Online service and website terms.

Business customers

The website service-planning and payment process is intended for organisations purchasing services for business use. The person placing an order confirms that they are authorised to act for the named organisation.

Website information and assessment

Website content and the online security score provide general guidance. They are not a verified security audit, penetration test, legal opinion, insurance assessment or certification decision.

Prices, VAT and recurring billing

Unless a page explicitly states otherwise, business prices are shown excluding VAT. The security-plan summary and payment page show the net amount, VAT rate, VAT amount and total payable. By completing hosted checkout, the customer authorises the first payment, including VAT. Where the order contains recurring monthly services, Stripe also manages the recurring payments until the service is ended under the applicable order, service schedule or agreed notice terms. SumUp is offered only for eligible one-off payments unless a separate written agreement states otherwise. Independent certification-body or audit fees are not included unless expressly stated.

Order acceptance and technical scope

A successful payment confirms receipt of the order but does not remove the need for technical validation. 39Security may contact the customer to confirm users, devices, sites, licences, firewall hardware, data volumes, access requirements and dependencies. If a selected service cannot reasonably be supplied, 39Security will propose an alternative or cancel and refund the affected item.

Activation and customer responsibilities

Service activation begins after required access, information and approvals are supplied. Customers remain responsible for lawful use, maintaining appropriate licences, appointing authorised contacts, following remediation advice and promptly reporting suspected incidents.

Service descriptions

Product pages describe the intended service at a high level. The final scope, response arrangements, exclusions, minimum commitment, implementation timetable and any third-party licence terms should be recorded in the relevant order confirmation or service schedule.

Cancellation, suspension and refunds

Cancellation and refund rights depend on the agreed business contract, service schedule, work already completed and third-party commitments. The applicable order or service schedule states the notice period and any minimum term. 39Security may suspend a service where payment is overdue, continued operation creates a material security risk or the service is being misused, subject to the agreed contract.

Training-event bookings

Event places are confirmed only when the hosted payment has completed successfully. Prices are per delegate and VAT is charged at the rate shown during checkout. The booking contact is responsible for providing accurate attendee information and ensuring delegates are suitable for the stated audience.

Event substitutions, cancellations and transfers

Unless the event page states different terms, a business may substitute another delegate at no charge before the event. Customer cancellations received at least 14 calendar days before the event may be transferred to another available date or refunded. Cancellations received 7–13 calendar days before the event may be transferred once or refunded at 50%. Cancellations received fewer than seven calendar days before the event, and non-attendance, are normally non-refundable because venue, catering and delivery costs have been committed. 39Security may apply discretion where exceptional circumstances are evidenced.

Event changes by 39Security

39Security may change a trainer, timetable or venue where reasonably necessary. If an event is cancelled or materially rescheduled, paid bookings will be offered a transfer or refund of the affected event fee. Travel, accommodation, lost time and other consequential costs are not reimbursed unless separately agreed in writing.

Course materials

The workbook and templates are licensed to paid delegates for their own organisation’s internal business use. They must not be resold, republished, uploaded to public websites or used to deliver competing training without written permission. Attendance certificates confirm participation only and are not professional qualifications or security certifications.

Dietary and accessibility information

Delegates should provide dietary and accessibility requirements as early as possible. 39Security will make reasonable efforts to accommodate them but cannot guarantee that every request can be met, particularly when submitted close to the event.

Certification support

39Security can provide readiness and implementation support. Certification is awarded by an independent certification body. References to ISO standards do not imply that ISO has approved or certified 39Security or a customer.

Liability and security outcomes

No cyber-security service can eliminate every threat or guarantee that an incident will not occur. Contractual limits, warranties and exclusions are set out in the applicable order, business terms and service schedule.

Contact

Questions about an order can be sent to [email protected].