Terms and licence

Last updated: [DD Month YYYY]

1. About us

These terms apply to purchases from Waymark Assurance, a trading name of Thomas Diment, a sole trader based in England ("we", "us"). Business address: 3 St John Street, Wigan, WN5 0DT. Contact: hello@waymarkassurance.co.uk.

2. What you are buying

Our products are digital templates and tools in Microsoft Word and Excel format, described on each product page. They help you build an information security management system based on ISO/IEC 27001:2022. They do not include the standard itself.

3. Prices and payment

Prices are shown on the product pages. Our checkout is provided by Payhip, which processes payment and adds any VAT due at checkout. Your contract is formed when your payment is confirmed.

4. Delivery

You will receive a download link by email straight away after payment. [The link can be used up to 5 times within 30 days of purchase.] If you lose your files or your link expires, email us within 12 months of purchase and we will send you a new link free of charge. If you have any problem downloading, contact us and we will help.

Updates

If we update a pack within 12 months of your purchase, to correct an error or to reflect a change in ISO/IEC 27001 or UK law, we will email you the updated version free of charge. We are not obliged to update the packs, and updates after 12 months may be offered at a reduced price.

5. If you are a consumer

Our products are designed for businesses. If you buy as a consumer, you normally have 14 days to cancel a purchase of digital content. By starting the download, you agree to the content being supplied immediately and acknowledge that you lose that right to cancel once the download has started. This does not affect your other legal rights, including if the files are faulty.

6. Your licence

When you buy a pack, we grant the organisation that bought it (the legal entity named at checkout, or the individual if no organisation is named) a non-exclusive, non-transferable licence to:

• use, copy and change the templates for that organisation's own internal purposes
• share the documents it creates from the templates with its staff, auditors, certification body, customers, suppliers and advisers, as part of running its own information security management system

You may not:

• sell, give away, publish or otherwise share the templates themselves, or any substantially similar version, with anyone else
• use the templates to provide services to other organisations, for example as a consultant, without a separate licence from us
• remove our copyright notices from the templates themselves (you may remove them from documents you create and issue)

We own all rights in the templates. If you would like a licence for use with clients, contact us.

7. What our products are and are not

The templates are general guidance to help you meet ISO/IEC 27001. They are not legal, tax or other professional advice, and they do not guarantee that you will achieve or keep certification. You are responsible for tailoring them to your organisation, for the decisions you make, and for how you run your information security management system. Where a template refers to laws or regulations, check the current position for your circumstances.

8. Refunds

Because our products are digital files that cannot be returned, we do not normally give refunds once a pack has been downloaded. You can download a free sample policy before you buy, to check that our templates suit you. We will, however:

• Faulty files: if a file is corrupted or does not match its description, tell us within 30 days of purchase and we will replace it or, if we cannot, refund you in full
• Upgrades: if you buy the Essentials pack and decide you need the Complete pack, you can upgrade within 30 days of purchase by paying the difference in price
• Duplicate purchases: if you buy the same pack twice by mistake, we will refund the second purchase in full
• Packs not yet downloaded: if you have not downloaded your pack, we will refund you in full if you ask within 14 days of purchase

To ask for a refund or upgrade, email us with your order number. Refunds are made to the original payment method, normally within 14 days of our agreeing them. If you are a consumer, this policy does not affect your statutory rights.

9. Our liability

If you are a business customer, our total liability to you for any loss arising from your purchase or use of our products is limited to the price you paid. We are not liable for indirect or consequential losses, or for loss of profit, revenue, business or data.

Nothing in these terms limits or excludes our liability for death or personal injury caused by our negligence, for fraud, or for anything else that cannot be limited or excluded by law. If you are a consumer, nothing in these terms affects your statutory rights.

10. Consultation included with the Complete pack

Each purchase of the Complete pack includes one consultation of up to 60 minutes by video call, on the following terms:

• it must be booked and held within 90 days of purchase, using the booking link sent with your download
• it is for the organisation that bought the pack and cannot be transferred, exchanged for cash or split into shorter sessions
• it covers questions about using the pack and implementing your information security management system; it does not include reviewing or writing documents outside the call
• you can rearrange it once with at least 24 hours' notice; a session missed without notice counts as used
• advice given in the consultation is general guidance on ISO/IEC 27001 and is subject to section 7

Consultancy beyond the included session is provided under a separate agreement. See consultancy and fractional services.

11. General

We may update these terms from time to time; the version in force when you buy applies to your purchase. These terms are governed by the law of England and Wales, and the courts of England and Wales have jurisdiction.