General Terms and Conditions for CourseSight

Please read and understand these terms and conditions (and any others referred to below) before you accept them. By accepting these terms and conditions to use our website to buy or sell places on training courses or units of training materials you will be bound by these terms and conditions and any others referred to below, where applicable (the User Agreement).

Who we are

We are Causeway Technologies Limited (we, us), a company registered in England and Wales under company number 3921897 and with our registered office and main trading address at Third Floor Sterling House, 20 Station Road, Gerrards Cross, Buckinghamshire, England, SL9 8EL. Our VAT number is 733718820.

We operate the website https://coursesight.co.uk (CourseSight). This page tells you information about us and sets out the legal terms and conditions on which you can use CourseSight.

We may periodically make changes to this User Agreement and shall notify you by posting a revised version of the agreement on the CourseSight website. The revised agreement will become effective immediately following such notice. Save for changes which are only editorial in nature, you shall have 15 days from such notification to terminate this User Agreement in the event of such a change. Your continued use of CourseSight thereafter will constitute acceptance of the revised User Agreement terms.

Contact us

The Causeway Technical Support Helpdesk operates between 08.00 and 17.30 Monday to Friday.

You can contact Causeway Support via the Customer Community, email or phone:

  • Customer Community – https://support.causeway.com
  • Email - help.desk@causeway.com
  • Phone – +44 (0) 1628 552255

All customers are encouraged to use the Community, available 7 days a week, as it provides end-user self-help and best solutions together with the ability to log, update and maintain requests in an interactive environment. Request history is available at any time of the day, whether a request is open or closed and information is available in a real-time environment.

About CourseSight

CourseSight is a cloud based training management system that provides a booking system and market place for registered buyers (each a “Booker”) to buy and for certain training providers (each a “Provider”) to sell: (i) places on training courses; or (ii) dedicated courses in their entirety as a single transaction (each a “Training Place”). Training Places may have related sets of materials for purchase either together with the Training Place or separately (each a “Material Unit”). CourseSight also provides statistics about the supply and demand of training to certain industry bodies approved by us to have access to CourseSight (each an Industry Body).

As a market place, CourseSight does not: supply training courses, endorse or approve training courses or set prices for training courses.

Industry Bodies

Industry Bodies can set up course templates on CourseSight for certain qualifications. Industry Bodies can approve a Provider to use these templates to create the Provider’s courses. Industry Bodies can also give general approval to Providers.

Any approval or content on CourseSight provided by an Industry Body is provided for general information only and is not intended to amount to advice on which you should rely. We have not verified or approved any of the information and course details provided by Industry Bodies, including any approval by them of a Provider. The views expressed and approvals given by Industry Bodies on CourseSight do not represent our views and are not warranties or endorsements by us.

Industry Bodies can create links on CourseSight to Providers and Bookers they want to connect with who agree to accept the connection.

Industry Bodies can view statistics in anonymised form about courses offered for sale on CourseSight and can get more detailed information about course bookings and course achievements for Providers and Bookers with whom the Industry Body has linked. That data will not include any personally identifiable details about any Booker.

Providers

Providers can sell Training Places and Material Units through CourseSight. Each course is based on a course template and a Provider can create one or more instances of a course using the template. Providers can create their own course templates or, where approved, can use those set up by Industry Bodies. Each Material Unit is based on a material template which only Providers may create.

Our Additional Terms and Conditions for Providers apply to a Provider’s use of CourseSight and bookings made with the Provider through CourseSight.

CourseSight may only be used for selling Training Places and Material Units to delegates domiciled in the UK and all such sales are subject to UK VAT rules.

Bookers

There are two types of Booker: an organisation and an individual. All Bookers can search for and book Training Places and Material Units advertised on CourseSight. Individuals can only book a single Training Place; organisations can book multiple Training Places for multiple individuals ( each a “Course Delegate”).

Training Places may only be booked for Bookers and/or Course Delegates who are domiciled in the UK. If you are a Booker, you hereby confirm that you and/or all Course Delegates for whom you book Training Places and Material Units are domiciled in the UK.

Registering with us

In order to buy or sell a Training Place or Material Unit on CourseSight, you must register an account with us (an “Account”).

You must be at least 18 years old and must be able to enter into legally binding contracts. If you are registering with CourseSight for a business entity, you represent that you have the authority to legally bind that entity.

When opening an Account, you must provide complete and accurate information. If your registration or payment information changes at any time, you must promptly update your details in your Account.

CourseSight reserves the right to temporarily or permanently suspend Accounts with incomplete or inaccurate information.

You are solely responsible for maintaining the confidentiality of your Account information and password. Your Account is not transferable to any other party.

How we will use your personal information

We may collect information that you provide by filling in forms on our site or to gain access to our site. This includes information provided at the time of registering to use our site or requesting further services.

We may also ask you for information when you report a problem with our site. We may collect and process the following data about you and/or any Course Delegates you book Training Places or purchase Material Units for:

  • When you book a Training Place or purchase Material Units, we will pass the following details about you and/or the Course Delegates to the relevant Provider:
    • name;
    • email address;
    • National Insurance number, if entered; and
    • Other booking details.
  • When you link with a Training Provider within the CourseSight system, the following information will be collected from you and shared with the Training Provider:
    • Name;
    • Email address;
    • company name;
    • company phone number; and
    • company address.
  • If you contact us we may keep a record of that correspondence;
  • Information provided in surveys that we may ask you to complete, although you do not have to respond to them;
  • Details of your visits to our site for system administration and to report aggregated information to Providers and Industry Bodies. This is statistical data about our users' browsing actions and patterns and use of CourseSight and does not identify any individual.

We use information held about you and/or Course Delegates for the following purposes and in the following ways:

  • to ensure that content on CourseSight is presented in the most effective manner for you and for your computer;
  • to provide you with information, products or services we believe may be of interest to you based on your use of CourseSight including courses;
  • to carry out our obligations arising from the User Agreement entered into between you and us;
  • to help enable Providers to manage Training Place bookings and Material Unit purchases;
  • to view and process that data to provide support to Providers, Bookers and Industry Bodies;
  • to allow you to participate in interactive features of CourseSight, when you choose to do so;
  • to notify you about changes to CourseSight;
  • to maintain a record of Training Places that have been booked including for whom and by whom such places have been booked;
  • to identify you / the Course Delegates and cross reference your/their CourseSight account or registered details with any account you/the Course Delegate or your/their employer has with us in connection with our suite of products which comprise databases of cardholders of construction and related industry smartcards (including but not limited to cards issued by Construction Skills Certification Scheme Ltd (CSCS)). This suite of products includes but is not limited to SkillGuard, Validate and other client own-branded versions thereof. We may also pass such details to Providers so that they can identify and update training records for you / the Course Delegate.

We use information held about Cardholders in the manner set out in the terms and conditions and Privacy Notice for the particular product in question e.g. SkillGuard.

We may combine information held about you and/or Cardholders with other information we collect about you and/or Cardholders from other sources. We may use the combined information for the purposes set out above.

If you are an organisational Booker, you must ensure that each Course Delegate has given you their express and informed consent for you to provide us with their personal data, and for us to use and process that data and pass it on to Providers including, if applicable, Providers in third countries for the purpose of identifying course delegates, booking and managing Training Places and linking delegates to, and updating their records on any database in our SkillGuard suite of products in relation to which you or the delegate or your or their employer has an account with us.

We may obtain information about your general internet usage by using a cookie file which is stored on the hard drive of your computer (see our Cookie Policy).

Credit or debit card information will not be stored or retained by CourseSight or Providers. All such data will be securely stored within the payment processor’s environment. For the avoidance of doubt, there may be occasions when a Booker calls us to book a course and requests that we input credit or debit card information directly into payment processor Stripe’s system on their behalf but we do not record or retain these details in any circumstances.

We may disclose personal information that you have provided to us to third parties:

  • in the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;
  • to Providers and CSCS and other relevant card certification schemes for the purposes set out above;
  • for e-learning courses, we may pass the delegate’s name and e-mail address to Scorm Cloud (a service operated by Rustici Software, LLC) which provides services facilitating the management of e-learning courses including the tracking of progress and recording of delegate outcomes;
  • if we are under a duty to disclose or share your personal data in order to comply with any legal obligation to our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection.

We may disclose and make available information you give us about Cardholders to our sub-contractors in connection with the provision of our services to you.

All information you provide to us is stored on our secure servers located in the UK.

We will not transfer any data that we collect or receive from you that constitutes personal data outside of the UK unless there are appropriate safeguards or the transfer is based on adequacy (regulations or decision), the data subject has enforceable rights and effective legal remedies or the transfer otherwise complies with the Data Protection Legislation (“Data Protection Legislation” being as defined in the “Data Processing Agreement (GDPR)” section below) except that where a Booker (including an individual Booker) purchases a Training Place or Material Unit from a Provider based in a third country (a “third country” being as defined in the “Data Processing Agreement (GDPR)” section below), you the Booker (including an individual Booker) instructs us to transfer the relevant personal data of the Booker (including an individual Booker) and/or Course Delegates to that Provider in that third country provided that the Provider has agreed that it will incorporate the European Commission’s Standard Model Clauses for transfers of personal data outside the EEA (and any UK successor safeguard thereof) into the terms upon which it supplies Training Places and Material Units to you the Booker but you acknowledge and accept that such incorporation may not achieve equivalent protection (i.e. equivalent with the full protection afforded by the Data Protection Legislation) of the relevant personal data.

  • If you are a Provider based in a third country, you will ensure the terms upon which you agree to supply Training Places and Material Units to Bookers incorporate the European Commission’s Standard Model Clauses for transfers of personal data outside the EEA (and any UK successor safeguard thereof).
  • IF YOU ARE AN INDIVIDUAL BOOKER, YOU HEREBY CONSENT TO THE TRANSFER OF YOUR PERSONAL INFORMATION OUTSIDE THE UK WHERE YOU HAVE BOOKED TRAINING PLACES AND MATERIAL UNITS WITH PROVIDERS BASED IN THIRD COUNTRIES (“THIRD COUNTRIES” AS DEFINED IN THE “DATA PROCESSING AGREEMENT (GDPR)” SECTION BELOW). IF YOU DO NOT WANT YOUR PERSONAL INFORMATION TO BE TRANSFERRED IN THIS WAY YOU SHOULD ONLY USE COURSESIGHT TO BOOK COURSES WITH UK BASED PROVIDERS.

We will take all steps reasonably necessary to ensure that your data and any data relating to any Course Delegates you give us are treated securely and in accordance with these terms and conditions.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will take reasonable steps to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use reasonable procedures and security features to try to prevent unauthorised access.

Purchase of Training Places

Any purchase of a Training Place or a Material Unit from a Provider is subject to:
* these terms and conditions (including any referred to in them); and * the terms and conditions of the Provider displayed on or linked to via CourseSight. Purchases may be subject to payment card verification and other security checks and your transaction may be cancelled if it has not passed any such verification process.

Payment

Unless agreed otherwise by the Provider, payment from the Booker of the amount specified by the Provider for the relevant Training Place or Material Unit is due and payable immediately.

A Booker can pay using one of the accepted payment methods by following the on-screen instructions on CourseSight or via another method agreed with the relevant Provider. Payments shall be made in £ Sterling only.

A Booker’s obligation to pay for a Training Course or Material Unit is satisfied when the Provider has received the payment in full.

The Provider is responsible for determining whether VAT or any other taxes are due on the sale of a Training Place or Material Unit, and for collecting and remitting such taxes. Any applicable taxes must be included in the price of the Training Place or Material Unit.

Course cancellation, postponement, other event changes

Details of a Booker’s right to cancel and/or rearrange their booking of a Training Place or of a Booker’s right to cancel their purchase of a Material Unit are stated by the relevant Provider for the relevant listing on CourseSight.

If, for any reason, the Training Place or Material Unit that a Provider has sold is no longer available, the Provider must either: (i) contact the Booker (by email to the address provided by the Booker) and resolve the matter; or (ii) cancel the event directly from the event page.

Causeway Technologies Limited is not responsible or liable for the cancellation, venue, room, date or time changes, or changes to the delivery method of any courses. Any disputes about charges, refunds or anything else in relation to a course must be resolved between the Booker and Provider. Causeway Technologies solely provides a web booking engine service and disclaims any and all liability for the quality of training, material, payment and/or refund disputes or anything else pertaining to the purchase made.

Causeway Technologies Limited does not have any responsibility or liability for notifications or e-mails sent to Bookers or the content of the same including any information which is incorrect or misleading.

The Provider remains liable for the fees and/or charges of Causeway Technologies notwithstanding any such cancellations or disputes.

Term and termination

This User Agreement shall commence on the date that you register an Account with CourseSight or, if you are a Provider, on the date on which you accept our Letter of Commitment if earlier (the “Commencement Date"), and will continue for an indefinite period unless terminated in accordance with these terms and conditions.

If you are an organisation which has a separate written agreement in place with us in respect of CourseSight (which is signed on your behalf and our behalf):

  • this User Agreement shall commence on the commencement date set out in that separate written agreement;
  • this User Agreement shall apply to the extent that it does not conflict with the terms of that separate written agreement; and
  • notwithstanding the foregoing the termination provisions of that separate written agreement shall apply.

If you are a Booker, you may terminate this User Agreement at any time by telephoning our customer service team at +44 (0)1753 279927 or by e-mailing us at help.desk@causeway.com

If you are a Provider, you may terminate this User Agreement as set out in the Additional Terms and Conditions for Providers below.

Without limiting our rights (as set out below), we may terminate this User Agreement by giving at least thirty (30) days’ notice by email to your registered email address.

Termination of this User Agreement shall not affect the rights or liabilities of either party accrued prior to and including the date of termination or expiry and/or any terms intended expressly or by implication to survive termination or expiry.

Your data will be retained for a period in accordance with the duration of processing section of this User Agreement, see Appendix 1.

Website changes and availability

We reserve the right at any time to modify or discontinue, temporarily or permanently, CourseSight or any part of CourseSight with or without notice for any reason. We perform regularly scheduled maintenance and therefore CourseSight may be temporarily unavailable during maintenance periods.

Intellectual property rights

When providing us with content for CourseSight, you grant us a non-exclusive, worldwide, perpetual, irrevocable, royalty-free, sublicense-able right to use the content and authorise us to exercise any and all copyright, trademark, publicity, database or other rights you have in or to the content in any media known now or in the future.

We or our licensors are the owner or the licensee of all intellectual property rights in CourseSight, and in the material published on it. Those works are protected by copyright laws and treaties around the world. All such rights are reserved.

You may print off one copy, and may download extracts, of any page(s) from CourseSight for your personal use and you may draw the attention of others within your organisation to content posted on our site.

You must not modify the paper or digital copies of any materials you have printed off or downloaded in any way, and you must not use any illustrations, photographs, video or audio sequences or any graphics separately from any accompanying text.

Our status (and that of our licensors and other identified contributors) as the authors of content on CourseSight must always be acknowledged.

You must not use any part of the content on CourseSight for commercial purposes without obtaining a licence to do so from us or our licensors.

If you print off, copy or download any part of CourseSight in breach of these terms, your right to use CourseSight will cease immediately and you must, at our option, return or destroy any copies of the materials you have made.

Links to other websites and user-generated content

Where CourseSight contains links to other websites and resources provided by third parties, including Providers, these links are provided for your information only. Such links should not be interpreted as approval by us of those linked websites or information you may obtain from them. We have no control over the contents of those websites or resources.

CourseSight may include information and materials uploaded by other users of CourseSight, including to bulletin boards and chat rooms. This information and these materials have not been verified or approved by us. The views expressed by other users on CourseSight do not represent our views or values.

Liability

To the fullest extent permissible by law, we shall not be liable to you in contract, tort (including negligence) or otherwise for any business losses, such as losses of data, profits, revenue, business, opportunity, goodwill, reputation or business interruption for any losses which are not reasonably foreseeable by us arising, directly or indirectly, from:

  • your use of or your inability to use CourseSight;
  • delays or disruptions in CourseSight;
  • viruses or other malicious software obtained by accessing, or linking to, CourseSight;
  • glitches, bugs, errors or inaccuracies of any kind in CourseSight;
  • damage to your hardware device from the use of CourseSight;
  • the content, action or inactions of third parties, including items listed using CourseSight;
  • a suspension or other action taken with respect to your Account or your breach of these terms as set out below;
  • your need to modify practices, content or behaviour or your loss or inability to do business, as a result of changes to this User Agreement. Nothing in this User Agreement excludes our liability:
  • for death or personal injury caused by our negligence; or
  • for fraud or fraudulent misrepresentation.

Breaching these terms

When using CourseSight, you agree that you will not do any of the following:

  • behave in an abusive manner to any Causeway Technologies Limited employee or any other user of CourseSight;
  • breach or circumvent any laws, third party rights or our policies;
  • post false, inaccurate, misleading, defamatory or libellous content;
  • fail to fulfil your contractual obligations regarding the sale or purchase of a Training Place or Material Unit;
  • use any of our trademarks without our prior written permission;
  • copy, reproduce, reverse engineer, modify, create derivative works from, distribute or publicly display any content (except for your information) or software from CourseSight without our prior express written permission;
  • interfere or attempt to interfere with the proper working of CourseSight; or
  • bypass any measures we may use to prevent or restrict access to CourseSight.

Without limiting other remedies, we may limit, or temporarily or permanently suspend, or terminate your Account, restrict or prohibit access to, and your activities on, CourseSight, remove listings and take technical and legal steps to keep you from using CourseSight if:

  • we cannot verify or authenticate the information you have provided;
  • we have good reason to believe that you are creating problems or possible legal liabilities;
  • we have good reason to believe that you are violating this User Agreement, the law or are infringing the rights of third parties; or * you fail to make full payment of any fees due under the User Agreement by the relevant due date for payment.

Other important terms

The User Agreement (and all documents incorporated by reference) constitutes the entire agreement between us relating to its subject matter and supersedes all prior agreements and understandings between us.

If you are an organisation which has a separate written agreement in place with us in respect of CourseSight (which is signed on your behalf and our behalf):

  • this User Agreement shall commence on the commencement date set out in that separate written agreement;
  • this User Agreement shall apply to the extent that it does not conflict with the terms of that separate written agreement; and
  • notwithstanding the foregoing the termination provisions of that separate written agreement shall apply.

We may transfer this User Agreement to someone else. We may transfer our rights and obligations under these terms to another organisation. We will always tell you in writing if this happens and we will ensure that the transfer will not affect your rights under the contract. You may only transfer your rights or your obligations under these terms to another person if we agree to this in writing.

Each of the paragraphs of these terms operates separately. If any court or relevant authority decides that any of them are unlawful, the remaining paragraphs will remain in full force and effect.

If we do not insist immediately that you do anything you are required to do under this User Agreement, or if we delay in taking steps against you in respect of your breaking this User Agreement, that will not mean that you do not have to do those things and it will not prevent us taking steps against you at a later date.

These terms and the User Agreement are governed by English law and you can bring legal proceedings in respect of any dispute or claim arising out of or in connection with these terms in the English courts.

Cookie Policy

What are cookies?

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and allows us to improve our site.

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer (or internet-enabled device) if you agree.

Cookies allow us to identify the computer or device you are using to access our website – but we cannot identify you personally. This information is sent back to our systems as you move around our website. Cookies are unique to the web browser you are using – so if you are using a desktop computer as well as a smart phone, different data will be collected for each.

Cookies we use

We use the following cookies:

Strictly necessary cookies: These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website and services.

Analytical/performance cookies: These allow us to recognise and count the number of visitors and to see how visitors move around our site when they are using it e.g. which pages are viewed by visitors most frequently. This helps us to improve the way our website and services work, for example, by ensuring that users are finding what they are looking for easily.

Functionality cookies. These are used to recognise you when you return to our site. This enables us to personalise our content for you and remember your preferences (for example, your choice of language or region).

We do not set targeting/advertising cookies.

Who sets cookies?

Cookies can be set by the owner of the website you are on. These are known as first party cookies. Please note that third parties may also set cookies of any type, over which we have no control – however, you can control them by managing your cookies (see below). Only the owner of the cookie can see the anonymous information it collects.

How can I manage cookies?

You may block cookies by activating the setting on your browser which allows you to refuse the setting of all or some cookies. However, if you select this setting, you may be unable to access all or certain parts of our site.

You can find more information about cookies on the ICO Website https://ico.org.uk/global/cookies and you can find detailed information on how you can control cookies at AboutCookies.org.

We may need to update this Cookie Policy in the future and so encourage you to review this Cookie Policy periodically to stay informed about how we are using cookies. This Cookie Policy was last updated in February 2020.

If you have any questions or comments regarding this Cookie Policy, please e-mail help.desk@causeway.com

Additional Terms and Conditions for Providers

These terms apply to you if you are a Provider, in addition to the General Terms and Conditions.

Your Account

The registration information you provide when you open an Account, your training course details and the history of bookings on your training courses will be stored and may be used for the purpose of communicating with you and with Bookers which are organisations about things we think may be of interest to you and/or them including courses. Information about you and the course data you provide will be passed on to the relevant Bookers and you can view statistics and reports about the Training Places and Material Units you have sold.

We reserve the right to suspend or close your Account at any time without giving a reason and without compensation. If we close your Account, we will send you a report showing your outstanding Training Place bookings at the time of closure.

Your training courses

For each training course you post on CourseSight, you must include full details of your terms and conditions governing bookings, including cancellations, privacy policy and substitutions.

You are responsible for the information you post about your training courses.

You undertake to provide the training courses using reasonable care and skill and you warrant not to do anything that might bring CourseSight into disrepute.

You shall only charge course fees payable by the Booker in £ Sterling and any applicable taxes must be included in the price of the Training Place and/or Material Unit.

You will not use the personal contact details which are provided to you by us in connection with the booking of a Training Place or purchase of a Material Unit to contact the individual directly other than in relation to their booking.

Evidence log

CourseSight provides the facility for Training Provider Administrators to upload PDF and/or JPEG files, however CourseSight holds no liability for the use, misuse and/or accuracy of such files.

Course outcomes

Where a Booker has correctly entered a Course Delegate’s relevant smartcard details on a booking form you must record the outcome of the course in CourseSight (e.g. First Aid Certificate Level 1), for this information to be transferred into the relevant database to which the CourseSight account has been linked. This can be done individually or in a bulk award. The Booker and/or Training Provider Administrator must enter the outcome details and/or the smartcard/third party system details on the booking form correctly. In the event of incorrect outcomes or entries being passed to the third-party systems, we hold no liability in contract, tort or otherwise for such entries.

Linking to other users

Within CourseSight, you can create a link to Industry Bodies and Bookers that you want to connect with.

Once linked to a Booker, via the “My Community” tab, you can give that Booker a discount on all or some of your Training Places. You may also give Bookers the option to pay for Training Places or Material Units on account.

Payment receipt methods

You can take payment for the courses you sell through CourseSight either by credit/debit card or by payment on account. Where a payment is made by credit/debit card, the Booker will be issued with a VAT receipt in your name.

In order to take payment by credit/debit card, you must first set up an account with Stripe. (To find out how to set up an account, go to https://stripe.com/gb .) Payments taken by card are paid directly into your account, subject to the terms and conditions of Stripe.

Where you accept payment on account for a Training Place or for a Material Unit, you are responsible for obtaining payment from the Booker. Causeway Technologies Limited is not liable for the creditworthiness of any Booker and the Provider agrees to accept all responsibility for obtaining payments, irrespective of the method of payment.

Our Charges

Unless otherwise agreed, prior to the commencement of this User Agreement you may choose one of two pricing options which are set out below (Annual or Monthly Charges) which we will confirm to you in writing prior to the registration of your Account together with details of key terms, the Band (A-F) which you have chosen and our charges for that chosen Band which you shall pay as set out in the table below.

If the number of your Delegates Processed within a calendar month exceeds the limits imposed for your chosen Band (A-F), we will apply, and you shall pay an overage charge for each Delegate Booked over your Band’s limit.

“Delegate Processed” means an individual who has been registered against a Training Place.

Booking cancellations or disputes shall not be considered for the purposes of reducing the number of Delegates Processed.

Annual Charge

Your annual charge shall be in accordance with the Band you have chosen. A higher annual charge shall apply for volumes of bookings above our banding system where this has been agreed in an enterprise contract.

We shall invoice you on or around the Commencement Date of this User Agreement in respect of our charge for the forthcoming 12-month period commencing on the Commencement Date of this User Agreement.

You shall pay our (annual charge) invoice within sixty (60) days of the date of the invoice in full and in cleared funds to the bank account shown on our invoice. Time for payment shall be of the essence.

Should your annual limit for Delegates Processed be exceeded, we shall invoice you for the associated overage charges at the end of the contract year i.e. at the end of the 12-month period commencing on the Commencement Date of this User Agreement we shall invoice you for any overage charges arising during that 12 month period and we shall do the same on each anniversary thereafter.

You shall pay our (overage) invoice within thirty (30) days of the date of the invoice in full and in cleared funds to the bank account shown on our invoice. Time for payment shall be of the essence.

You may terminate this User Agreement by giving at least thirty (30) days’ notice prior to the expiration of the 12-month period following its commencement by e-mailing us at help.desk@causeway.com This User Agreement shall otherwise automatically renew for a further period of twelve (12) months and on each anniversary thereafter unless terminated by you by giving at least thirty (30) days’ notice prior to its renewal date by e-mailing us at

help.desk@causeway.com

We may increase these annual charges on reasonable advance written notice to you by posting a notice on CourseSight.

Monthly Charge

Your monthly charge shall be in accordance with the Band you have chosen.

Commencing on the Commencement Date of this User Agreement at the start of each calendar month we shall take a direct debit using Stripe of our charge for the forthcoming calendar month.

You agree to carry out the necessary actions to permit such a direct debit to be taken by us including ensuring ongoing payment is possible for the duration of this User Agreement e.g. ensuring updated payment details are provided if a payment method expires.

Payment is due within 30 days. Time for payment shall be of the essence.

Should your per month limit for Delegates Processed be exceeded in any given month(s), we shall invoice you for the associated overage charges at the end of each quarter for that quarter’s overage charges.

You shall pay our (overage) invoice within thirty (30) days of the date of the invoice in full and in cleared funds to the bank account shown on our invoice. Time for payment shall be of the essence.

You may terminate this User Agreement by giving at least thirty (30) days’ notice by e-mailing us at help.desk@causeway.com

We may increase these monthly charges on giving you at least 30 days' advance written notice, which we may notify to you by posting a notice on CourseSight.


Your data will remain available to you for extraction via reports for four (4) weeks following the date of termination or expiry of this User Agreement, at which point your user login(s) will be disabled.

Your data will be retained for a period in accordance with the duration of processing section of this User Agreement, see Appendix 1. At the time you notify us of termination of this User Agreement, you may request a bulk export of data as part of the decommissioning process. If you decide to reactivate your Account within the relevant duration of processing period(s) applicable to your data, your data may be restored to your reactivated Account.

Access to CourseSight APIs

CourseSight has APIs that you may access subject to the terms and conditions below by applying to us for an API key including one that enables you to pull course data for your Training Places from CourseSight and another that enables you to pull out reporting data relating to your Training Places. APIs can be tested by you in a sandbox environment prior to activation. Charges for use of APIs will be agreed with you separately to this User Agreement. You agree to pay such charges.

Your Application” refers, in this document, to any application that interfaces with our systems by means of the API. You may charge for your application however, you may not sell, rent, lease, sublicense, redistribute, or syndicate access to either of our APIs.

Rules of Use

Your right to access our APIs and documentation is limited and subject to compliance with the CourseSight User Agreement and Privacy Policy. Further, you will not: (A) access our APIs or documentation in violation of any law or regulation; (B) access our APIs in any manner that (i) compromises, breaks or circumvents any of our technical processes or security measures associated with the Services, (ii) poses a security vulnerability to customers or users of the Services, or (iii) tests the vulnerability of our systems or networks; (C) access our APIs or documentation in order to replicate or compete with the Services; (D) attempt to reverse engineer or otherwise derive source code, trade secrets, or know-how of our APIs or Services; or (E) attempt to use our APIs in a manner that exceeds rate limits, or constitutes excessive or abusive usage.

Transparency & Reporting

If you offer Y use by others outside your organisation, you must maintain a user agreement and privacy policy for your Application, which is prominently identified or located where users download or access your Application. Your privacy policy must meet applicable legal standards and describe the collection, use, storage and sharing of data in clear, understandable, and accurate terms. You must ensure the use of Your Application will not result in the transfer of personal data outside the UK.

Ownership and Proprietary Rights

You retain your ownership rights in your Application and we own and will continue to own our APIs and related documentation, including all related intellectual property rights therein.

Termination

At our complete discretion, we may terminate your use of our APIs at any time, with or without cause, and without notice to you. If we do this, we will give you a pro rata refund of any API fees you have already paid to us. You will still be liable to pay us any outstanding API fees for the period up to termination. Upon termination, all rights and granted to you will terminate immediately. You understand that any APIs or documentation that are not made generally available but that are otherwise made available to you are our confidential information. Upon termination, you will promptly destroy copies of such confidential information and confirm that you have done so.

You may discontinue use of our APIs at any time without refund of any API fees already paid.

Disclaimer of Warranties and Liability

Except as expressly provided for herein, the APIs, documentation and all related components and information are provided by us on an "as is" and "as available" basis without any warranties of any kind, and we expressly disclaim any and all warranties, whether express or implied, including the implied warranties of merchantability, title, fitness for a particular purpose, and non-infringement. You acknowledge that we do not warrant that the APIs will be uninterrupted, timely, secure, or error-free.

You agree to indemnify us for any claim made against us relating to your use of our APIs.

General Terms applying to Charges and Fees

All amounts payable by you are exclusive of amounts in respect of value added tax chargeable for the time being (VAT). You shall pay such additional amount in respect of VAT as is chargeable at the same time as payment is due under these terms and conditions.

If you fail to make any payment due to us by the due date for payment, then you shall pay interest on the overdue amount at the rate of 4% per cent per annum above the Bank of England's base rate from time to time. Such interest shall accrue on a daily basis from the due date until actual payment of the overdue amount, whether before or after judgment. You shall pay the interest together with the overdue amount.

If a payment due to us is not made on time, we reserve the right to suspend your Account until all overdue payments have been made. A recommencement charge of £250 shall be levied in order to reinstate your Account following any such suspension.

You shall not seek to circumvent CourseSight or operate in a manner which seeks to avoid liability for our fees and charges.

The Provider remains liable for the fees and/or charges of Causeway Technologies Limited:
* notwithstanding any cancellation for any reason by either the Provider or Booker of any Training Place booked through CourseSight (including by reason of the course no longer being available); * notwithstanding any disputes between the Provider and Booker in respect of any Training Place booked through CourseSight; and * in respect of the purchase by Bookers of Material Units notwithstanding the cancellation of any such purchase.

For enterprise contracts, where you have a separate written agreement in place with us in respect of CourseSight (which is signed on your behalf and our behalf) we may provide Training Places and/or Material Units on a fixed price basis for a particular duration and on suitable payment terms where you have guaranteed the purchase of certain volumes of such Training Places and/or Material Units as set out in that agreement.

Restrictions

When using CourseSight, you agree that you will not do any of the following:

  • contact other CourseSight users to solicit sales outside of CourseSight;
  • use the Booker’s personal data for any reason other than delivery of the Training Place or the provision of Material Units;
  • behave in an abusive manner to any Causeway Technologies Limited employee or contractors or any other user of CourseSight;
  • breach or circumvent any laws, third party rights or our policies;
  • post false, inaccurate, misleading, defamatory or libellous content;
  • fail to fulfil your contractual obligations regarding the sale of a Training Place or Material Unit;
  • use any of our trademarks without our prior written permission;
  • copy, reproduce, reverse engineer, modify, create derivative works from, distribute or publicly display any content (except for your information) or software from CourseSight without our prior express written permission;
  • interfere or attempt to interfere with the proper working of CourseSight; or
  • bypass any measures we may use to prevent or restrict access to CourseSight.

Liability

This section sets out our entire financial liability (including any liability for the acts or omissions of our employees, agents and sub-contractors) to you:

  • arising under or in connection with these the User Agreement and/or these terms and conditions;
  • in respect of any use made by you of the CourseSight; and
  • in respect of any representation, statement or tortious act or omission (including negligence) arising under or in connection with these terms.

Except as expressly and specifically provided in these terms and conditions:

  • you assume sole responsibility for results obtained from the use of the CourseSight;
  • all warranties, representations, conditions and all other terms of any kind whatsoever implied by statute or common law are, to the fullest extent permitted by applicable law, excluded from the User Agreement and these terms; and
  • CourseSight is provided to you on an "as is" basis.

Nothing in these terms and conditions excludes our liability:

  • for death or personal injury caused by our negligence; or
  • for fraud or fraudulent misrepresentation.

Except as set out in the preceding paragraph:

  • we shall not be liable whether in tort (including for negligence or breach of statutory duty), contract, misrepresentation, restitution or otherwise for any loss of profits, loss of business, depletion of goodwill and/or similar losses or loss or corruption of data or information, or pure economic loss, or for any special, indirect or consequential loss, costs, damages, charges or expenses however arising under the User Agreement;
  • our total aggregate liability in contract, tort (including negligence or breach of statutory duty), misrepresentation, restitution or otherwise, arising in connection with the performance or contemplated performance of the User Agreement shall be limited to the amount of fees which you have paid to us in the 12 months prior to the action giving rise to the liability.

Indemnity

You agree to indemnify and hold us and (if applicable) any parent, subsidiary or affiliated company from time to time (each a member of our Group) of ours and each of our and their respective officers, directors, employees and agents harmless against any claim or demand and all liabilities, costs and expenses (including reasonable legal fees) incurred by us and (if applicable) any member of our Group resulting from or arising out of your breach of the User Agreement, your improper use of CourseSight and/or your breach of any law or the rights of a third party.

Appendix 1

Data Processing Agreement (GDPR)

These terms (“DPA”) apply to you if you are a Provider, a Booker which is an organisation or an Industry Body, in addition to the General Terms and Conditions.

In this DPA the following expressions have the following meanings:

Data Protection Legislation” means the UK GDPR, the Data Protection Act 2018 and any regulations and secondary legislation made thereunder, as amended or updated from time to time and then any successor legislation thereto. “Data Subject” has the meaning ascribed to it in the Data Protection Legislation.

personal data” means data subject to protection under data protection law in any jurisdiction.

third countries” (or a “third country”) means the US or other countries outside the UK which are not subject to an adequacy regulation or decision as set out in the Data Protection Legislation.

UK GDPR” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018 and the Data Protection, Privacy and Electronic Communications (Amendments Etc.)(EU Exit) Regulations 2020.

  1. Both you and we will comply with all applicable requirements of the Data Protection Legislation. This clause 1 of this DPA is in addition to, and does not relieve, remove or replace, a party’s obligations under the Data Protection Legislation.
  2. Without prejudice to the generality of clause 1 of this DPA, we will in relation to any personal data processed in connection with our performance of our obligations under this User Agreement process that personal data only on your written instructions unless we are required to process the data by law. Where we are relying on a legal requirement as the basis for processing personal data, we will promptly notify you of this before performing the processing required unless we are prohibited by that law from so notifying you. We will promptly inform you if, in our opinion, your instruction would not comply with the Data Protection Legislation.
  3. The scope, nature and purpose of processing by us, the duration of the processing and the types of personal data (as defined in the Data Protection Legislation) and categories of Data Subject are set out at Appendix 1, as amended from time to time by us at our sole discretion. For the avoidance of doubt, you agree that this User Agreement comprises your documented instructions to us (in accordance with Article 28.3(a) of the relevant Data Protection Legislation) to process the personal data set out at Appendix 1.
  4. If we process any personal data on your behalf when performing our obligations under this User Agreement, you and we record our intention that you shall be the data controller and we shall be a data processor in accordance with the Data Protection Legislation and in any such case and without prejudice to the generality of clause 1 of this DPA:
    • you shall ensure that you have all necessary appropriate consents and notices in place to enable lawful transfer the relevant personal data to us for the duration and purposes of this User Agreement so that we may lawfully use, process and transfer the personal data in accordance with this User Agreement on your behalf including but not limited to enabling us lawfully to view the personal data for the purposes of support, investigation of potential abuse, monitoring of system performance and account management;
    • you shall ensure that the relevant third parties have been informed of, and have given their consent to, such use, processing, and transfer as required by the Data Protection Legislation and any other applicable data protection laws;
    • both you and we shall have in place appropriate technical and organisational measures to protect against unauthorised or unlawful processing of the personal data and against its accidental loss, destruction or damage appropriate to the harm that might result from the unauthorised or unlawful processing or accidental loss, destruction or damage and the nature of the data to be protected, having regard to the state of technological development and the cost of implementing any such measures (those measures may include, where appropriate, pseudonymising and encrypting the personal data, ensuring confidentiality, integrity, availability and resilience of our systems and services, ensuring that availability of and access to personal data can be restored in a timely manner after an incident, and regularly assessing and evaluating the effectiveness of the technical and organisational measures adopted);
    • we will ensure that all our personnel authorised to process the personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality;
    • we will notify you without undue delay on becoming aware of any personal data breach;
    • we will provide you with all reasonable assistance in responding to any request from a Data Subject that you or we receive in connection the personal data;
    • you will indemnify us in respect of any loss or liability which we reasonably incur in connection with any request from a Data Subject that you or we receive in connection with the personal data;
    • we will assist you ensuring compliance with your obligations under the Data Protection Legislation with respect to security, breach notifications, impact assessments and consultations with the Information Commissioner; * we will make available to you all information necessary to demonstrate compliance with the obligations set out at Article 28 of the relevant Data Protection Legislation and permit and contribute to audits, including inspections, conducted by you or another auditor of your choice for the purpose of ensuring such compliance; and
    • you and we will maintain complete and accurate records and information to demonstrate compliance with this DPA.
    • We will not transfer any of the personal data outside of the UK unless the one of the following conditions are fulfilled:
    • Condition 1:
      • there are appropriate safeguards or an adequacy regulation or decision in relation to the transfer as set out in the Data Protection Legislation;
      • the data subject has enforceable rights and legal remedies; or * the transfer otherwise complies with the Data Protection Legislation.
    • Condition 2:
      • a Booker (including an individual Booker) purchases a Training Place or Material Unit from a Provider based in a third country; and
      • you have instructed us to transfer the relevant personal data of the Booker (including an individual Booker) and delegates to that Provider.
    • You consent to us appointing third party processors (collectively, “sub-processors”) to process the personal data on our behalf. The sub-processors currently engaged by us and authorised by you are set out at Appendix 2. We confirm that:
      • we will enter into with each third-party processor a written agreement incorporating terms substantially similar to this DPA;
      • as between you and us, we will remain liable for all acts or omissions of any third-party processor appointed by us pursuant to this clause 6 of this DPA; and
      • should you object to the appointment of any new sub-processor on reasonable grounds relating to the processing of personal data, we shall discuss with you reasonable alternative solutions in good faith. If no resolution can be reached, we will, at our sole discretion, either not appoint the new sub-processor, or permit you to terminate the Service in accordance with the termination provisions of these Terms.
    • On termination of this User Agreement for any reason unless required by law to store the personal data, we will within a reasonable period after receipt of your written direction to do so, delete or return the personal data and copies thereof. Should you fail to provide such written direction within 90 days of termination of this User Agreement, we will permanently delete the personal data from the database. Encrypted back-ups of the personal data will be kept for a maximum of 3 years after termination of this User Agreement or of such deletion. You shall pay all reasonable expenses incurred by us in returning or deleting the personal data.
    • We may at any time revise the provisions in this DPA by replacing them with any applicable controller to processor standard clauses or similar terms forming part of an applicable certification scheme as envisaged by the Data Protection Legislation (which shall apply when the relevant changes are made to this User Agreement).
    • For transfers of personal data to Providers based in third countries, the following clauses apply and this DPA hereby incorporates by reference: (a) the Standard Contractual Clauses for data controller to data processor transfers approved by the European Commission in decision 2010/593/EU and any amendments to the same by the European Commission, provided that Appendices 1 and 2 of the Standard Contractual Clauses are set forth in Appendix 3 to this DPA; and (b) the Standard Contractual Clauses for data controller to data controller transfers approved by the European Commission in decision 2004/915/EC and any amendments to the same by the European Commission, provided that Annex B of the Standard Contractual Clauses are set forth in Appendix 4 to this DPA. In each case (a) and (b), the data exporter is the user of CourseSight and the data importer is the Provider based in a third country. Should the UK establish equivalent safeguards to the said Standard Contractual Clauses under the Data Protection Legislation following exit from the EU on 1 January 2021, such safeguards will apply at the option of Causeway Technologies Limited and this DPA hereby incorporates them by reference to the extent they are applicable.

Appendix 1

Processing by Causeway Technologies Limited

  • At the time of booking an individual on training, personal details of each delegate are recorded and stored in CourseSight. These details are shared by CourseSight with the Training Provider with whom the course has been booked. For e-learning courses, the name and e-mail address of delegates are shared by CourseSight with third party service provider, Scorm Cloud, whose services facilitate the e-learning experience including the supply of e-learning materials and the recording of delegate progress and outcomes.
  • Upon completion of the booking process, the Booker makes an online payment via an external payment service (Stripe). Only the external payment reference is stored and processed in CourseSight. Confirmation of the booking is sent to the Booker and the delegate.
  • Upon Completion of the Course, outcomes are recorded and stored in CourseSight by Training Provider Administrators (Outcomes are: Attended & Achieved / Attended & did not Achieve / Did not Attend) and, for e-learning courses only, by Scorm Cloud.
  • If configured by the Booker, and if delegate CSCS card numbers or others were provided, course outcomes for the delegate are uploaded to SkillGuard, Validate, GoSmart, Checarda, the GoSmart Online Card Checker and the Checarda Online Card Checker, as appropriate.

Types of Personal Data

  • Personal Data
    • Personal data is recorded for all delegates as follows: First name, Surname, National Insurance Number (if entered), Email address, relevant industry card scheme membership number (if entered), other additional data required by the Training Provider or the delegate’s Employer to support the process of booking onto Courses. Course(s) booked. Dates when training booked/attended and training outcomes.
    • Data stored and processed for System Users (Training Administrators, Course Administrators, System Administrators) comprises: Full name, Email address, Username, Password (encrypted), Employer/ Organisation.
    • Minimal personal data is recorded for all Users of the system.
  • Special Category Data
    • There is no data classified by the ICO as ‘special category data’ stored or processed in the system.

Categories of Data Subjects

  • Individuals booked to attend training. These include:
    • Direct Employees of Companies that have registered to use CourseSight and who are booked on courses by their employer.
    • Subcontractors or Self-Employed Individuals subcontracted to work either for Companies that have registered to use CourseSight
    • Individuals that have booked themselves directly onto courses in CourseSight.
  • Authorised Course Booking Administrators. These include administrative staff within Companies that have registered to use CourseSight to book their Employees and Subcontractors onto Courses.
  • Authorised Training Administrators. These include course Trainers and Administrators authorised to record course outcomes on behalf of the Training Provider.
  • Authorised Industry Body Administrators.
  • Other Authorised Administrators of the system. * Individuals (delegates/Employees) Who have obtained logins and access and view their own records.

Purpose of Processing

  • When a Training Place is booked for a delegate or where a Material Unit is purchased, some basic details about the delegate are captured, stored and processed and made available to the Training Provider in order for the Training Provider to process the booking and subsequently fulfil their contractual obligation to deliver the training that has been booked.

Nature of Processing

  • Delegate details are captured and stored at the time a course place is booked, and these details are immediately made available to the Training Provider that will be delivering the training. In addition, booking confirmation and the course joining instructions are sent to the Booker and delegate respectively.
  • After course completion, Training Providers record course outcomes on the system and these outcomes are communicated back to the course booker and the course delegate by e-mail.
  • External Online payment services provided by Stripe Inc.
  • External services used for facilitating the tracking of delegate progress and outcomes in e-learning courses provided by Scorm Cloud.

Duration of Processing

  • Personal information collected will be retained for a maximum of 6 years. This retention period will apply from:
  • Delegates – from date of last course booked (whether by an employer or directly by the delegate themselves) or from last login date (whichever is the later)
  • Training Provider user accounts - from last login date (or from user profile creation date where no login has occurred)
  • Employer user accounts - from last login date (or from user profile creation date where no login has occurred)
  • Course Trainers – from date of last course linked to the trainer or from last login date (whichever is the later)
  • Encrypted backups: We will retain encrypted backup tapes containing personal data for a maximum of 3 years following deletion of the relevant data from our database.

Appendix 2

Personal Data Sub-processors

  • Stripe – Payment processing.
  • Sendgrid – Email delivery services.
  • SkillGuard, Validate and other client own-branded versions thereof. Delegates and their Course outcomes transferred to SkillGuard, Validate, GoSmart, Checarda, the GoSmart Online Card Checker, the Checarda Online Card Checker and other client own-branded versions thereof when configured to do so by Employers who book courses.
  • Google – Website Analytics.
  • ScormCloud – Enables recording of e-learning course delegate progress and outcomes.
  • Microsoft Azure- hosting.
  • tawk.to -customer chat.

Appendix 3

Appendix 1 to the Standard Contractual Clauses
The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix.

Data exporter

The data exporter is the user of CourseSight.

Data importer

The data importer is the Provider based in a third country.

Data subjects

The personal data transferred concern the following categories of data subjects:

The data subjects set out in Appendix 1.

Categories of data

The types of personal data set out in Appendix 1.

Special categories of data (if appropriate)

None.

The personal data transferred concern the following special categories of data (please specify):

CourseSight does not intentionally collect or process any special categories of data.

However, special categories of data may from time to time be processed through CourseSight where the data exporter or its end users choose to include this type of data within the communications it transmits. As such, the data exporter is solely responsible for ensuring the legality of any special categories of data it or its end users choose to process using CourseSight.

Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): This comprises the activities set out in the nature of processing in Appendix 1.

Appendix 2 to the Standard Contractual Clauses
Description of the technical and organizational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c) (or documentation/legislation attached):

Please refer to the Provider’s website.

Appendix 4

Annex B to the Standard Contractual Clauses

DESCRIPTION OF THE TRANSFER

Data Subjects

The personal data transferred concern the following categories of data subjects:

The data subjects set out in Appendix 1.

Purposes of the Transfer(s)

The transfer is made for the following purposes:

The purpose of processing set out in Appendix 1.

Categories of data

The types of personal data set out in Appendix 1.

Recipients

The personal data transferred may only be disclosed to the following recipients or categories of recipients:

  • Employees, agents, affiliates, advisors and independent contractors of data importer with a reasonable business purpose for needing such personal data
  • Sub-processors of data importer that, in their performance of their obligations to data importer, must process such personal data acting on behalf of and according to instructions from data importer.
  • Any person (natural or legal) or organization to whom data importer may be required by applicable law or regulation to disclose personal data, including law enforcement authorities, central and local government. Sensitive data

N/A

Data protection registration of the data exporter

Service Level Agreement

Hosting the Service

We shall host CourseSight with a third party cloud hosting platform provider such as Microsoft Azure such that it can be accessed over the Internet 24 hours a day, 365/6 days a year, with a targeted uptime, excluding maintenance, of 99.5%.

We shall host CourseSight with sufficient capacity to handle the level of demand required. We shall monitor service performance and configure cloud resources and scale the solution as required to enable 98% of page requests to be processed and served within 2 seconds (excluding reports and other pages containing high volumes of data).

We shall host CourseSight within the United Kingdom, the database servers shall be located in the United Kingdom and all backups shall be made and stored within the United Kingdom. All data processing shall take place in accordance with the laws of England.

Commissioning

We shall be responsible for providing the software and any associated services or licences necessary to host CourseSight;

We will deploy and commission the software along with any cloud services necessary to run CourseSight.

We shall be responsible for the costs associated with hosting CourseSight.

Maintenance

We shall be responsible for servicing and maintaining CourseSight, the cloud services used to host CourseSight and any third-party services needed to host CourseSight to ensure smooth, uninterrupted running of the service.

Scheduled maintenance requiring CourseSight to be taken offline will be at times announced in advance.

We shall be responsible for installing upgrades and updates to CourseSight and will maintain a record of version numbers and installation dates for each upgrade. Upgrades will be installed at times announced in advance. The patching schedule shall ensure that the underlying platform is protected with regular security updates. We shall closely monitor patching activity and ensure that high availability features are appropriately configured so that any such updates do not impact on the availability of the service.

Security

We shall implement appropriate security measures to ensure the integrity of the hosted service and the data held within it in-line with accepted industry good practice prevailing at the time. We shall work closely with cloud security specialists to ensure best practice in the configuration of the software and infrastructure. This includes encryption of all in-transit and at-rest data using current and appropriate information security protocols, management, maintenance and secure configuration of application firewalls and other network security restrictions in conjunction with specific security measures integrated into the software.

The software platform shall be subjected to periodic external penetration testing by an external IT security specialist service provider.

All our personnel involved in the design, configuration and operation of the service shall carry out their duties in relation to delivery of the service in accordance with our ISO 27001 certification and security policies which are annually audited by an external ISO 27001 accrediting body.

Third Party Software/Services

We shall be responsible for the cost of supplying, licensing and operating any third-party software or services (including Microsoft Azure Platform) necessary to deploy, monitor, configure or otherwise provide CourseSight.

Data Back-Ups

We shall implement back-up procedures commensurate with standard industry good practice prevailing at the time. The back-up process shall not affect availability of the service.

At a minimum:

  • All database data shall be backed up hourly and replicated to a separate geo-diverse data centre with RTO of 4hr and RPO of 15 mins; and
  • The entire platform shall be backed up every 24 hours to an immutable backup storage account allow for rapid recovery if a catastrophic failure occurs.

In the event of damage to or loss of your data, we shall be responsible for restoring the data from the most appropriate back-up.

Supporting the Service

We shall provide third line support for CourseSight during normal working hours.

We shall use all reasonable endeavours to respond to and resolve problems within the following timescales, from when the problem is first reported:

Error Category      Response Time       Temporary Fix       Permanent Fix
Major error         30 minutes          12 Hours            5 Business Days
Serious error       30 minutes          1 Working Day       14 Business Days
Other error         30 minutes          14 Working Days     50 Business Days

Key:

A “major error” is an error which prevents CourseSight (or any aspect thereof) from being run effectively and/or cripples CourseSight (or any aspect thereof).

A “serious error” is an error which causes severe performance degradation; causes a halt to the operation of important tasks or places the operation of such tasks at risk.

An “other error” is any defect or any failure of us to provide the services in accordance with the terms of this User Agreement, other than a major error or a serious error.

A “temporary fix” is an acceptable temporary work around the error, which allows you to make proper use of CourseSight (or the affected part thereof) without substantial degradation in performance.

A “permanent fix” is a permanent resolution of the error, which restores CourseSight (or the affected part thereof) to full performance in accordance with the terms of this User Agreement.