This Agreement is made on the date of the last signature below, as negotiated herein, is entered into by and between:

1. Amber Dyer and Joanna Dyer trading as Pink Sands Global of Somerset, UK (the supplier); and 

2. of  (the customer) 

MEANINGS:

1. In this Agreement, the following words are defined:

Agreement	this agreement for the provision of the Services (as defined below) including any schedules;
Confidential Information	in relation to either party, any information (whether or not stated to be confidential or marked as such) which that party discloses to the other, or which the other party obtains from any information disclosed to it by that party, either orally or in writing or by any other means, under or in connection with this Agreement;
Deliverables	all documents, items, plans, products, goods and materials supplied by the Supplier, including any methodologies, ideas, designs, computer programs, data, disks, tapes, and reports, in whatever form, which are developed, created, written, prepared, devised or discovered by the Supplier or its agents, sub-contractors, consultants and employees in relation to the Services;
Effective Date	Date of last signature applied
Assets	any images, brand kits, system logins, or copy requested or used directly or indirectly in the supply of the Services, by the Supplier or its subcontractors;
Intellectual Property Rights	any invention, patent, utility model right, copyright and related right, registered design, unregistered design right, trade mark, trade name, internet domain name, design right, design, service mark, database rights, topography rights, rights in get-up, rights in goodwill or to sue for passing off and any other rights of a similar nature or other industrial or intellectual property rights owned or used by the Supplier in any part of the world whether or not any of the same is registered (or capable of registration), including applications and the right to apply for and be granted, extensions or renewals of, and rights to claim priority from, such rights and all equivalent or similar rights or protections which subsist now or will subsist in the future;
Services	the services which are set out and described in Schedule 1 of this Agreement, together with any other services which the Supplier provides or agrees to provide to the Customer through the change control procedure set out below (Change Control)
Service Charges	the charges for the Services, which are set out in Schedule 2 of this Agreement;
Specification	the description or specification for the Services as set out in Schedule 1 of this Agreement or as otherwise agreed between the parties through Change Control;
Working Day	any day other than a Saturday, Sunday or public holiday in

2. In this Agreement, unless the context requires a different interpretation:
   1. the singular includes the plural and vice versa;
   2. references to sub-clauses, clauses, schedules or appendices are to sub-clauses, clauses, schedules or appendices of this Agreement;
   3. a reference to a person includes firms, companies, government entities, trusts and partnerships;
   4. “including” is understood to mean “including without limitation”;
   5. reference to any statutory provision includes any modification or amendment of it;
   6. the headings and subheadings do not form part of this Agreement; and
   7. “writing” or “written” will include fax and e-mail unless otherwise stated

PROVISION OF SERVICES

3. The Supplier shall provide the Services to the Customer on the terms and conditions of this Agreement from the Effective Date and as set out in Schedule 1
4. The Services will be provided by the Supplier either:
   1. on an on-going basis; or
   2. in response to each request from the Customer from time to time

as specified in Schedule 1.

5. The Agreement begins on the Effective Date and will continue 
6. The Supplier shall provide the Services (including any Deliverables) from home, in accordance with the Specification in all material respects. Time is of the essence for any dates for delivery of the Services under this Agreement, unless specifically stated otherwise in any schedule.
7. The Supplier shall perform the Services with reasonable care and skill, in accordance with:
   1. generally recognised commercial practises and standards in the applicable industry; and
   2. all laws and regulations applicable to the Services, including all laws and regulations related to (i) anti-bribery and corruption, and (ii) data protection.

CUSTOMERS OBLIGATIONS

8. No amendment shall be made to Schedule 1 except on terms agreed in writing by the Parties in accordance with the clause below 
9. The Customer must:
   1. co-operate with the Supplier in all matters relating to the Services;
   2. provide, in a timely manner, any Assets, materials and any information as the Supplier may reasonably require; in the case of Equipment, the Customer shall ensure that it is in good working order and suitable for the purposes for which it is used, and in the case of information, the Customer shall ensure that it is accurate in all material respects;
   3. obtain and maintain all necessary licences and consents and comply with all relevant legislation in relation to the Services before the date on which the Services are to start;
   4. provide to the Supplier, to access any team members associated with the projects/ work the Supplier is carrying out

DEFECTIVE SERVICES

10. The Supplier shall promptly notify the Customer of:
    1. any delays or problems from time to time in the provision of the Services of which the Supplier becomes aware;
    2. any circumstances from time to time which may prevent the Supplier from providing the Services in accordance with this Agreement together with (where practicable) recommendations as to how such circumstances can be avoided; and
    3. any complaint (whether written or not) or other matter which comes to its attention and which it reasonably believes may give rise to any loss by or claim against the Customer or which may result in any adverse publicity for the Customer.
11. The Customer shall, without limiting any right or remedy of the Customer, promptly report to the Supplier any defects in the Supplier’s performance of the Services as soon as reasonably practicable after any such defect comes to the attention of the Customer.
12. Where any defect in the provision of the Services is reported to the Supplier by the Customer or otherwise comes to the attention of the Supplier, the Supplier shall, without limiting any other right or remedy of the Customer, use its reasonable endeavours to provide such further services as are necessary in order to rectify the default as soon as is reasonably practicable

CHARGES, PAYMENTS AND TIME RECORDS

13. The charges for the Services are as set out in the Schedule. We reserve the right to change our charges with 30 days’ prior notice. 
14.  Where the Services are provided for a fixed price, the total price for the Services shall be the amount set out in the Schedule 2 – Charges.
15. For Services where fees are payable in one single payment, we will invoice you for the fixed price in advance.

16. Where the fees are to be made by a deposit, stage payments or retainers we will invoice you for the deposit in advance and for each stage payment or retainer at the time or at the stage of the project specified in the Schedule 2 – Charges.
17. Where the Services are provided on a time-and-materials basis:
    1. the charges payable for the Services shall be calculated in accordance with our standard hourly or daily fee rates in force at that time;
    2. our daily fee rates are calculated on the basis of an eight-hour day worked between 9.00 am and 5.00 pm on weekdays (excluding weekends and public holidays);
    3. our normal office hours are 9am to 5pm Monday to Friday (excluding Bank Holidays). If you request Services outside of these hours, we reserve the right to charge an additional 50% of the fees.
    4. we will invoice you monthly in arrears unless we have agreed in writing otherwise.
18. If the Services are being provided as part of a retainer, all hours worked in addition to the number of hours included in the retainer will be charged at the standard hourly rate applicable at that time (and not the retainer rate). Any hours included in a retainer not used in one month may be carried over to the next month but must be used in that following month (and if not used will still be charged).
19. All of the time that we spend working on the Services, including without limitation research, administration and communication (whether by telephone, email, fax or otherwise) will be chargeable at the applicable hourly rate or included in the retainer hours (as the case may be).
20. All charges are stated inclusive of VAT (where necessary).
21. You must pay each of our invoices in full, and in cleared funds by the payment method specified on the invoice, on presentation of the invoice. 
22. If the Services are being provided as part of a retainer, payment for each month is due monthly in advance and invoices will be delivered accordingly.  Otherwise, we shall invoice you as soon as practicable after the last day of each month.
23. Without prejudice to any other right or remedy, if you fail to pay the invoice on the due date, we may:
    1. charge interest on the sum due from the due date for payment at the annual rate of 4% above the base lending rate from time to time of the Bank of England, accruing on a daily basis and being compounded quarterly until payment is made (whether before or after any court judgement) and you shall pay the interest immediately on our demand; and
    2. suspend all Services until payment has been made in full.
24. All fees and charges are stated exclusive of expenses incurred by us. Subject to your prior written consent, you will reimburse us for all training venues, hotels, subsistence, travelling, stationery, materials, postage, other administrative costs and any other ancillary expenses reasonably incurred by us in providing the Services. Such expenses may be invoiced by us at cost at such times as we think appropriate.

CHANGE CONTROL

25. The Customer may at any time during the term of this Agreement request an increase or decrease in the volume of the Services, a change in the Specification, or the addition of new Services (Change Request) by notifying the Supplier in writing of its requirements.
26. The Supplier shall give due consideration to any Change Request from Customer and shall, within 3  Working Days of receiving a Change Request from the Customer:
    1. confirm its acceptance of the Change Request, without any further variation to the terms of the Agreement, in which case the parties shall execute a variation to the Agreement as soon as reasonably practicable and the Supplier shall implement the Change Request accordingly; or
    2. provide a written proposal for accepting the Change Request, subject to any variation that it reasonably considers necessary to the Services, the Specification or the Service Charges, including any new Services (Change Proposal); or
    3. if the Supplier believes it is not reasonably practicable to accept the Change Request, with or without any such variation, provide the Customer with a written statement of its reasons for doing so.
27. Any Change Proposal provided by the Supplier under the above clause shall be based on the Service Charges or, if this is not appropriate, shall be a fair and reasonable quotation for the Change Request.
28. The Customer shall give due consideration to the Supplier’s Change Proposal under the clause above and shall within 3 Working Days after receipt of the Change Proposal either give the Supplier a written notice accepting the Change Proposal (subject to or without further negotiation) or rejecting the Change Proposal. If the Customer accepts the Change Proposal, the parties shall as soon as reasonably practicable execute a variation to the Agreement and the Supplier shall implement the agreed variation.
29. The Supplier shall have the right to make any changes to the Services which are necessary to comply with any applicable law or safety requirement, provided that the Supplier gives the Customer reasonable notice of such changes and that such changes do not materially affect the nature/scope of the Services or the Service Charges.

INDEMNITY

30. The Supplier shall indemnify the Customer against any claim by any other person that the provision of the Services to the Customer in accordance with this Agreement infringes any Intellectual Property Rights of that other person.

LIABILITY AND INSURANCE

31. If the Supplier’s performance of its obligations under this Agreement is prevented or delayed by any act or omission of the Customer, its agents, sub-contractors, consultants or employees, the Supplier shall not be liable for any costs, charges or losses sustained or incurred by the Customer that arise directly or indirectly from such prevention or delay.

32. Nothing in this Agreement limits or excludes either party’s liability for:
    1. fraud or fraudulent misrepresentation; or
    2. breach of the terms implied by section 2 of the Supply of Goods and Services Act 1982 (title and quiet possession); or
    3. any other liability which cannot be limited or excluded by applicable law.
33. Subject to the above clause and the clause above (Indemnity), neither party shall have any liability to the other party, whether in contract, tort (including negligence), for breach of statutory duty, or otherwise, arising under or in connection with this Agreement for:
    1. loss of profits;
    2. loss of sales or business;
    3. loss of agreements or contracts;
    4. loss of anticipated savings;
    5. loss of or damage to goodwill;
    6. loss of use or corruption of software, data or information;
    7. any indirect or consequential loss.
34. Subject to the two preceding clauses and the clause above (Indemnity), the total liability of  the Supplier  for any other loss of the  Customer  in respect of any one event or series of connected events shall not exceed £100
35. The terms implied by sections 3 to 5 of the Supply of Goods and Services Act 1982 are, to the fullest extent permitted by law, excluded from this Agreement.

CONFIDENTIALITY

36. Each party will only use Confidential Information to perform its obligations under the Agreement and will not cause or allow the information to be disclosed except:
    1. where required by law, court order or any governmental or regulatory body;
    2. to any of its employees, officers, sub-contractors, representatives or advisers who need to know the information in order to discharge its obligations under the Agreement and agree only to use the information for that purpose and not to cause or allow disclosure of that information;
    3. where the information has become generally available to the public (other than as a result of disclosure in breach of the Agreement by the party or any of its employees, officers, sub-contractors, representatives or advisers);
    4. where the information was available or known to it on a non-confidential basis before being disclosed under the Agreement; 
    5. where the information was developed by or for it independently of the Agreement and is received by persons who are not the disclosing party.

INTELLECTUAL PROPERTY

37. Subject to the clause below, the Supplier reserves all Intellectual Property Rights (if any) which may subsist in any Deliverables, or in connection with, the provision of the Services. The Supplier 

reserves the right to take such action as may be appropriate to restrain or prevent the infringement of such Intellectual Property Rights.

38. The Supplier licences all such rights to the Customer free of charge and on a non-exclusive, worldwide basis to such extent as is necessary to enable the Customer to make reasonable use of the Deliverables and the Services.
39. If this Agreement is terminated, this licence will automatically terminate, unless formally passed over through a Intellectual Property Agreement

DATA PROTECTION

40. Each party shall comply with its obligations, and may exercise its respective rights and remedies under Schedule 1

ANTI-BRIBERY

41. The Supplier and its agents, sub-contractors, consultants or employees shall:
    1. comply with all applicable laws, regulations, statutes, and codes relating to anti-bribery and anti-corruption including but not limited to the Bribery Act 2010 (Bribery Laws);
    2. not commit an offence under sections 1, 2 or 6 of the Bribery Act 2010;
    3. comply with  any relevant industry code related to Anti-Bribery (Bribery Policies);
    4. have, maintain, and enforce throughout the term of this Agreement its own policies and procedures, to ensure compliance with the Bribery Laws and the Bribery Policies; and
    5. promptly report to the Customer any request or demand for any undue financial or other advantage of any kind received by the Supplier in connection with the performance of this Agreement.

CIRCUMSTANCES BEYOND THE CONTROL OF EITHER PARTY

42. Neither party shall be liable for any failure or delay in performing their obligations where such failure or delay results from any cause that is beyond the reasonable control of that party.
43. Such causes include, but are not limited to: power failure, Internet Service Provider failure, acts of God, epidemic, pandemic, civil unrest, fire, flood, droughts, storms, earthquakes, collapse of buildings, explosion or accident, acts of terrorism, acts of war, governmental action, any law or any action taken by a government or public authority, including without limitation imposing an export or import restriction, quota or prohibition, or any other event that is beyond the control of the party in question.
44. The party affected by a circumstance beyond its control shall use all reasonable endeavours to mitigate the effect of the force majeure upon the performance of its obligations.
45. The corresponding obligations of the other party will be suspended to the same extent as those of the party affected by a force majeure event.
46. If the delay continues for a period of 90 days, either party may terminate or cancel the Services to be carried out under this Agreement.

TERMINATION

47. If you are purchasing the Services as a consumer, that is you are acting for purposes which are wholly or mainly outside of your trade, business, craft or profession:
    1.  you have the right to cancel this agreement within 14 days of the date of this agreement by emailing us at support@pinksandsglobal.com or by using the form of cancellation annexed to this agreement at Annex 1. To meet the cancellation deadline, it is sufficient for you to send your communication concerning your exercise of the right to cancel before the cancellation period has expired. If you cancel this agreement, we will reimburse to you all payments received from you in relation to the agreement within 14 days after the date on which we were informed about your decision to cancel this Contract; and
    2. notwithstanding paragraph (a) above, you agree that we may begin the supply of digital content not on a tangible medium before the end of the cancellation period set out in such paragraph and you acknowledge that you will lose your cancellation rights in relation to such digital content; and
    3. in relation to the provision of any services under this Contract:
       1. you hereby request immediate performance of the Contract and acknowledge that you will lose your right of withdrawal from the Contract once the service contract is fully performed; and
       2.  if you cancel the Contract before the services have been fully performed, you agree that you will pay for the supply of the service for the period for which they are supplied. The amount payable will be in proportion to what has been supplied, in comparison with the full coverage of the Contract. 

CONSEQUENCES OF TERMINATION

48. On termination or expiry of this Agreement:
    1. the Customer shall immediately pay to the Supplier all of the Supplier’s outstanding unpaid invoices and interest and, in respect of Services supplied but for which no invoice has been submitted, the Supplier may submit an invoice, which shall be payable immediately on receipt;
49. Termination or expiry of the Agreement shall not affect any rights, remedies, obligations or liabilities of the parties that have accrued up to the date of termination or expiry, including the right to claim damages in respect of any breach of the agreement which existed at or before the date of termination or expiry.
50. Other than as set out in the Agreement, neither party shall have any further obligation to the other under the Agreement after its termination.

GENERAL

51. This Agreement contains the whole agreement between the parties relating to its subject matter and supersedes all prior discussions, arrangements or agreements that might have taken place in relation to the Agreement. Nothing in this clause limits or excludes any liability for fraud or fraudulent misrepresentation.

52. No party may assign, transfer or sub-contract to any third party the benefit and/or burden of the Agreement without the prior written consent (not to be unreasonably withheld) of the other party.
53. No variation of the Agreement will be valid or binding unless it is recorded in writing and signed by or on behalf of both parties.
54. The Contracts (Rights of Third Parties) Act 1999 does not apply to the Agreement and no third party has any right to enforce or rely on any provision of the Agreement.
55. Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.
56. A provision which by its intent or terms is meant to survive the termination of the Agreement will do so.
57. If any court or competent authority finds that any provision (or part) of the Agreement is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of the Agreement will not be affected.
58. Unless specifically provided by the parties, nothing in the Agreement will establish any employment relationship, partnership or joint venture between the parties, or mean that one party becomes the agent of the other party, nor does the Agreement authorise any party to enter into any commitments for or on behalf of the other party.
59. Any notice (other than in legal proceedings) to be delivered under the Agreement must be in writing and delivered by pre-paid first class post to or left by hand delivery at the other party’s 
60. registered address or place of business, or sent by email to the other party’s main business email address as notified to the sending party. Notices:
    1. sent by post will be deemed to have been received, where posted from and to addresses in the United Kingdom, on the second Working Day and, where posted from or to addresses outside the United Kingdom, on the tenth Working Day following the date of posting;
    2. delivered by hand will be deemed to have been received at the time the notice is left at the proper address; and
    3. sent by email will be deemed to have been received on the next Working Day after sending.

GOVERNING LAW AND JURISDICTION

61. This Agreement shall be governed by and interpreted according to the law of England and Wales and all disputes arising under the Agreement (including non-contractual disputes or claims) shall be subject to the exclusive jurisdiction of the English and Welsh courts

The parties have signed this Agreement on the date(s) below:

Name:

Agreement Completed By: 

Signature:

Date:  

SCHEDULE 1 SPECIFICATION OF SERVICES 

Service	Description

SCHEDULE 2 CHARGES

Charges	Frequency	Payment Schedule

ANNEX 1

CANCELLATION FORM

To Pink Sands Global of Somerset, UK [support@pinksandsglobal.com]

I/we* hereby give notice that I/we* cancel my/our* contract of sale for the supply of the following services:

……………………………………………………………………………………………………………………

Ordered on ………………………………………………………………………………………………………

Name of consumer ………………………………………………………………………………………………………

Address of consumer ………………………………………………………………………………………………………

Signature of consumer ………………………………………………………………………………………………………

Date ………………………………………………………………………………………………………

PART A

1. For the purposes of this Schedule:
   1. Data Protection Laws means any applicable law relating to the processing of Personal Data, as applicable to either party or the Services, including:
      1. the GDPR;
      2. any laws which implement or supplement such laws;

3. any laws that replace, extend, re-enact, consolidate or amend any of the laws stated in (i) and (ii) above;
4. all guidance, codes of practice and codes of conduct issued by any relevant Data Protection Supervisory Authority relating to such Data Protection Laws (whether legally binding or not).

2. GDPR means the UK General Data Protection Regulation;
3. Protected Data means Personal Data received from or on behalf of the Customer, or obtained in connection with the performance of the Supplier’s obligations under the Agreement; and
4. Sub-processor means any agent, subcontractor or any other third party engaged by the Supplier (or by any other Sub-Processor) for carrying out any processing activities in respect of the Protected Data.

The terms “Controller”, “Data Subject”, “International Organisation” “Member State”, “Personal Data”, “Personal Data Breach”, “Processor”, “Processing” and “Supervisory Authority” shall have the same meaning as in the GDPR.

COMPLIANCE WITH DATA PROTECTION LAWS

2. The parties agree that the Customer is a Controller and the Supplier is a Processor for the processing of Protected Data pursuant to this Agreement.
3. The Supplier shall, and shall ensure its Sub-Processors and each of the Supplier personnel shall comply with all Data Protection Laws in connection with the processing of Protected Data and the provision of the Services.
4. Nothing in this Agreement relieves the Supplier of any responsibilities or liabilities under Data Protection Laws.

INDEMNITY

5. Each party shall be liable for and shall indemnify (and keep indemnified) the other against all actions, proceedings, liabilities, costs, claims, losses, expenses, compensation paid to Data Subjects and other reasonable professional costs and expenses suffered or incurred by the indemnified party arising out of or in connection with any breach of the the Data Protection Laws by the indemnifying party, its employees or agents.

INSTRUCTIONS

6. The Supplier shall only process (and shall ensure Supplier personnel only process) the Protected Data in accordance with Section 1 of Part B of this Schedule and the Customer’s written instructions. The Supplier will immediately inform the Customer if any instruction relating to the Protected Data infringes or may infringe any Data Protection Law.

SECURITY

7. The Supplier shall implement appropriate technical and organisational measures to protect the Protected Data from accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. The technical and organisational security measures which the Supplier shall have in place are set out in Part B to this Schedule.

SUB-PROCESSING

8. The Supplier will not permit any processing of Protected Data by any third party (except Supplier personnel that are subject to an enforceable obligation of confidence with regards to the Protected Data) without the prior specific written permission of the Customer, except (i) as 

specifically stated in this Schedule, or (ii) where such processing is required by any applicable law, regulation or public authority.

9. The Supplier shall prior to the relevant Sub-Processor carrying out any processing activities in respect of the Protected Data, appoint each Sub-Processor under a written agreement containing data protection obligations that provide at least the same level of protection for Protected Data as those in this Schedule.
10. The Supplier shall remain fully liable to the Customer under this Agreement for all the acts and omissions of each Sub-Processor and each of the Supplier Personnel as if they were its own.
11. Where a Sub-processor is engaged by the Supplier, the Supplier shall:
    1. carry out adequate due diligence to ensure that the Sub-processor is capable of providing the level of protection for Protected Data required by this Schedule;
    2. remain liable for any breach of this Schedule caused by a Sub-processor; and
    3. provide relevant details and a copy of each agreement with a Sub-Processor to the Customer on request.

ASSISTANCE

12.  The Supplier shall, taking; into account the nature of the processing, provide reasonable assistance to the Customer insofar as this is possible, to enable the Customer to respond to requests from a Data Subject seeking to exercise their rights under Data Protection Laws. In the event that such request is made directly to the Supplier, the Supplier shall promptly inform the Customer of the same.
13. The Supplier shall to the extent required by Data Protection Laws, taking into account the nature of the processing and the information available to the Supplier, provide the Customer with commercially reasonable assistance with data protection impact assessments (as such term is 
14. defined in Data Protection Laws) or prior consultations with data protection authorities that the Customer is required to carry out under Data Protection Laws.

DATA SUBJECT REQUESTS

15. The Supplier will record and refer all requests and communications received from Data Subjects or any Supervisory Authority to the Customer which relate (or which may relate) to any Protected Data promptly (and in any event within three days of receipt) and will not respond to any without 

the Customer’s express written approval and strictly in accordance with the Customer’s instructions unless and to the extent required by law.

INTERNATIONAL TRANSFERS

16. The Supplier will not process and/or transfer, or otherwise directly or indirectly disclose, any Protected Data in or to countries outside the UK or EEA or to any International Organisation without the prior written consent of the Data Subject. The Supplier must comply with its obligations under the Data Protection Laws and ensure that (i) the transfer is to a country approved by the European Commission as providing adequate protection pursuant to Article 45 
17. GDPR; (ii) there are appropriate safeguards in place pursuant to Article 46 GDPR; or (iii) one of the derogations for specific situations in Article 49 GDPR applies to the transfer.

AUDITS AND RECORDS

18. The Supplier will, in accordance with Data Protection Laws, make available to the Customer such information in the Supplier’s possession or control as the Customer may reasonably request with a view to demonstrating the Supplier’s compliance with the obligations of data processors under Data Protection Laws in relation to its processing of Protected Data.
19. The Customer may exercise its right to audit under Data Protection Laws through the Supplier providing:
    1. an audit report not older than 18 months by an independent external auditor demonstrating that the Supplier’s technical and organisational measures are in accordance with the Supplier’s industry audit standard; and
    2. additional information in the Supplier’s possession or control to a Supervisory Authority when it requests or requires additional information in relation to the data processing activities carried out by the Supplier under this Schedule.

BREACH

20. The Supplier shall promptly (and in any event within 24 hours) notify the Customer if it (or any of its Sub-Processors or the Supplier Personnel) suspects or becomes aware of any suspected, actual or threatened occurrence of any Personal Data Breach in respect of any Protected Data.
21. The Supplier shall promptly (and in any event within 24 hours) provide all information as the Customer requires to report the circumstances referred to in paragraph 19 (above) to a Supervisory Authority and to notify affected Data Subjects under Data Protection Laws.

RETURN/DELETION OF PROTECTED DATA

22. Upon termination or expiry of the Agreement, the Supplier shall at the Customer’s election, promptly (and in any event, within 30 days of the expiry of the Agreement) delete or return to the Customer the Protected Data (including existing copies) in the Supplier’s possession by secure file transfer, save to the extent that the Supplier is required by any applicable law to retain some or all of the Protected Data.
23. The Supplier will provide written certification to the Customer that it has fully complied with the section above within 30 days of the expiry of the Agreement.

SURVIVAL

24. This Schedule shall survive termination or expiry of the Agreement for any reason.

PART B

Section 1 – Data processing

Processing of the Protected Data by the Supplier under this Schedule shall be for the subject-matter, duration, nature and purposes and involve the types of Personal Data and categories of Data Subjects set out in this Section 1 of Part B.

Subject-matter of processing:

The Supplier’s provision of the Services and any related technical support to the Customer.

Duration of the processing:

The term plus the period from expiry of the term until return/deletion of all Protected Data by the Supplier in accordance with this Schedule.

Nature and purpose of the processing:

The Supplier will Process Protected Data for the purpose of providing the Services and any related technical support to the Customer in accordance with this Schedule.

Type of Personal Data:

• Full name 
• Contact Details 
• Passwords

Categories of Data Subjects:

Protected Data will concern the following categories of Data Subjects:

• Data Subjects about whom the Supplier collects Protected Data in its provision of the Services; and/or
• Data Subjects about whom Protected Data is transferred to the Supplier in connection with the Services by, at the direction of, or on behalf of Customer.

Section 2 – Minimum technical and organisational security measures

Without prejudice to its other obligations, the Supplier shall implement appropriate technical and organisational measures to ensure an appropriate level of security for Personal Data. The Supplier; shall provide the Customer; with details of all such technical and organisational measures on reasonable written notice from the Customer.