and the information available to the Provider;
      • notify the Customer without undue delay, and in any event within 48 hours, after becoming aware of a personal data breach affecting Customer Personal Data, and provide such information as the Customer reasonably requires to meet its own obligations under the Data Protection Legislation;
      • make available to the Customer all information reasonably necessary to demonstrate compliance with this clause 18, and allow for and contribute to audits, including inspections, conducted by the Customer or an auditor mandated by the Customer, on reasonable prior written notice, during Working Hours, no more than once in any 12-month period (except following a personal data breach) and at the Customer’s cost; and
      • immediately inform the Customer if, in the Provider’s opinion, an instruction infringes the Data Protection Legislation.
    • The Customer gives the Provider general written authorisation to appoint Sub-processors. The Provider shall maintain a list of its current Sub-processors and make it available to the Customer on request. The Provider shall give the Customer at least 30 days’ prior notice by email of any intended addition to or replacement of a Sub-processor. The Customer may object to the change on reasonable data protection grounds by written notice to the Provider within 14 days of that notification, in which case the parties shall discuss the objection in good faith. The Provider shall not permit the proposed Sub-processor to process Customer Personal Data while a timely objection on reasonable data protection grounds remains unresolved. If the objection is not resolved within 30 days after receipt, the Provider may continue to provide the affected Services without that Sub-processor, or either party may terminate the affected Services on 30 days’ written notice, notwithstanding clause 10. Any Fees paid in advance for the period after such termination shall be refunded, and no early termination charge shall apply.
    • The Provider shall impose on each Sub-processor, by written contract, data protection obligations that offer at least the same level of protection for Customer Personal Data as those set out in this clause 18, and shall remain fully liable to the Customer for the performance of each Sub-processor’s obligations.
    • The Provider shall not transfer Customer Personal Data outside the United Kingdom, or permit a Sub-processor to do so, unless the transfer is to a country covered by UK adequacy regulations or is subject to appropriate safeguards under the Data Protection Legislation (such as the International Data Transfer Agreement or the International Data Transfer Addendum to the EU Standard Contractual Clauses).
    • The Provider shall not use, and shall ensure that its Sub-processors do not use, Customer Personal Data or the Customer’s confidential information to train, fine-tune or improve artificial intelligence or machine learning models and shall ensure that any provider of artificial intelligence models used by automated service desk tools retains prompts and outputs containing Customer Personal Data for no longer than 30 days, and that Customer Personal Data held in artificial intelligence assistants used by the Provider’s staff is retained only for as long as necessary to provide the Services.
    • On termination or expiry of this Agreement, the Provider shall, at the Customer’s written election, return or delete Customer Personal Data (and require its Sub-processors to do the same) within 90 days, unless the law requires it to be retained. Customer Personal Data held in backups shall be deleted in accordance with the Provider’s normal backup rotation and shall remain protected in accordance with this clause 18 until it is deleted.
    • This clause 18 does not apply to personal data which the Provider processes as a controller for its own purposes, such as account administration, billing, marketing, the recording of calls to and from the Provider’s service desk and the review of service quality, which is governed by the Provider’s privacy policy referred to in clause 5.6.
    • The Provider’s liability under or in connection with this clause 18 is subject to clause 13.
19. Applicable Law and Jurisdiction
    • This Agreement shall be governed and construed in accordance with the law of England and Wales and the parties shall submit to the exclusive jurisdiction of the English and Welsh courts.