Notice Labs

Terms of Service

Last updated

Parties

These terms are a contract between Notice Labs (“Notice Labs”, “we”, “us”), based in London, United Kingdom, and the customer entity that creates a Notice Labs account (“you”, “Customer”).

By creating an account or using Notice Labs, you agree to these terms. If you’re doing so on behalf of a company, you confirm you’re authorized to bind that company.

What Notice Labs is

Notice Labs is a hosted service for publishing a public “trust center” page: security controls, compliance status, documents shared under access request, a subprocessor directory, a vulnerability disclosure form, a privacy/data subject request form, and update subscriptions for your own customers and prospects.

Accounts

You need an account to use Notice Labs. You’re responsible for:

  • the accuracy of the information you provide when signing up,
  • keeping your login credentials secure and not sharing them,
  • everything that happens under your account.

Tell us promptly at security@noticelabs.co if you think your account has been compromised.

Subscriptions and billing

  • Plans. Notice Labs is offered on Pro and Enterprise plans, billed monthly or annually, at the prices shown on our pricing page at the time you subscribe.
  • Billing. All payments and billing are handled by Polar, acting as merchant of record. By subscribing, you also agree to Polar’s applicable terms for the purchase. We don’t collect or store your card details.
  • Plan changes. While your subscription is active, you can switch plan or billing interval at any time from your billing settings. The change takes effect immediately, and the price difference is prorated onto your next invoice.
  • Cancellation. You can cancel at any time. Cancellation takes effect at the end of your current billing period — you keep access until then, and we don’t provide partial refunds for unused time except where required by law.
  • What happens when a subscription ends. When your subscription ends (by cancellation or non-payment), your public trust center page goes offline and is no longer accessible to your visitors. We keep your account and trust-center content for 30 days afterward in case you resubscribe, then delete it; backups roll off within a further 35 days. See “How we retain and delete data” below for the full schedule.

Your content

“Customer Content” means the security controls, documents, logos, compliance claims, subprocessor lists, and any other material you upload to or publish through Notice Labs.

  • Ownership. You own your Customer Content. We don’t claim ownership of it.
  • Licence to us. You grant us a licence to host, store, display, and transmit your Customer Content as needed to operate the service — for example, publishing it on your public trust center page and handling access requests to it.
  • Your responsibility. You’re solely responsible for your Customer Content, including making sure any security, compliance, or certification claims you publish are accurate. We don’t verify or audit the claims you make on your trust center page.

Acceptable use

You agree not to use Notice Labs to:

  • publish content that’s false, misleading, or that you don’t have the right to publish,
  • upload malware or attempt to interfere with the service or other customers’ use of it,
  • attempt to access accounts, data, or systems you’re not authorized to access,
  • use the service in a way that breaches applicable law.

We may suspend or terminate accounts that breach this section.

Processing personal data on your behalf

When visitors to your trust center submit document access requests, privacy requests, vulnerability reports, or update sign-ups, we process that data as your processor, on your instructions, under our Data Processing Agreement, published on our trust center. That agreement forms part of these terms.

How we retain and delete data

  • Your account and trust-center content: kept while your subscription is active, deleted 30 days after it ends (so you can resubscribe without starting over), or sooner if you ask. Backups roll off within a further 35 days.
  • Visitor submissions (access requests, privacy requests, vulnerability reports, notify-me subscribers) are held on your behalf and deleted with your trust center, or earlier at your request.
  • Document access links expire 30 days after they’re issued.
  • Billing and tax records: kept 6 years, to meet HMRC requirements.
  • Support correspondence: kept 2 years after your last contact with us.
  • Security and access logs: kept 90 days.

Service availability

We aim to keep Notice Labs available and reliable, but we don’t offer a service level agreement or uptime guarantee. We may need to take the service down temporarily for maintenance, and we’ll try to give notice when we can.

Suspension

We may suspend your access to Notice Labs if:

  • your account is significantly overdue on payment,
  • we reasonably believe your use poses a security risk to us or other customers,
  • you’re in material breach of these terms and haven’t fixed it after we’ve told you.

We’ll aim to give you notice and a chance to resolve the issue first, except where the risk requires immediate action.

Intellectual property

Aside from your Customer Content, everything that makes up Notice Labs — the software, design, and branding — belongs to us or our licensors. These terms don’t grant you any rights to it beyond what’s needed to use the service.

Confidentiality

Each party will keep the other’s confidential information confidential and use it only to perform this agreement, except where disclosure is required by law.

Warranties and disclaimer

We’ll provide Notice Labs with reasonable skill and care. Beyond that, the service is provided “as is”, and to the extent permitted by law we disclaim all other warranties, express or implied, including fitness for a particular purpose.

Limitation of liability

To the extent permitted by law:

  • Neither party excludes liability for things that can’t legally be excluded, such as fraud or death or personal injury caused by negligence.
  • Our total liability to you arising out of or in connection with these terms is capped at the total fees paid or payable for the service in the 12 months before the claim arose, including fees paid through our merchant of record.
  • Neither party is liable for indirect or consequential losses.

Indemnity

You’ll indemnify us against claims, losses, and costs arising from your breach of these terms or from Customer Content you publish that infringes someone else’s rights or breaches the law — except to the extent caused by our own breach or negligence.

Termination

Either party may terminate for the other’s material, uncured breach, or as otherwise set out above. On termination, your right to use the service ends, your trust center page goes offline, and each party returns or deletes the other’s confidential information, subject to our data retention practices and the DPA.

Changes to these terms

We may update these terms from time to time. If we make material changes, we’ll give you at least 30 days’ notice before they take effect. Continuing to use Notice Labs after that means you accept the updated terms.

General

  • Entire agreement. These terms, together with the DPA and anything they expressly incorporate, are the entire agreement between us about Notice Labs, and supersede any earlier discussions or agreements on the same subject.
  • Assignment. You may not assign or transfer these terms without our consent. We may assign these terms in connection with a merger, acquisition, or sale of all or substantially all of our business.
  • Notices. We’ll send you notices under these terms to the email address on your account. Send us notices at hello@noticelabs.co.
  • Severability. If any part of these terms is found unenforceable, the rest remains in effect.
  • Force majeure. Neither party is liable for a failure to perform caused by events beyond its reasonable control.
  • No waiver. Failing to enforce a right under these terms isn’t a waiver of that right.

Governing law

These terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction over any dispute arising from them.

Contact