Website and Platform Terms and Conditions

Last updated: 05/07/2026

This website and platform are operated by Privacy360 Limited ("Privacy360", "we", "us", "our"), a company registered in England and Wales.

Registered office: Grosvenor House, 11 St Pauls Square, Birmingham, B3 1RB, United Kingdom.

These Terms and Conditions ("Terms") govern your use of:

the privacy360.io marketing website and related pages (the "Website"); and
the Privacy360 SaaS platform and its modules, whether on a free trial, free plan, or paid subscription (the "Platform").

If you have a separate signed master services agreement or order form with us, that agreement will prevail to the extent of any conflict for paid subscriptions.

2. Acceptance of these Terms

By accessing or using the Website and/or creating an account on the Platform, you confirm that you accept these Terms and agree to comply with them. If you do not agree, you must not use the Website or Platform.

If you are using the Platform on behalf of an organisation, you confirm that you are authorised to accept these Terms on its behalf.

3. Changes to these Terms and to the services

We may update these Terms from time to time. The updated version will be effective when posted on the Website, with the "Last updated" date amended accordingly. Continued use of the Website or Platform after changes are posted constitutes your acceptance of the updated Terms.

We may update, enhance, suspend or discontinue any feature, module or environment (including trials and free plans) for business, operational, legal or security reasons. Where changes are material for paying customers, we will take reasonable steps to notify the account owner in advance (for example, by email or in-product notice), subject to any contractual commitments we have agreed.

4. Privacy360 modules and services

The Platform provides an integrated set of modules to support privacy and AI governance, which may include (as made available on your plan):

assessments, DPIAs, LIAs and FRIA-style impact assessments;
Records of Processing Activities (ROPA);
cross-border transfer reviews and vendor risk assessments;
DSAR / data subject rights management;
breach and incident management;
policy and document management;
training and awareness modules;
AI system registry and AI governance tooling; and
reporting, dashboards and evidence repositories.

The specific modules, features, limits and support levels available to you will depend on your selected plan (for example, free version, trial, or paid subscription) as described on our Website, order form or in-app plan details.

We may introduce new modules or retire legacy modules over time, and will provide reasonable notice of material deprecation for paid customers where practicable.

5. Free trial and free version

We may offer, at our discretion:

a time-limited free trial of a paid plan; and/or
an ongoing free version with restricted features, usage limits or support.

Where you access a free trial or free version:

the Platform is provided "as is" with no service-level commitment or uptime guarantee;
we may modify, suspend or discontinue any free access at any time;
we may require you to move to a paid plan to continue using the Platform or particular modules; and
some features, modules and integrations may be disabled, rate-limited or subject to lower priority support.

At the end of a free trial, if you do not upgrade to a paid plan, we may restrict access, downgrade your account to a free tier, or delete or anonymise data after a reasonable period in line with our data retention practices, and as otherwise stated in our Privacy Notice.

6. Paid plans, usage limits and billing

Paid subscriptions, plan tiers, user numbers, environments and any usage-based allowances (for example, numbers of assessments, DSARs, vendors, entities or AI systems) are defined on our pricing pages, order forms or in-app plan descriptions.

Key points:

Subscription term: Paid plans typically run on a monthly or annual subscription basis, renewing automatically at the end of each term unless cancelled in accordance with these Terms or any signed agreement.
Fees: You agree to pay the fees applicable to your selected plan and any add-ons. Prices may be shown in GBP or other currencies and may be subject to taxes, levies or duties.
Billing and changes: We may adjust pricing at renewal or on plan change, with reasonable advance notice in accordance with applicable law and any contract terms.
Usage limits: If you exceed plan limits (for example, number of users, entities, assessments, DSARs, vendors, environments or AI calls), we may:
- restrict further use until you upgrade; and/or
- charge additional fees or move you to a higher plan, following notice to the account owner.
Non-payment: If fees are not paid on time, we may suspend or downgrade access to the Platform until amounts are settled. We may also charge interest, reasonable recovery costs, or both, where permitted by law and contract.

Where a separate order form or master services agreement exists, its commercial terms (including fees, invoicing, tax, and price review provisions) apply.

7. Accounts, authorised users and access

Access to the Platform is restricted to registered users ("Authorised Users").

You are responsible for:

ensuring registration information for your organisation and Authorised Users is accurate and kept up-to-date;
keeping login credentials confidential and secure;
ensuring that Authorised Users use the Platform only in accordance with these Terms and your internal policies; and
promptly notifying us and/or your organisation if you believe an account has been compromised or misused.

We may suspend or terminate a user account, or take other appropriate action, where we reasonably believe there has been unauthorised access, compromised credentials, misuse, or a security or legal risk.

8. Your content and customer data

"Customer Data" means all data, documents and other content that you or your Authorised Users upload to or generate within the Platform, including information about processing activities, assessments, incidents, vendors, AI systems and related records.

You retain ownership of Customer Data. You grant Privacy360 a non-exclusive, worldwide licence to host, store, process, transmit, display and back up Customer Data solely for the purpose of providing, maintaining, securing and supporting the Platform and related services, and for any additional purposes expressly agreed in a contract with you.

You are responsible for:

the lawfulness, accuracy and completeness of Customer Data;
ensuring you have all necessary rights, consents and notices in place to upload and process Customer Data in the Platform;
configuring the Platform and AI-assisted features in line with your own governance, risk and compliance requirements; and
managing internal access and role configurations for your users.

We will handle personal data within Customer Data as a processor in accordance with our data processing terms and our Privacy Notice, as made available on the Website or by separate agreement.

9. Acceptable use

You must not:

use the Website or Platform in any way that violates applicable law or regulation;
use the Platform to store or transmit infringing, defamatory, discriminatory, harmful, or otherwise unlawful content;
use the Platform to upload malicious code or content that may damage or interfere with systems or data;
attempt to gain unauthorised access to the Platform, our systems or related networks;
interfere with or disrupt the integrity, performance or security of the Platform;
reverse engineer, decompile or attempt to derive the source code of the Platform, except to the extent such restrictions are prohibited by applicable law; or
circumvent any usage, access or security controls.

We reserve the right to monitor use of the Platform for security, operational and compliance purposes, and to suspend, restrict or disable access where we reasonably believe there is misuse, a security incident, legal risk or breach of these Terms.

10. Intellectual property

All intellectual property rights in and to the Website, Platform, underlying software, documentation, branding, logos and related materials are owned by or licensed to Privacy360.

Except for the limited rights expressly granted under these Terms and any relevant order form:

you are granted a non-exclusive, non-transferable, revocable licence for Authorised Users to access and use the Platform during the subscription term solely for your internal business purposes; and
no rights, title or interest in the Platform or our IP are assigned or transferred to you.

You must not use our trade names, trademarks or logos without our prior written permission.

11. No legal or compliance advice

The Website and Platform may include templates, checklists, assessments, guidance notes, scoring models, dashboards, AI-generated suggestions and other outputs.

These are provided for general information and operational support only and do not constitute legal, regulatory, risk, cybersecurity or professional advice.

You remain fully responsible for:

your own legal, regulatory and governance compliance;
obtaining appropriate legal or professional advice; and
reviewing, interpreting and approving Platform outputs (including AI outputs) before making decisions.

We do not accept responsibility for your reliance on general information, automated outputs, AI-generated content or suggested actions provided by or through the Platform.

12. Third-party services and integrations

The Platform may integrate or interoperate with third-party applications, services or data sources (for example, email, ticketing, collaboration, AI providers or security tools).

Your use of third-party services is subject to their own terms, privacy policies and charges. We are not responsible for third-party services and do not warrant their availability, security or performance, even where they are integrated with the Platform.

You are responsible for evaluating whether third-party services are appropriate for your use and for any data you choose to share with them.

13. Data protection and security

Our handling of personal data, including our use of cookies and similar technologies, is described in our Privacy Notice as published on the Website.

We implement technical and organisational measures designed to protect the Platform and Customer Data against unauthorised access, loss, misuse, alteration or destruction, taking into account the nature of the data and the risks involved. No system can be guaranteed to be entirely secure, but we maintain and improve controls over time.

You are responsible for:

configuring access controls and role-based permissions within your account;
managing user onboarding/offboarding;
maintaining secure endpoint and network environments; and
implementing appropriate governance and security measures on your own systems and within your organisation.

14. Website content and third-party links

Website content is provided for general information only and may not always be up to date, complete or tailored to your context.

We may link to third-party websites for convenience. We have no control over, and accept no responsibility for, the content, security or practices of third-party sites. Any reference to third-party products or services does not amount to endorsement.

15. Disclaimers

The Website and Platform (including any free trial or free version) are provided on an "as is" and "as available" basis.

To the fullest extent permitted by law, we:

do not guarantee that the Website or Platform will be uninterrupted, secure or error-free;
do not guarantee that the content, outputs or AI-assisted features are accurate, complete or suitable for any particular purpose; and
exclude all warranties, representations and conditions, whether express or implied, including implied warranties of merchantability, fitness for a particular purpose and non-infringement.

16. Limitation of liability

Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law (including liability for death or personal injury caused by negligence, or for fraud).

Subject to the above, and to any different caps agreed in a signed contract:

we will not be liable for any loss of profits, revenue, business, goodwill or data, or for any indirect, special or consequential losses arising out of or in connection with these Terms or your use of the Website or Platform; and
for business users, our total aggregate liability arising out of or in connection with these Terms and your use of the Website and Platform (whether in contract, tort, including negligence, or otherwise) will be limited to the higher of:
- the amount paid by you to us for Platform access in the 12 months preceding the event giving rise to the claim; or
- £500.

For free trials and free versions, our total aggregate liability is limited to £100.

17. Indemnity (business users)

If you use the Platform in the course of business, you agree to indemnify and hold harmless Privacy360 and its officers, employees and affiliates from and against any claims, damages, losses, costs and expenses (including reasonable legal fees) arising out of or related to:

your breach of these Terms;
your misuse of the Website or Platform; or
any claim that Customer Data infringes third-party rights or violates applicable law.

18. Term, suspension and termination

These Terms apply from the first time you access the Website or create a Platform account and continue until terminated.

We may suspend or terminate your access to the Platform (or any part of it) if:

you materially breach these Terms or any applicable order form and do not remedy that breach within a reasonable period after we notify you;
we reasonably believe your use presents a security risk, legal risk or harm to other customers, users or the Platform; or
we are required to do so by law or by a competent authority.

On termination or expiry of a paid subscription, and subject to any applicable data processing commitments:

we will provide a limited period for you to export Customer Data (for example, via in-app export or APIs) before deleting or anonymising it in line with our retention practices; and
certain audit and security logs or contract records may be retained for compliance, risk and legal reasons as described in our Privacy Notice.

19. Governing law and jurisdiction

These Terms, and any dispute or claim arising out of or in connection with them, are governed by the laws of England and Wales, without regard to conflict-of-laws rules.

The courts of England and Wales have exclusive jurisdiction over any dispute or claim relating to these Terms or your use of the Website or Platform, although we may bring proceedings in other jurisdictions where appropriate (for example, to enforce judgments or injunctive relief).

20. Other important terms

Entire agreement: These Terms, together with any applicable order form or separate written agreement, constitute the entire agreement between you and us regarding the Website and Platform.
Severability: If any provision of these Terms is found to be invalid or unenforceable, the remaining provisions will remain in full force and effect.
No waiver: Any failure or delay by us to enforce any provision shall not be a waiver of that or any other provision.
Assignment: We may assign or transfer our rights and obligations under these Terms to another organisation (for example, as part of a group restructuring or sale). You may not assign or transfer your rights or obligations without our prior written consent.