United Communications Limited trading as UnitedHosting issues this document. The company shall be known throughout this document as UnitedHosting.
Use of UnitedHosting Service constitutes acceptance and agreement to our TOS (Terms of Service). All service provisions are subject to the TOS (Terms of Service) of UnitedHosting.
The TOS may be changed from time to time at the discretion of UnitedHosting. The client understands that changes to the TOS by UnitedHosting shall not be grounds for non-payment.
UnitedHosting agrees to provide the client with web hosting services for a monthly or annual fee. UnitedHosting will never require clients to advertise for UnitedHosting on their website in any way shape or form unless agreed upon, such as a non-profit organisation receiving complimentary hosting. Clients are allowed to use UnitedHosting services for personal and/or business/commercial websites or content.
All services provided by UnitedHosting may be used for lawful purposes only. Transmission, storage, or presentation of any information, data or material in violation of any United Kingdom (or any other country) law is prohibited. This includes, but is not limited to: copyrighted material, material that is threatening or obscene, material that is "adult only" content, or material protected by trade secrets and other statue. The subscriber agrees to indemnify and hold harmless UnitedHosting from any claims resulting from the use of the service which damages the subscriber or any other party.
UnitedHosting does not allow adult membership "xxx" related websites, pornography and sex-related content on its servers. Nor do we allow adult subscription or membership based "pay sites". This includes sexual content, or links to adult content hosted elsewhere. This is also true for sites that promote any illegal activity or content that may be damaging to our servers or any other server on the Internet. Links to such materials are also prohibited. UnitedHosting will be the sole arbiter as to what constitutes a violation of this provision.
Educational adult websites, dating sites, and adult e-commerce stores are allowed. If you are in any doubt we strongly recommend checking with UnitedHosting support before hosting such websites. UnitedHosting will be the sole arbiter as to what constitutes a violation of this provision.
Violation of indecency and obscenity laws can result in criminal penalties.
Material accessible to you through UnitedHosting's Services may be subject to protection under United Kingdom (or any other country) copyright laws, or laws protecting trademarks, trade secrets or proprietary information. Except when expressly permitted by the owner of such rights, you must not use the UnitedHosting Service in a manner that would infringe, violate, dilute or misappropriate any such rights, with respect to any material, which you access or receive through the UnitedHosting Network. If you use a domain name in connection with the UnitedHosting Service or similar service, you must not use that domain name in violation of any trademark, service mark, or similar rights of any third party.
UnitedHosting takes a zero tolerance approach to the sending of Unsolicited Email (SPAM). Very simply this means that Clients of UnitedHosting may not use or permit others to use our service for sending SPAM Emails. Clients of UnitedHosting may not host, or permit hosting of, sites or information that is advertised by SPAM from other services. Violations of this policy carry severe penalties, including termination of service.
If a customer is found to be in violation of our SPAM policy, UnitedHosting may, at its sole discretion, restrict, suspend or terminate a customer's account. In addition, UnitedHosting may impose a £100 penalty for each spam policy violation. UnitedHosting solely reserves the right to refuse or cancel service to known spammers. Lastly, UnitedHosting reserves the right to determine what violates this policy. As such, any violation may result in cancellation of services without refund.
Unitedhosting does not allow the use of "catch all" email accounts. This is the practise of email@example.com directing all mail to a single mailbox. This practice is out-of-date and causes extreme surges of spam, both for you and for our spam filtering servers. To use an email address you must login to your control panel and create the required mailbox, catch-all mailboxes are banned and if found will be removed without notice or your account disabled.
Some domain names may receive such a high volume of spam email that it will not be possible for us to provide SpamExperts filtering service to them, due to the extreme usage. While SpamExperts is a dedicated system for handling huge volumes of spam it does have limits. Should the amount of spam or number of mailboxes in use on a domain break what UnitedHosting believes to be 'fair use' limits for your hosting package then we will inform you that SpamExperts services will not be continued for your domain or an upgrade of package may be suggested to help cover the cost of providing this service.
SpamExperts is only provided for "incoming" email to mail servers hosted within the UnitedHosting network. We do not provide spam filtering services for mail servers hosted elsewhere, such as Microsoft Exchange, gmail or any other email service not provided by and managed by UnitedHosting.
We do not allow background-running programs. This includes any IRC related software such as bouncers and bots. We provide a hosting service not a shell service. You are not allowed to compile and run software on our hosting servers.
You are free to use any scripts (such as php, cgi or perl) you wish provided they do not affect the normal operations of the server and they are not mentioned specifically below.
Scripts that are commonly known for causing server disruption include large cgi-based message forums, auctions, galleries, and banner exchanges. In the event a script affects normal server and/or administrative operations, UnitedHosting reserves the right to disable the account pending client cooperation and resolution.
Scripts we do not allow include:
Formmail and contact forms are acceptable providing the script is not named "formmail" for its filename and providing that you maintain the latest version of the script and it remains secure and un-abused by spammers.
We do allow you to have ONE remote MySQL user if requested. The user must have a fixed, non changing, IP address for us to grant access to. You can request a remote MySQL user via our helpdesk.
Customers may not use the UnitedHosting Network to attempt to circumvent user authentication or security of any host, network, or account. This includes, but is not limited to, accessing data not intended for the customer, logging into a server or account the customer is not expressly authorized to access, password cracking, probing the security of other networks in search of weakness, or violation of any other organization's security policy. Customers may not attempt to interfere or deny service to any user, host, or network. This includes, but is not limited to, flooding, mail bombing, or other deliberate attempts to overload or crash a host or network. UnitedHosting will cooperate fully with investigations of violations of systems or network security at other sites, including cooperating with law enforcement authorities in the investigation of suspected criminal violations. Users who violate system or network security may incur criminal or civil liability.
For security reasons UnitedHosting operates 'closed' datacentre facilities. Physical access to any servers or related equipment at any UnitedHosting locations is not permitted. Only fully authorised UnitedHosting staff are permitted access to work onsite at these facilities.
UnitedHosting provides 24/7 technical support to its Clients.
UnitedHosting limits technical support to its area of expertise, this is providing web hosting services and related features. UnitedHosting does not offer support for application specific issues such as php programming, cgi programming, html, website design and development or any other such issue. If you host multiple websites for your own clients, UnitedHosting does not provide technical support for YOUR Clients.
Any additional work you may require from UnitedHosting staff which does not fall within usual support boundaries is charged at a rate of £50 GBP per hour, in 30 minute increments. All charges will be discussed before work commences on a per incident basis. Examples of work beyond the boundaries of normal support include: site scripting problems, script installation, website design and development.
Requests for cancellation must be submitted via the billing area (My Services > View Details > Management Actions > Request Cancellation). Your cancellation will be confirmed by email and logged on your account. Once an account has been terminated we do not retain any data or backups.
Standard Notice Period:
UnitedHosting has a 14 day notice period for cancellation of your account. Cancellation must be received at least 14 days before your next invoice due date. UnitedHosting will then stop all recurring payments and you will not be charged again. Any invoices due within the notice period, or overdue invoices on your account must be paid in full prior to cancellation.
Tailored Solutions and non-standard Hardware Notice Period:
Customers on non-standard hardware configurations and custom solutions (such as Load Balancers, SANs, Private Cloud, Customised server configurations and so on) are required to provide 30 days written notice for cancellation of their services. Any invoices due within the notice period, or overdue invoices on your account must be paid in full prior to cancellation.
Changing a domains DNS to another provider or transferring a domain away from UnitedHosting does not constitute a hosting cancellation request. A cancellation request must be submitted via the billing area and will be confirmed by UnitedHosting.
The customer acknowledges that, termination of the agreement for any reason will result in UnitedHosting ceasing to provide the applicable services, with the consequences that flow from such cessation, including (but not limited to), deletion of data .e.g. hosting account(s), mail boxes and backups.
Establishment of this service is dependant upon receipt by UnitedHosting of payment of all stated charges. Subsequent payments are due on a reoccurring date that coincides with the date of signup (monthly or yearly terms).
Service may be interrupted on accounts that fall overdue (such as a credit card being declined or expired). UnitedHosting may, at its sole discretion, charge a fee of £15.00GBP to reinstate a suspended account.
When payment is declined from your chosen payment method we will send an email notification and retry payment the following day, this will occur 3 times over a 3-5 day period. After this period if we have not received payment or had notice from you that the due payment is in hand, your account will be suspended or terminated at the sole discretion of UnitedHosting.
It is very important you keep your email address and telephone numbers on file with us current. Failure to keep us updated with accurate contact information may mean important communications don’t reach you, resulting in suspension or termination of your hosting account.
A service charge, equal to the charge incurred by UnitedHosting, will be charged to your account for each cheque, chargeback, disputed payment, or any other form of payment that is returned to UnitedHosting unpaid.
All payments to UnitedHosting are non-refundable. This includes any setup fee and subsequent charges regardless of usage. If you dispute a charge that, in UnitedHosting's sole discretion is a valid charge under the provisions of this TOS, you agree to pay UnitedHosting an Administrative Fee for costs associated with pursuing that payment.
If you are paying annually for hosting services and cancel early before your 12 months of service is over, we will issue a pro-rata refund for full unused months at time of cancellation. UnitedHosting does not charge or refund days or part-months.
UnitedHosting does not offer any kind of "money back guarantee" or initial "trial period".
All domain name registration fees are non-refundable, in whole or in part, even if your domain name registration is suspended, cancelled or transferred prior to the end of your term. Pleae be careful when ordering as spelling mistakes and 'typos' cannot be corrected or refunded.
UK and EU clients will be billed in GBP (Pounds Sterling) and prices include VAT. Clients in the rest of the world will be billed in USD with VAT not applicable to our USD pricing.
If you are a VAT registered business in another EU member state then you must supply your VAT registration number for VAT to be zero-rated. If your VAT registration number is not supplied or cannot be confirmed as valid then VAT at the UK rate will apply.
UnitedHosting reserves the right to change the pricing of products and/or services at any time at its own discretion.
We publish price changes on your invoice accessible through your control panel at least 14 days before your product or service is renewed. If you do not agree to such price changes, please cancel your services in accordance with our standard procedure. If you do not cancel, you will be deemed to have accepted the new prices, and they will be charged to the credit card or other payment method registered to your account.
UnitedHosting does not provide paper or hard-copy invoices. PDF invoices are sent via email and availabe in your billing area.
UnitedHosting is not liable for expiry or loss of your domain name.
Before a domain expires you will be reminded to renew your domain by email to the address we hold on file for you. We strongly recommend keeping an eye on your renewal dates in your billing area and your diary too. On the date a domain expires it will be deactivated by the registry, and no longer display your website. Once a domain is deactivated upon expiry you will typically have somewhere between 5 and 30 days to contact us to renew the domain name at our regular renewal rates before it drops into "redemption period" where the cost to renew then increases substantially. Note that some registries (such as .EU) place an expired domain into redemption immediately.
Redemption Period - Once a domain is in the "redemption period" the cost to renew it increases by $250 USD (approx £179 GBP) +VAT. This is a cost charged by the registry and passed on to you by us. Redemption periods last between 30 and 60 days, and then the domain is released to the public so anyone can re-register your domain and you will lose it.
Any domain name registered by UnitedHosting (as your registrar) is yours to keep. You can transfer your domain name to a different registrar at any time once the domain is 90 days old - Newly registered domains do have a 90 day waiting period where they cannot be transferred from UnitedHosting to a different registrar.
The same 90 day 'no transfer' window applies when an expired domain is renewed or restored after being in the registry redemption period. Once 90 days have passed from renewing such domains they are then free to be transferred again.
Some domain names are classed as "premium" by the registries that operate them and although they may show up in availability results they cannot be registered at our usual rates. Similarly some registries reserve domains so they may only be registered under certain conditions that are checked after placing an order. If you attempt to register a domain name that is either premium or reserved then our sales team will contact you as the order may need to be cancelled or further details discussed.
UnitedHosting offers a free migration service from other hosting companies. The success of this service is dependent on the type and quality of the hosting being used as the source for your data. We do not guarantee the quality of migrations, which are offered on a best effort basis, and are largely dependent on the responsiveness and level of testing to be completed by the client.
Migrations are performed in a single batch. If you have 100 websites then we will arrange a window to migrate all 100 sites together. It is not feasible to perform migrations site-by-site over large periods of time, unless special terms are agreed with your account manager as part of the on-boarding process.
Any additional work you may require from UnitedHosting staff which does not fall within usual migration boundaries is charged at a rate of £50 GBP per hour, in 30 minute increments. All charges will be discussed before work commences on a per incident basis.
When upgrading your service with UnitedHosting if a change in server type is required we can usually extend our free migration service to help make the move as painless as possible.
When downgrading (or making significant and frequent changes) it will not always be possible to offer a free migration service, and reasonable charges will be applicable to migration work where the client does not wish to migrate themselves.
Dedicated & Cloud server customers should also read and agree to the following before signing up for service with UnitedHosting:
Our dedicated and cloud solutions include server management in the monthly fee. UnitedHosting defines server management as general maintenance, updates and security hardening of core packages to ensure the server performs as expected. We also include additional administrative duties (such as installing custom server software requirements or accommodating customer requests) of up to 2 hours per month with your server. Additional management work, over this 2 hour inclusive, incurs a service fee based on a £70GBP/hour (+VAT) labour rate, billed in half-hour increments with a half-hour minimum charge.
Dedicated server specifications may vary over time as technology changes and our stocks are sold and replenished. All hardware provided by UnitedHosting to the customer will be of comparable specification and performance to those shown on the UnitedHosting website or in any written quotation.
UnitedHosting will make all reasonable efforts to satisfy the customer's requests for technical and/or administrative changes to the customer's dedicated servers. Certain tasks, such as repairing software/system faults caused by the customer, or installing certain additional software packages, may, at the sole discretion of UnitedHosting, incur a service fee based on a £50GBP/hour labour rate, billed in half-hour increments with a half-hour minimum charge.
Customers are responsible for and subject to all software vendor licensing terms, conditions, restrictions, and limitations. It is the customer's responsibility to ensure conformance to and abide by the specific terms and conditions of each application's licensing agreements.
Dedicated and Cloud servers come with an included amount of monthly bandwidth. It is possible for your server to utilise more bandwidth than the included amount, it is not a hard quota where the server will stop responding when breached. Additional bandwidth beyond your included quota is charged at a rate of £3 per 10GB. Bulk bandwidth can be purchased in advance at £40 per 1TB per month and is strongly recommended if your server is going to use more than the standard inclusive allowance.
UnitedHosting does not guarantee the off site backups of your server. We take CDP backups as a precaution but cannot guarantee their availability, usability, or integrity. We schedule 4 backups per day but due to the number of variables which can dictate the speed a successful backup can be obtained it may not be possible to get 4 full backups on any given day, backups are therefore scheduled on a best effort basis which may vary from day to day. UnitedHosting can accept no responsibility for any loss of data or consequences arising from this. UnitedHosting always advises clients to take their OWN back ups of all data regularly for your own disaster recovery requirements.
Dedicated & Cloud servers are exempt from the following sections of our normal TOS:
Adult Content - You are allowed to host tasteful adult content on dedicated servers.
Background-running Programs - You can run background processes on dedicated servers.
Banned Scripts - We do not enforce the banning of any scripts on dedicated servers.
Any attempts to undermine, slander, libel, threaten, or cause harm to a UnitedHosting server, customer, employee, or the company directly is strictly prohibited and is grounds for immediate termination without refund. In addition, we will pursue all attempts to the fullest extent of the law.
UnitedHosting reserves the right at its sole discretion to refuse or cancel service. Violation of any of UnitedHosting's TOS could result in a warning, suspension, or account termination. Accounts terminated due to policy violations will not be refunded. Domains terminated due to policy violations will not be released to the customer.
UnitedHosting will not otherwise disclose its customers' personal and account information unless UnitedHosting has reason to believe that disclosing such information is necessary to identify, make contact with, or bring legal action against someone who may be causing harm or interfering with the rights or property of UnitedHosting, UnitedHosting' customers, or others, or where UnitedHosting has a good faith belief that the law requires such disclosure.
UnitedHosting also will not, except for reasons stated below, disclose to third parties the contents of any electronic mail, electronic communications, or other electronic data that UnitedHosting stores or transmits for its customers. The circumstances under which UnitedHosting will disclose such electronic customer communications or data are when: * it is necessary in order to provide service to the customer * it is necessary to protect the legitimate interests of UnitedHosting and its customers * it is required to cooperate with dispute policies, court orders, warrants, or other legal processes that UnitedHosting determines in its sole discretion to be valid and enforceable * it is necessary to provide to a law enforcement agency when the contents appear to pertain to the commission of a crime
It is the policy of UnitedHosting to not disclose any personal information or account data to third parties without prior consent of the individual unless instructed to do so by a court of law or other legal warrant/document.
UnitedHosting will in the normal course of its business collect personal information from clients and prospective clients, for the purposes of billing, customer service, provision of information, as well as other legitimate business reasons. This information may be stored in a number of ways including electronic and paper formats.
Any person may request a copy of personal information pertaining to themselves, which shall be provided free of charge after reasonable proof of identity. Any personal information held on our systems will be deleted on request and after reasonable proof of identity
We may also store information about you using cookies which we can later access when you visit our websites at a later date. If you want to delete any cookies that are already on your computer, please refer to your system administrator who will be able to help you locate and remove these cookies. If you want to stop cookies being stored on your computer in future, please refer to your browser manufacturer's instructions by clicking "Help" in your browser menu. Please note that taking either of these measures may prevent you accessing features offered from our sites.
As with most websites, when you visit one of our sites, we will log your IP address and time of access which may be used later for research or fault investigation processes.
UnitedHosting always strives to provide the highest standards of customer service. However, in the unlikely event of you having a complaint we will always do everything possible to ensure it is dealt with quickly and fairly.
Please contact us on the telephone number below to speak to someone from the department you feel is most relevant to your complaint (support, sales or billing).
Telephone: 0203 603 3656
If our team are unable to resolve your complaint they will refer the issue to someone at director level. Upon receipt of your complaint the director will investigate thoroughly and respond back to you directly.
If you prefer to put the complaint in writing please use our UK postal address below:
United Communications Limited, PO Box 937, Hemel Hempstead, Hertfordshire, HP1 2XN, United Kingdom
Please include your account domain name and as much detail as possible in your request, so we can fully investigate your concerns before contacting you. Finally, please note that postal complaints may take longer to process and we would always advise customers (wherever possible) to contact us directly by email or telephone.
Customer agrees that it shall defend, indemnify, save and hold UnitedHosting (or it's employee's/owners) harmless from any and all demands, liabilities, losses, costs and claims, including reasonable legal fees asserted against UnitedHosting, its agents, its customers, officers and employees, that may arise or result from any service provided or performed or agreed to be performed or any product sold by customer, it's agents, employees or assigns. Customer agrees to defend, indemnify and hold harmless UnitedHosting against liabilities arising out of; (1) any injury to person or property caused by any products sold or otherwise distributed in connection with UnitedHosting server; (2) any material supplied by customer infringing or allegedly infringing on the proprietary rights of a third party and (3) copyright infringement. Customer agrees to limit the liability of UnitedHosting to the amount paid for service.
UnitedHosting will not be responsible for any damages your business may suffer. UnitedHosting makes no warranties of any kind, expressed or implied for services we provide. UnitedHosting disclaims any warranty or merchantability or fitness for a particular purpose. This includes loss of data resulting from delays, non-deliveries, wrong delivery, and any and all service interruptions caused by UnitedHosting and its employees. UnitedHosting makes no "uptime" guarantees. The Client agrees that UnitedHosting shall not be liable for any damages as a result of loss of hosting services or hosted data. The Client further acknowledges that UnitedHosting's liability for its own negligence is zero, and UnitedHosting may not be held responsible. Liability or Damages in any event may not exceed an amount equivalent to charges payable by Client for services during the period damages occurred. In no event shall UnitedHosting be liable for any special or consequential damages, loss of revenue or injury.
UnitedHosting can accept no responsibility for any loss of data or consequences arising from this. UnitedHosting always advises clients to back up their site data regularly for their own protection. UnitedHosting does not guarantee its own backups of customer data and is not liable for any loss of data, loss of backups or inability to restore service after implementing its disaster recovery plan.
UnitedHosting furthermore expects that its customers who provide hosting services (resellers) to others will ensure its customers fully comply with all applicable laws and this UnitedHosting TOS. A reseller's client's failure to comply with those laws and our TOS will violate this policy.
If a customer provides hosting services (resellers) to others and decides to cancel their reseller hosting account with UnitedHosting then UnitedHosting will not be responsible for maintaining hosting for the resellers customers. UnitedHosting has no agreement or responsibility to any resold services. Resold services to others are your own responsibility.
All communications (emails, verbal or written) are between UnitedHosting and the client. These communications are private and are therefore not to be shared with any other parties.
This agreement is made between the customer (as specified in the customer details section when placing your order) and UnitedHosting. If you are purchasing hosting on behalf of another party please ensure you specify the account owners details in the customer details section. UnitedHosting will only be able to communicate with regards to the account with the registered customer and not a third-party.
Finally, UnitedHosting wishes to emphasize that in accepting services, customers indemnify UnitedHosting for the violation of any law or UnitedHosting policy that results in loss to UnitedHosting or the bringing of any claim against UnitedHosting. This means that if UnitedHosting is sued because of activities of the customer that violate any law, or this policy, the customer will pay any damages awarded against UnitedHosting, plus costs and reasonable legal fees.
Failure to comply with any of our terms of service will result in grounds for immediate account deactivation or removal.
This Addendum dated 3rd May 2018 (the “Addendum”) amends, with effect from and including 25 May 2018 (the “Effective Date”), the General Terms and Conditions between Easyspace Limited (registered in England under company number 03405586) trading as UnitedHosting (“UnitedHosting”) and you, (“Controller”) and any other agreements entered into between the parties (the “Agreement”). To the extent this Addendum is not consistent with any terms of the Agreement the terms of this Addendum shall prevail. Other than as indicated herein, capitalized terms and definitions contained herein shall have the same meaning as specified in the Agreement.
(A) As of 25 May 2018 the General Data Protection Regulation (EU) 2016/679 (“GDPR”) will apply in the EEA replacing Directive 95/46/EC and its local implementing legislation in the UK, the Data Protection Act 1998 (“DPA 1998”). Accordingly, the parties can no longer rely on compliance with the DPA 1998 in the UK as being sufficient for controlling, processing or protecting data.
(B) In order to comply with its legal and regulatory obligations, the parties wish to update the terms of the Agreement to comply with the GDPR on the terms as set out in this Addendum.
Therefore, the parties, intending to be legally bound, and in consideration of the needs for both parties to comply with their respective obligations under the GDPR, agree that any data controller, processing and protection provisions (and/or any other provisions in the Agreement relating to the DPA 1998) shall, as at the Effective Date, be deleted and the following clause shall be incorporated into the Agreement:
1 DATA PROCESSING
1.1 For the purposes of this Agreement the following defined terms shall have the following meanings:
“Data Protection Law” shall mean (a) Data Protection Act 1998; or (b) from 25th May 2018, the General Data Protection Regulation ((EU) 2016/679 (“GDPR”), read in conjunction with and subject to any applicable UK national legislation that provides for specifications or restrictions of the GDPR’s rules; or (c) from the date of implementation, any applicable legislation that supersedes or replaces the GDPR in the UK or which applies the operation of the GDPR as if the GDPR were part of UK national law, which may include the Data Protection Act 2017;
“personal data”, “controller”, “processor”, “data subject”, and “processing” (and other parts of the verb ‘to process’) shall have the meaning set out in the Data Protection Law.
1.2 Each party shall comply at all times with Data Protection Law and shall not perform its obligations under this Agreement in such a way as to cause the other to breach any of its applicable obligations under Data Protection Law.
1.3 In the context of this Agreement, UnitedHosting will act as “processor” to the Controller who may act as either “processor” or “controller” with respect to the personal data. Notwithstanding the foregoing, the parties acknowledge that:
1.3.1 where UnitedHosting only provides colocation services under the Agreement UnitedHosting will not be a Processor; and
1.3.2 where personal data is not accessible to UnitedHosting it shall not be a Processor, and therefore, in either case, the obligations of clause 1.7 shall not apply to UnitedHosting.
1.4 The Controller represents and warrants to UnitedHosting that with respect to any personal data processed pursuant to this Agreement:
1.4.1 all personal data is necessary for the purpose for which it is processed, accurate and up-to-date (and Controller shall at all times comply with UnitedHosting’s standard acceptable use policy);
1.4.2 taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, the Controller has implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk to the personal data;
1.4.3 the Controller has obtained all the necessary consents from data subjects to process the personal data and to outsource the processing of any personal data to UnitedHosting and the Controller covenants that it shall notify UnitedHosting in writing if there are any material changes to these consents or to the personal data that UnitedHosting processes under this Agreement; and
1.4.4 it is not aware of any circumstances likely to, and will not instruct UnitedHosting to process the personal data in a manner that is likely to, give rise to a breach of the Data Protection Law (or any other applicable data protection or privacy laws).
1.5 The Controller acknowledges and agrees that pursuant to its obligation under Article 28(1) of the GDPR to only appoint processors providing sufficient guarantees to implement appropriate technical and organisational measures to meet the requirements of the GDPR, it has assessed UnitedHosting’s applicable technical and organisational measures and considers them to be sufficient, taking into account the nature, scope, context and purpose of the processing undertaken pursuant to the Agreement.
1.6 Controller acknowledges and agrees that it is responsible for ensuring the compliance of any of its businesses, affiliates or subsidiaries located in a territory outside the EEA with Data Protection Law in relation to transfers of personal data from UnitedHosting to Controller.
1.7 Where UnitedHosting processes personal data on behalf of Controller, with respect to such processing, UnitedHosting shall:
1.7.1 process the personal data only in accordance with the Agreement (as amended by this Addendum) and the documented instructions of the Controller given from time to time. The Controller acknowledges that UnitedHosting is under no duty to investigate the completeness, accuracy or sufficiency of such instructions and any additional instructions outside the scope of this Agreement (as amended by this Addendum) require prior written approval between UnitedHosting and Controller (including agreement on any fees payable by Controller to UnitedHosting for carrying out such instructions);
1.7.2 only permit the personal data to be processed by persons who are bound by enforceable obligations of confidentiality and take steps to ensure such persons only act on UnitedHosting’s instructions in relation to the processing;
1.7.3 protect the personal data against unauthorised or unlawful processing and against accidental loss, destruction, damage, alteration or disclosure. These measures shall be appropriate to the harm and risk which might result from any unauthorised or unlawful processing, accidental loss, destruction or damage to the personal data and having regard to the nature of the personal data which is to be protected (and the Controller shall notify UnitedHosting immediately if the nature of such personal data changes in a material way);
1.7.4 remain entitled to appoint third party sub-processors. Where UnitedHosting appoints a third party sub-processor, it shall, with respect to data protection obligations:
(a) ensure that the third party is subject to, and contractually bound by, at least the same obligations as UnitedHosting; and
(b) remain fully liable to Controller for all acts and omissions of the third party, and all sub-processors engaged by UnitedHosting as at the effective date of this Addendum shall be deemed authorized;
1.7.5 in addition to the sub-processors engaged pursuant to paragraph 1.7.4 (above), be entitled to engage additional or replacement sub-processors, subject to:
(a) the provisions of paragraph 1.7.4(a) and 1.7.4(b) being applied; and
(b) UnitedHosting notifying the Controller of the additional or replacement sub-processor,and where Controller objects to the additional or replacement sub-processor, the parties shall discuss the objection in good faith;
1.7.6 notify Controller without undue delay after becoming aware that it has suffered a personal data breach;
1.7.7 at Controller’s cost and not more than once in any 12 month period permit Controller (subject to reasonable and appropriate confidentiality undertakings), to inspect and audit (during business hours and on reasonable notice) UnitedHosting’s data processing activities to enable Controller to verify and/or procure that UnitedHosting is complying with its obligations under clause 1.2. Controller shall ensure that its adheres to any applicable UnitedHosting site and security policies in the performance of such audit or inspection;
1.7.8 on Controller’s reasonable request and at Controller’s cost, assist Controller to respond to requests from data subjects who are exercising their rights under the Data Protection Law (insofar as it is reasonable for UnitedHosting to do so);
1.7.9 save where such countries have been deemed by the European Commission to be providing an adequate level of protection pursuant to the relevant provisions of Data Protection Law, not process personal data outside the EEA without the prior written consent of Controller and, where Controller consents to such transfer, to comply with any reasonable instructions notified to UnitedHosting by it. Notwithstanding the foregoing, UnitedHosting is expressly permitted to and instructed by Controller that it may transfer personal data to any UnitedHosting subsidiary and any UnitedHosting subcontractor, subject to first ensuring that adequate protections are in place to protect the personal data consistent with the requirements of Data Protection Law;
1.7.10 on Controller’s reasonable request and at Controller’s cost, assist (insofar as it is reasonable to do so, taking into account the nature of the information available to the UnitedHosting and any restrictions on disclosing the information, such as confidentiality) Controller to comply with the Controller’s obligations pursuant to Articles 32-36 of the GDPR (or such corresponding provisions of the Data Protection Law), comprising (if applicable): (a) notifying a supervisory authority that Controller has suffered a personal data breach; (b) communicating a personal data breach to an affected individual; (c) carrying out an impact assessment; and (d) where required under an impact assessment, engaging in prior consultation with a supervisory authority; and
1.7.11 unless applicable law requires otherwise, upon termination of the Agreement delete or return all personal data provided by Controller to UnitedHosting (except to the extent this is not reasonably technically possible or prohibited by law).
2.1 Controller shall indemnify and hold harmless on demand UnitedHosting for any loss, damage, liabilities, penalties, expenses or fines incurred (whether foreseeable or unforeseeable or direct or indirect) (“Losses”) as a result of:
2.1.1 the Controller breaching its obligations under clause 1 (Data Processing);
2.1.2 any unsuccessful claim by a data subject when such claim holds both Controller and UnitedHosting as jointly and severally liable under the Data Protection Laws.
2.2 Where under Data Protection Law (including without limitation Article 82 of the GDPR) UnitedHosting and Controller incur joint and several liability (as Controller and Processor with any other person) and, as such, UnitedHosting incurs Losses (other than for damage caused by processing where it has not complied with obligations under Data Protection Law specifically directed to Processors or where it has acted outside or contrary to Controller’s lawful instructions under the Agreement), Controller shall indemnify UnitedHosting on demand against all such Losses, save for such liability as corresponds directly to UnitedHosting’s part of the responsibility for the damage caused by UnitedHosting’s breach of the obligations of Data Protection Law or under this Agreement.
3 LIMITATION OF LIABILITY
3.1 Neither party excludes or limits liability to the other party for any matter for which it would be unlawful for the parties to exclude liability.
3.2 Subject to Clause 3.1, with respect to any claim relating to a breach of Data Protection Law or a breach of this Addendum, UnitedHosting shall not in any circumstances be liable to the Controller whether in contract, tort (including for negligence and breach of statutory duty howsoever arising), misrepresentation (whether innocent or negligent), restitution or otherwise, for:
3.2.1 any loss (whether direct or indirect) of profits, business, business opportunities, revenue, turnover, reputation or goodwill; and
3.2.2 any loss or corruption (whether direct or indirect) of personal data or information;
3.3 Subject to Clause 3.1, UnitedHosting’ total aggregate liability to the Controller in contract, tort (including negligence and breach of statutory duty howsoever arising), misrepresentation (whether innocent or negligent), restitution or otherwise, arising in connection with a breach of Data Protection Laws or a breach of this Addendum or any collateral contract shall in all circumstances be limited to the greater of:
3.3.1 the Charges paid or payable by Controller to UnitedHosting under the relevant Agreement in the Initial Term; or
3.3.2 the total Charges paid or payable by the Controller to UnitedHosting under the relevant Agreement in the contract year concerned.
4 GOVERNING LAW AND JURISDICTION
This Addendum and any dispute or claim arising out of or in connection with it, or its subject matter or formation (including non-contractual disputes or claims) shall be governed by, and construed in accordance with, the laws of England. The parties agree that the courts of England will have exclusive jurisdiction to settle any dispute (whether contractual or non-contractual) arising from or in connection with the Addendum.