Terms and conditions governing Cyber Essentials and CE+ certification services
1.1 Definitions
1.2 Interpretations
Singular words include plural; persons include companies; references to Acts of Parliament include modifications and amendments; consent requires written approval.
The Service Provider will:
3.1 General Obligations
The Client undertakes to:
3.2 Authorisation for Security Testing
IMPORTANT: Computer Misuse Act 1990 Compliance
The Client expressly authorises Net Sec Group Limited to perform Security Testing strictly per current Cyber Essentials methodology against Authorised Targets.
The Client confirms:
3.3 Acknowledgement of Testing Risks
The Client acknowledges that Security Testing may result in reduced performance, system errors, data corruption or temporary loss of availability and that testing cannot guarantee identification of all vulnerabilities.
If Net Sec Group reasonably believes active compromise exists, it will notify the Client and may suspend or modify testing.
3.4 Data Protection Compliance
The Client confirms lawful basis for processing, proper notices to data subjects, and necessary consents for Net Sec Group access. Net Sec Group will process personal data only as necessary for testing, validation, and reporting in accordance with UK GDPR and Data Protection Act 2018.
Refunds
Refund requests considered case-by-case. No refunds will be issued once the assessment has commenced or if the Client fails to complete the Cyber Essentials questionnaire within 6 months.
Unless otherwise agreed:
Each Party keeps the other Party's confidential information confidential and secret, using it only for Agreement performance purposes.
Confidential Information includes:
Exceptions (not confidential):
This clause survives Agreement termination.
THE CLIENT'S ATTENTION IS PARTICULARLY DRAWN TO THIS CLAUSE.
8.1 Warranty
Service Provider warrants use of reasonable care and skill in performing Services.
8.2 Excluded Losses
No Party liable for: Loss of profit, market, business, or contract, goodwill damage, loss of projected or anticipated savings, revenue loss, or consequential/indirect loss.
8.3 Unlimited Liability
Nothing limits liability for:
8.4 Liability Cap
Except in the case of death or personal injury caused by the Service Provider's negligence, the liability of the Service Provider shall not exceed the Fee paid.
Time shall not be of the essence for Service Provider performance. Dates and times specified are estimates only.
Agreement terminates following completion of Services and payment of Fees.
11.1 Force Majeure
Neither Party liable for delays/failures from circumstances beyond reasonable control. If circumstances continue beyond 6 months, either Party may terminate via written notice.
11.2 Amendments
Agreement may only be amended in writing by duly authorised representatives.
11.3 Assignment
Neither Party may assign, delegate, sub-contract, mortgage, charge, or transfer rights/obligations without prior written agreement, except to assignees of entire business (with written undertaking).
11.4 Entire Agreement
This Agreement contains the whole agreement between the Parties and supersedes any prior written or oral agreements. Fraud liability is not excluded.
11.5 Waiver
No failure or delay in exercising rights impairs or waives them.
11.6 Agency, Partnership etc
Agreement creates only contractual relationship, not partnership, joint venture, agency, or fiduciary relationship.
11.7 Announcements
No public announcement or information disclosure without other Party approval, except for legal/regulatory compliance.
11.8 Notices
Written notices via first class mail, air mail, or email (confirmed by mail/air mail). Deemed received: 3 working days (inland first class), 7 working days (air mail), next working day (email).
If any provision is prohibited by law or judged unlawful/void/unenforceable, it shall be severed without modifying remaining provisions.
The validity, construction and performance of this Agreement shall be governed by the laws of England and Wales and shall be subject to the exclusive jurisdiction of the courts of England and Wales.
Under the Contracts (Rights of Third Parties) Act 1999, this Agreement is not intended to, and does not, give any person who is not a Party to it any right to enforce any of its provisions.
Net Sec Group Limited
Company Registration: 12960489
Last Updated: January 2026. These terms govern all Cyber Essentials and Cyber Essentials Plus services provided by Net Sec Group Limited.