Terms & Conditions
Three Counties Data Protection | Version 1.0 | September 2026
These terms and conditions apply to all data protection consultancy services provided by Three Counties Data Protection. By signing an engagement letter that references these terms, or by instructing me to proceed with work, you agree to be bound by them.
1. Services
I will provide the services described in the engagement letter. Unless otherwise agreed in writing, the scope of each engagement is limited to what is set out in that letter and does not include:
-
ongoing compliance monitoring or retainer support;
-
legal advice or legal representation;
-
technical cyber security assessment or testing of systems or networks;
-
representation in any dealings with the Information Commissioner's Office (ICO).
Any additional services required beyond the agreed scope will be discussed and confirmed in writing before work begins.
2. Fees and Payment
The fee for each engagement is set out in the engagement letter. Unless otherwise stated:
-
payment is required in full before work begins;
-
for advisory support charged at an hourly rate, payment is due within 14 days of invoice;
-
any work outside the agreed scope will be charged at my standard hourly rate of £95, unless a different rate has been agreed in writing;
-
reasonable travel expenses for on-site work will be agreed in advance and recharged at cost.
I reserve the right to suspend work if payment has not been received before work is due to begin, and to charge statutory interest on overdue amounts under the Late Payment of Commercial Debts (Interest) Act 1998.
3. Timescales
I will use reasonable endeavours to deliver work within the timescales set out in the engagement letter. Timescales are estimates and are dependent on receiving timely and complete information, documents, and responses from you. I will let you know promptly if a delay arises on my side.
4. Your Responsibilities
To allow me to deliver accurate and effective work, you agree to:
-
provide complete and accurate information to the best of your knowledge;
-
respond promptly to requests for documents, clarification, or further information;
-
notify me promptly of any changes that may affect the engagement;
-
ensure reasonable access to premises and relevant staff or volunteers where on-site work has been agreed.
I cannot be held responsible for inaccuracies in my work that result from incomplete or incorrect information provided by you.
5. Confidentiality and Data Protection
Any information you share with me in the course of an engagement will be treated as confidential and used only for the purpose of delivering the agreed services. I will not share your information with third parties except where necessary to deliver the services or where required by law.
Any personal data you provide will be processed in accordance with my Privacy Notice, available at www.threecountiesdata.co.uk/privacy-notice.
Where I act as a data processor on your behalf (for example, where I handle personal data belonging to your staff or customers), I will do so in accordance with your reasonable written instructions and in compliance with applicable data protection legislation. A data processing agreement can be provided on request.
6. Limitation of Liability
I will perform all work with reasonable skill and care. However:
-
my liability for any loss or damage arising from this engagement is limited to the total fees paid for the relevant service;
-
I am not liable for any indirect, consequential, or economic loss, including loss of profit or loss of business;
-
this engagement identifies potential gaps and provides recommendations based on the information provided to me - it does not guarantee regulatory compliance or eliminate the risk of data breaches or ICO action, as these depend on your implementation of recommendations and ongoing practices.
Nothing in these terms limits my liability for death or personal injury caused by negligence, fraud, or any other matter that cannot be limited or excluded by law.
I hold full professional indemnity insurance. Details are available on request.
7. Intellectual Property
Reports, action plans, and documents prepared specifically for you become your property on receipt of payment in full. You may use them freely within your organisation.
I retain ownership of my underlying methodology, templates, and general working materials. I may apply general knowledge and approaches developed during an engagement to future work with other clients, provided no client-specific confidential information is disclosed.
8. Complaints
If you are unhappy with any aspect of my work, please contact me in the first instance at hello@threecountiesdata.co.uk. I will acknowledge your concern within five working days and aim to resolve it promptly and fairly.
If we are unable to resolve a complaint directly, either party may request that the matter be referred to an independent mediator.
9. Termination
Either party may end an engagement by giving 14 days' written notice. If you end the engagement early, you will be liable for fees for all work completed up to the date of termination. If I end the engagement, I will refund any fees paid in advance for work not yet completed.
I may end an engagement immediately, without notice, if you act in a way that is unlawful, abusive, or that makes it impractical for me to continue.
10. Force Majeure
I will not be in breach of these terms, nor liable for any delay or failure to perform, where this arises from circumstances beyond my reasonable control, including but not limited to illness, bereavement, systems failure, or other events outside my control. I will notify you as soon as reasonably practicable and will use reasonable endeavours to minimise any disruption.
11. Variation of Terms
I may update these terms from time to time. The current version is always available at www.threecountiesdata.co.uk/terms. Any engagement will be governed by the version of these terms in force at the time the engagement letter is signed.
12. Governing Law
These terms are governed by the laws of England and Wales. Any disputes that cannot be resolved through direct discussion or mediation will be subject to the exclusive jurisdiction of the courts of England and Wales.
Version 1.0 - September 2026. These terms supersede any previous versions.