Terms of Service

1. Introduction

These Terms of Service ("Terms") govern your use of the Kelex Labs Ltd website and services. By accessing our website or engaging our services, you agree to be bound by these Terms.

Kelex Labs Ltd is a company registered in England and Wales, specialising in cybersecurity, data privacy, AI governance, and operational resilience services for UK businesses.

2. Definitions

• "Company", "we", "us", "our" refers to Kelex Labs Ltd
• "Client", "you", "your" refers to the individual or organisation using our services
• "Services" refers to all cybersecurity, data privacy, AI governance, and operational resilience services provided by Kelex Labs
• "Website" refers to kelexlabs.com and all associated subdomains
• "Agreement" refers to these Terms of Service and any additional service agreements

3. Services Overview

Kelex Labs provides professional services including but not limited to:

3.1 Assessment Services

• Cybersecurity Gap Analysis
• Cloud Security Assessments
• GDPR Gap Analysis
• Business Continuity Assessments
• Security Metrics Assessments
• AI Act Compliance Assessments
• AI Ethics & Governance Framework Development
• AI Readiness Assessments
• Data Maturity Assessments
• Operational Resilience Assessments

3.2 Managed Services

• Virtual Chief Information Security Officer (vCISO) Services
• Outsourced Data Protection Officer (DPO) Services
• Managed Cloud Security Services
• Operational Resilience Services
• Security Metrics Services

3.3 AI & Data Services

• AI Strategy & Roadmap Development
• AI Transformation Programmes
• AI Use Case Identification
• Custom AI Development
• Intelligent Process Automation
• Talk with Your Data (RAG) Solutions

4. Service Engagement

4.1 Consultation Process

All service engagements begin with a consultation to understand your requirements. This consultation is provided at no charge and does not create any binding obligations.

4.2 Service Agreements

Specific services will be governed by separate service agreements that detail:

• Scope of work and deliverables
• Timeline and milestones
• Fees and payment terms
• Confidentiality and data protection requirements
• Liability and indemnification terms

4.3 Professional Standards

All services are provided in accordance with relevant professional standards, including but not limited to ISO 27001, NIST Framework, and UK regulatory requirements.

5. Client Responsibilities

To ensure effective service delivery, clients agree to:

• Provide accurate and complete information about their systems and requirements
• Grant necessary access to systems, documentation, and personnel
• Respond promptly to requests for information or clarification
• Implement recommended security measures in a timely manner
• Maintain confidentiality of assessment findings and recommendations
• Comply with all applicable laws and regulations

6. Intellectual Property

6.1 Our Intellectual Property

All methodologies, frameworks, tools, and proprietary content used in our services remain the intellectual property of Kelex Labs. This includes:

• Assessment methodologies and frameworks
• Report templates and formats
• Proprietary tools and software
• Training materials and documentation

6.2 Client Data and Information

All client data, systems information, and business intelligence remain the property of the client. We do not claim any ownership rights over client information.

6.3 Work Product

Reports, recommendations, and deliverables created specifically for a client become the property of that client, subject to our right to retain copies for professional records and quality assurance purposes.

7. Confidentiality

We maintain strict confidentiality regarding all client information:

• All client information is treated as confidential and proprietary
• Information is only shared with authorised team members on a need-to-know basis
• We do not disclose client information to third parties without explicit consent
• Confidentiality obligations survive termination of our service relationship
• We may use anonymised, aggregated data for industry research and benchmarking

8. Limitation of Liability

8.1 Service Limitations

Our services are advisory in nature. We provide recommendations and guidance, but:

• We cannot guarantee that security incidents will not occur
• Implementation of recommendations remains the client's responsibility
• Security is an ongoing process requiring continuous attention
• No security assessment can identify all possible vulnerabilities

8.2 Liability Cap

To the maximum extent permitted by law, our total liability for any claims arising from our services shall not exceed the total fees paid by the client for the specific service giving rise to the claim.

8.3 Excluded Damages

We shall not be liable for any indirect, consequential, special, or punitive damages, including but not limited to loss of profits, data, or business opportunities.

9. Professional Indemnity

Kelex Labs maintains professional indemnity insurance appropriate to the nature and scale of our services. Details of our insurance coverage are available upon request.

10. Payment Terms

10.1 Fees and Billing

Service fees are specified in individual service agreements. Unless otherwise agreed:

• Assessment services are typically billed upon completion
• Managed services are billed monthly in advance
• Payment terms are net 30 days from invoice date
• Late payments may incur interest charges

10.2 Expenses

Reasonable expenses incurred in service delivery (travel, accommodation, etc.) will be billed separately with appropriate documentation.

11. Termination

11.1 Termination by Client

Clients may terminate services with appropriate notice as specified in the service agreement. Fees for work completed up to the termination date remain payable.

11.2 Termination by Kelex Labs

We may terminate services if:

• Payment terms are not met
• Client fails to provide necessary cooperation or access
• Continuation of services would violate legal or ethical requirements
• There is a fundamental breach of the service agreement

11.3 Post-Termination

Upon termination, we will return or securely destroy client data as requested, subject to our legal and professional record-keeping requirements.

12. Website Use

12.1 Acceptable Use

When using our website, you agree not to:

• Use the site for any unlawful purpose
• Attempt to gain unauthorised access to our systems
• Interfere with the site's operation or security
• Upload malicious code or content
• Violate any applicable laws or regulations

12.2 Content Accuracy

While we strive to keep website content accurate and up-to-date, we make no warranties regarding the completeness or accuracy of information provided.

13. Compliance and Regulatory

Our services are designed to help clients achieve compliance with relevant regulations, including:

• UK GDPR and Data Protection Act 2018
• DUAA 2025
• EU DORA
• EU AI Act requirements
• Financial services regulations (FCA, PRA)
• Public sector security requirements (DSPT, Cyber Essentials)
• Industry-specific standards (ISO 27001, SOC 2, etc.)

However, ultimate responsibility for compliance remains with the client.

14. Force Majeure

Neither party shall be liable for any failure or delay in performance due to circumstances beyond their reasonable control, including but not limited to acts of God, government actions, pandemics, or technical failures.

15. Governing Law

These Terms are governed by the laws of England & Wales and subject to the exclusive jurisdiction of the English courts. Any disputes will be resolved through good faith negotiation, with recourse to mediation or arbitration as appropriate.

16. Changes to Terms

We may update these Terms from time to time. Material changes will be communicated to existing clients, and continued use of our services constitutes acceptance of updated Terms.

17. Contact Information

For questions about these Terms of Service or our services, please contact us:

18. Severability

If any provision of these Terms is found to be unenforceable, the remaining provisions shall continue in full force and effect. The unenforceable provision shall be replaced with an enforceable provision that most closely reflects the original intent.