The GDPRLocal Master Service Agreement and additional Terms herein govern our products, services and customer relationships.
There are no requirements to purchase services. No credit card needed to sign up, and once registered services may be purchased and activated at any time.
This Schedule forms part of the Master Services Agreement (“Agreement”) between the Customer and GDPRLocal Ltd (“GDPRLocal”). It sets out the scope of Training Services delivered by GDPRLocal. Terms used in this Schedule have the same meaning as in the Master Services Agreement.
Training Services comprise (a) preparation and content development, (b) training delivery, and (c) certification of attendance where requested. Each component is scoped and priced separately per the Rate Card.
In the event of any conflict between this Schedule and the Master Services Agreement, this Schedule prevails.
1.1 Nature of Training Services. Training Services comprise three components:
(a) Preparation and content development: research, content development, tailoring, updates to existing materials, and rehearsal, billed hourly per the Rate Card;
(b) Training delivery: a single live delivery event to one audience group at one time, in person, hybrid, or remote, billed at the session delivery fee per the Rate Card; and
(c) Certification of attendance: maintained record of employee specific attendance, billed per attendee per the Rate Card.
1.2 Scope confirmation. Prior to activation of any Training engagement, the scope of the engagement (components selected, delivery format, audience size, target date, and any content development requirements) shall be agreed between the parties in writing. Written agreement by email is sufficient. The written scope forms the applicable Statement of Work (“SOW”) for that engagement and is captured against the Service Activation Record.
2.1 Preparation and content development. Where preparation is included in the SOW, GDPRLocal shall research, develop, tailor, and update training content in accordance with the requirements specified in the SOW. Content may include slides, speaker notes, exercises, knowledge checks, and reference materials.
2.2 Training delivery. GDPRLocal shall deliver the training session on the date, time, and format agreed in the SOW. Delivery is to a single audience group at one time. Repeat delivery to a different audience group is a separate delivery event, billed separately.
2.3 Certification of attendance. Where the SOW includes certification, GDPRLocal shall issue a certificate of attendance to each attendee confirmed as having attended the delivery event.
In addition to the obligations set out in MSA §6, the Customer shall:
3.1 nominate a Customer Contact responsible for coordinating the training engagement;
3.2 provide access to the required delivery venue, remote platform, or hybrid setup, and any technical support needed for delivery;
3.3 confirm the attendee list to GDPRLocal in advance of delivery and cooperate with GDPRLocal in relation to attendance capture and administration;
3.4 provide reasonable and timely cooperation, information, and access to systems or personnel required for GDPRLocal to develop content specific to the Customer’s context.
4.1 Training Services are limited to the scope agreed in the applicable SOW. The Services do not include the provision of legal advice, legal opinions, or the discharge of any statutory role.
4.2 GDPRLocal shall not assume operational decision-making or execution responsibility for the Customer’s compliance activities.
4.3 GDPRLocal’s role is advisory and educational. While GDPRLocal may develop materials, the Customer retains sole responsibility for their internal adoption and ongoing use.
4.4 Any services outside the agreed SOW scope may be requested as billable additional services in accordance with the Master Services Agreement.
5.1 Scope. The Services are limited to the deliverables and activities set out in the applicable SOW.
5.2 Additional Services. Where GDPRLocal identifies a request or requirement that falls outside the SOW scope, GDPRLocal shall notify the Customer in writing (email sufficient) together with a good-faith estimate of the additional time or cost involved. Additional Services shall not commence until authorised by the Customer in writing (email sufficient).
5.3 Billing. Additional Services authorised under §5.2 are billed at the applicable Rate Card rate unless the parties expressly agree a different fee in writing prior to the work commencing.
5.4 SOW variation. Where Additional Services represent a material extension of the engagement, the parties shall agree a written variation to the SOW recording the revised scope, timeline, and fees.
5.5 Records. GDPRLocal maintains records of time and activity performed under the SOW, and shall make these available to the Customer on reasonable request.
5.6 Training scope items. For Training engagements, the following are treated as Additional Services and notified to the Customer per §5.2: (a) attendees added beyond the number specified in the SOW; (b) additional delivery sessions; (c) preparation time materially exceeding the estimate in the SOW; and (d) post-delivery advisory support beyond de minimis clarifications.
6.1 Fees. Training fees are set out in the SOW, reflecting the Rate Card current at Service Activation.
6.2 Preparation and content development. Billed hourly at the rate specified in the Rate Card.
6.3 Delivery. Billed at the delivery fee per session specified in the Rate Card.
6.4 Certification. Billed per attendee at the rate specified in the Rate Card.
6.5 Cancellation. Cancellation of a scheduled delivery by the Customer within five (5) business days of the delivery date incurs the full delivery fee. Cancellation of preparation work incurs charges for time already expended.
7.1 Aggregate liability. Aggregate liability under this Schedule shall not exceed the total Fees paid or payable by the Customer for the applicable engagement.
7.2 Excluded losses. Neither party shall be liable for indirect, consequential, special, or punitive loss.
7.3 Advisory-role carve-outs. GDPRLocal shall have no liability for: loss arising from the Customer’s failure to implement or act on training content; regulatory findings, fines, or enforcement action against the Customer; or decisions taken by attendees on the basis of training delivered.
7.4 Exclusions from cap. The liability cap does not apply to: death or personal injury caused by negligence; fraud or fraudulent misrepresentation; any liability that cannot be limited by law; the Customer’s obligation to pay Fees; or breach of confidentiality.
7.5 Professional Indemnity Insurance. GDPRLocal shall maintain professional indemnity insurance of not less than £1,000,000 per claim throughout the term.
8.1 Term. Training engagements are typically single-event. This Schedule commences on the Service Start Date for the engagement and continues until completion of the last component set out in the SOW.
8.2 Termination for convenience. Either party may terminate on ten (10) days’ prior written notice, subject to (a) payment for all Services delivered to the effective termination date and (b) the cancellation charges in clause 6.5.
8.3 Termination for cause. Termination for cause is governed by MSA §12.2.
8.4 Consequences of termination. On termination, GDPRLocal shall deliver any completed content and materials produced up to the effective termination date. All outstanding Fees for Services performed become immediately due.
__________________________________________________
The SOW for a Training engagement is the written scope agreed between the parties prior to activation, per clause 1.2.
The written scope may be:
(a) a portal-generated Service Activation Record confirming Customer selections;
(b) a signed SOW document; or
(c) an email exchange between the parties recording the material terms.
The SOW shall as a minimum record:
The written SOW is captured against the Service Activation Record for evidentiary purposes.