These Terms of Use (“Terms”) govern your access to and use of the website operated by NORTH STAR CYBER SECURITY LTD, trading as NS Security (“NS Security”, “we”, “us” or “our”).

Please read these Terms carefully before using this Website.

By accessing or using this Website, you acknowledge that you have read and understood these Terms and agree to comply with them.

If you do not agree with these Terms, you should not use this Website.

This Website is operated by:

NORTH STAR CYBER SECURITY LTD

Trading as: NS Security

Company number: 17058341

Company type: Private Limited by Shares

Registered in England and Wales

Website: https://ns-security.co.uk/

Email: contact@ns-security.co.uk

NS Security provides professional cybersecurity, information security, risk management, governance, compliance, security assessment and related advisory services.

This Website provides general information about NS Security, our capabilities, areas of expertise, services and related cybersecurity, information security, risk, governance and compliance matters.

Content made available on this Website is provided for general informational purposes only and does not constitute cybersecurity, legal, regulatory, compliance or other professional advice.

Information provided on this Website should not be relied upon as a substitute for professional advice appropriate to the particular circumstances, systems, organisation, regulatory environment or risk profile concerned.

You are responsible for obtaining appropriate professional advice before acting or refraining from acting on the basis of information available through this Website.

Use of this Website or communication with NS Security through the Website does not, by itself, create a client, advisory, contractual or other professional relationship with NORTH STAR CYBER SECURITY LTD.

In particular, none of the following, by itself, creates a client or professional relationship:

• visiting or using this Website;
• submitting a contact form;
• sending an email;
• requesting information;
• requesting a consultation;
• booking or requesting a call;
• participating in an introductory discussion;
• requesting a proposal or quotation;
• downloading or accessing materials from this Website; or
• receiving general information from NS Security.

A professional engagement exists only where NS Security and the relevant client have expressly agreed to an engagement in accordance with applicable contractual arrangements.

Any services subsequently provided by NS Security may be governed by separate terms, including a services agreement, master services agreement, statement of work, proposal, engagement letter, data processing agreement, rules of engagement or other written agreement.

If there is any conflict between these Terms and a separately executed agreement governing professional services, the terms of the separately executed agreement will prevail in relation to those services.

Cybersecurity involves inherent and continuously evolving risks.

No security architecture, control framework, assessment, technology, policy, procedure or security measure can guarantee absolute security or complete protection against all threats, vulnerabilities, attacks, incidents, losses or unauthorised activities.

Nothing on this Website constitutes a representation, warranty or guarantee that:

• a particular security measure will prevent an incident;
• a system, application, network or organisation will be secure;
• vulnerabilities will not exist or arise;
• cyberattacks will not occur or succeed;
• information will not be lost, compromised, altered or disclosed;
• implementation of any particular framework or recommendation will eliminate risk; or
• any particular security outcome will be achieved.

Cybersecurity decisions should be based on the specific circumstances, threat environment, architecture, assets, legal requirements and risk appetite of the relevant organisation.

Certain website functionality may be provided by third-party service providers.

Depending on the technologies implemented on our website, third parties may place or access cookies or similar technologies on your device.

Third-party services may include, where applicable:

• website hosting and infrastructure providers;
• analytics providers;
• security and fraud-prevention services;
• content delivery networks;
• embedded content providers;
• communication services; and
• other technical service providers.

Third parties may process information in accordance with their own privacy and cookie policies where they act as independent controllers.

Where third-party cookies require consent, we seek to prevent those cookies from being activated until the required consent has been provided.

We periodically review the third-party technologies used on our website.a

Although we seek to provide useful and accurate information, Website content is provided on an “as is” and “as available” basis.

To the fullest extent permitted by applicable law, we make no representation, warranty or guarantee, express or implied, that Website content:

• is complete;
• is accurate;
• is current;
• is error-free;
• is suitable for a particular purpose;
• applies to your particular circumstances;
• reflects every applicable legal or regulatory requirement; or
• will remain available.

Cybersecurity threats, technologies, standards, regulations and industry practices change rapidly.

Information that was accurate when published may subsequently become incomplete, outdated or inappropriate for a particular environment.

You are responsible for independently evaluating information before relying upon or implementing it.

Descriptions of services, methodologies, capabilities, deliverables or approaches appearing on this Website are provided for general information only.

They do not constitute:

• an offer capable of acceptance;
• a contractual commitment;
• a statement of work;
• a service-level commitment;
• a warranty;
• a guarantee of availability;
• a guarantee of outcome; or
• a commitment to provide any particular service on any particular terms.

The precise scope, methodology, deliverables, assumptions, exclusions, dependencies, responsibilities, fees and other terms applicable to professional services will be determined separately as part of the relevant engagement.

NS Security reserves the right to modify, discontinue, expand or restrict any service described on this Website without notice.

You remain responsible for decisions made concerning your organisation, systems, networks, applications, information, controls and compliance obligations.

You should not implement security changes, configuration changes, vulnerability remediation, access-control changes, infrastructure changes or other potentially material technical actions solely on the basis of general Website content.

NS Security is not responsible for decisions or actions taken solely in reliance upon general information available through this Website.

This section does not limit any responsibility expressly assumed by NS Security under a separate written professional services agreement.

You must not use this Website:

• for any unlawful or fraudulent purpose;
• to violate applicable laws or regulations;
• to compromise or attempt to compromise the confidentiality, integrity or availability of the Website or associated systems;
• to gain or attempt to gain unauthorised access to systems, accounts, networks or information;
• to introduce malware, malicious code or harmful technologies;
• to conduct unauthorised vulnerability scanning, penetration testing or security testing;
• to conduct denial-of-service or distributed denial-of-service activity;
• to circumvent security controls;
• to interfere with Website operation;
• to scrape, harvest or systematically extract Website content or data without our permission;
• to impersonate NS Security or another person or organisation;
• to use our Website, brand or content in a misleading manner;
• to infringe intellectual property rights; or
• to facilitate unlawful cyber activity.

Nothing on this Website constitutes authorisation to test, scan, probe, exploit or otherwise interact with NS Security systems beyond normal use of publicly available Website functionality.

You must not conduct penetration testing, vulnerability scanning, exploitation, automated security testing or other intrusive testing against this Website or infrastructure associated with NS Security without our prior written authorisation.

The mere fact that NS Security operates in the cybersecurity industry does not constitute permission or authorisation to conduct security testing against our systems.

Any authorised security testing must be conducted strictly within the scope, timing, methods and other conditions expressly agreed in writing.

You are responsible for information you submit through this Website.

You should not submit:

• passwords;
• private cryptographic keys;
• authentication credentials;
• payment card data;
• production secrets;
• confidential security configurations;
• vulnerability details concerning systems you are not authorised to disclose;
• malicious code;
• unlawfully obtained information;
• special-category Personal Data unless specifically requested; or
• information you are not legally authorised to provide.

Submitting information through a general Website form does not mean that NS Security has agreed to receive, review, protect or act upon that information under the confidentiality obligations applicable to a professional client engagement.

Any confidentiality obligations relating to a professional engagement will be governed by the applicable written agreement.

Our processing of Personal Data is described in our Privacy Policy.

Unless otherwise stated, NS Security or its licensors own or control all intellectual property rights in this Website and its content.

This includes, where applicable:

• text;
• graphics;
• designs;
• diagrams;
• illustrations;
• photographs;
• videos;
• branding;
• logos;
• methodologies;
• assessment structures;
• questionnaires;
• frameworks;
• templates;
• reports;
• publications;
• software;
• source materials; and
• other Website content.

All such rights are reserved.

You may access and use Website content for your own legitimate internal informational purposes.

Unless expressly permitted by us in writing or by applicable law, you may not reproduce, distribute, modify, republish, sell, license, commercially exploit, create derivative works from or systematically extract substantial parts of Website content.

The names NORTH STAR CYBER SECURITY LTD, NS Security, our logos, branding and associated identifiers may not be used in a manner that suggests endorsement, sponsorship, partnership, certification or affiliation without our prior written permission.

You must not represent that NS Security has:

• approved your organisation;
• certified your systems;
• endorsed your products or services;
• confirmed your compliance;
• entered into a partnership with you; or
• provided services to you,

unless this is factually correct and you are authorised to make that representation.

This Website may contain links to third-party websites, standards bodies, regulators, professional organisations or other external resources.

Links are provided for convenience and informational purposes only.

Unless expressly stated otherwise, a link does not constitute endorsement, approval, sponsorship or recommendation by NS Security.

We do not control third-party websites and are not responsible for their:

• availability;
• security;
• content;
• accuracy;
• privacy practices;
• terms;
• products;
• services; or
• actions.

Access to third-party resources is at your own discretion and risk.

We do not guarantee that the Website or any content will always be available, uninterrupted, secure or free from errors.

We may suspend, withdraw, restrict, modify or discontinue all or any part of the Website at any time.

We are not responsible for Website unavailability caused by maintenance, technical failure, third-party providers, telecommunications failure, cyber incidents, force majeure or circumstances outside our reasonable control, subject always to applicable law.

We take reasonable measures to protect our Website but do not guarantee that the Website will always be free from malware, vulnerabilities, malicious code or other harmful components.

You are responsible for maintaining appropriate security controls, software, configurations, backups and protection for devices and systems used to access the Website.

You should use your own security controls and exercise appropriate caution when accessing internet resources.

Nothing in these Terms excludes or limits liability where such liability cannot lawfully be excluded or limited.

Subject to the foregoing, and to the fullest extent permitted by applicable law, NORTH STAR CYBER SECURITY LTD, its directors, officers, employees, contractors and representatives shall not be liable for loss or damage arising out of or in connection with:

• access to or use of this Website;
• inability to access or use the Website;
• reliance on Website content;
• actions taken or not taken on the basis of Website content;
• inaccuracies, omissions or outdated information;
• third-party websites or resources;
• unauthorised interference with the Website;
• malware or other harmful technologies transmitted through circumstances outside our reasonable control; or
• use of information obtained through the Website.

To the fullest extent permitted by applicable law, we shall not be liable in connection with use of this Website for:

• loss of profits;
• loss of revenue;
• loss of business;
• loss of contracts;
• loss of anticipated savings;
• loss of opportunity;
• loss of goodwill or reputation;
• loss, corruption or compromise of data;
• business interruption; or
• indirect or consequential loss.

These limitations relate to the Website and its general informational content. Liability arising from professional services provided under a separate written agreement will be governed by that agreement.

To the extent permitted by applicable law, if you use this Website in connection with a business or professional activity, you agree to indemnify NORTH STAR CYBER SECURITY LTD against reasonable losses, liabilities, costs and expenses arising directly from:

• your unlawful use of the Website;
• your material breach of these Terms;
• your infringement of our intellectual property rights;
• unauthorised security testing or interference with our systems; or
• information or material submitted by you in violation of applicable law or third-party rights.

This provision does not apply to the extent that the relevant loss was caused by NS Security or where such indemnification would be prohibited by applicable law.

If NS Security does not immediately exercise a right or remedy under these Terms, this does not constitute a waiver of that right or remedy.

A waiver will only be effective where expressly made by NS Security.

We may amend these Terms from time to time to reflect changes to:

• our Website;
• our business;
• applicable laws or regulations;
• security requirements; or
• our operating practices.

The current version will be published on this Website with the applicable “Last Updated” date.

Your continued use of the Website following publication of revised Terms will be subject to the version then in effect, to the extent permitted by applicable law.

Our processing of Personal Data in connection with this Website is described in our Privacy Policy.

Information about our use of cookies and similar technologies is available in our Cookie Policy.

These policies should be read together with these Terms where applicable.

These Terms, together with the Privacy Policy and Cookie Policy where applicable, constitute the terms governing general access to and use of this Website.

They do not constitute the terms governing professional cybersecurity or consulting services supplied by NS Security.

Professional services are governed exclusively by the applicable engagement documents agreed between NS Security and the relevant client.

No statement, description, case study, marketing material, Website content or preliminary communication modifies the terms of a separately executed professional services agreement unless expressly agreed in writing.

Questions concerning these Terms may be sent to:

NORTH STAR CYBER SECURITY LTD

Trading as: NS Security

Email: contact@ns-security.co.uk

Website: https://ns-security.co.uk/