Terms and Conditions of FARORBIS LTD

These Terms and Conditions form the principal commercial terms on which FARORBIS LTD supplies professional services to business clients. FARORBIS LTD operates from 27 Old Gloucester Street, LONDON, WC1N 3AX United Kingdom. Notices and operational correspondence should be sent to inquiry@farorbis.social. Telephone +44 7284 556677 may be used for urgent operational contact but does not, by itself, vary a written engagement. The public website is https://farorbis.social. These Terms and Conditions apply to Cybersecurity Solutions, Cloud Computing Solutions, Digital Platform Development, Custom Computer Programming Services, Software Development Services, Web Application Development, Mobile Application Development, API Development and Integration, Data Analytics Services, Streaming Platform Development, Social Media Platform Development, Search Engine Technologies, Digital Content Distribution, Media Streaming Distribution Services, Web Search Portals, Computer Systems Design and Related Services, Computer Related Consulting Services, Computer Related Services not elsewhere classified, Professional Scientific and Technical Services, and work concerning Social Networks and Other Media Networks and Content Providers, in each case as described in an engagement letter, statement of work, or order that incorporates these terms. They are designed for business-to-business work under the laws of England and Wales. They are not consumer terms for a mass-market software product sold at a checkout, and they are not a licence to attack any system.

1. Definitions and interpretation

In these Terms and Conditions, Client means the legal person identified in the engagement documents. Company means FARORBIS LTD. Services means the work described in the engagement documents, which may include survey, scrape, expose, tag, record and interpret steps, software delivery, consulting, and related professional activities. Deliverables means documents, code, diagrams, tagged evidence packs, and other outputs identified as deliverables. Context Unit means a numbered record of a fragment, horizon, owner and relation created in the course of the Services. Confidential Information means information designated as confidential or that a reasonable professional would treat as confidential, including security findings, architecture, commercial terms, and unpublished vulnerabilities. Authorised Scope means the systems, environments, identities, time window and methods that the Client has authority to permit and has permitted in writing. Working Day means a day other than Saturday, Sunday or a public holiday in England. Writing includes email to the addresses on record. Headings are for convenience only. References to statutes include amendments. If there is a conflict, a signed statement of work prevails over these Terms and Conditions for that conflict of scope or fees, and these Terms and Conditions prevail over website marketing copy and over purchase-order boilerplate unless the Company has expressly agreed otherwise in writing. Nothing in a Client's vendor portal terms shall impose unlimited liability, intellectual-property assignment of the Company's methods, or a duty to commence work before Authorised Scope is clear, unless a director of the Company has accepted those portal terms in writing.

Interpretation shall favour a workable professional relationship rather than a trick of drafting. Including means without limitation. A person includes a legal person. Singular includes plural. Obligations on the Client include an obligation to procure that its personnel, affiliates using the Services, and suppliers who must cooperate actually cooperate. Time is not of the essence for delivery dates unless the engagement letter says it is, because careful exposure of a live estate cannot always be forced to a theatrical date without increasing harm. Where a date is of the essence, the Company may still be delayed by Client dependencies without breach.

2. Formation of contract

A contract is formed when the Company issues a written engagement letter or statement of work and the Client accepts it by signature, by a clear written acceptance, or by instructing the Company to commence after receiving those documents, whichever occurs first. A website context request is not acceptance. A meeting is not acceptance. A verbal indication of budget is not acceptance. The Company may withdraw a proposal until contract formation. The Client warrants that the individual who accepts has authority. If the Client later argues lack of authority, the Company may treat the contract as nonetheless formed as against the organisation that received the benefit of the Services, without prejudice to other remedies.

These Terms and Conditions apply to the exclusion of any other terms that the Client seeks to impose, including terms on a purchase order, e-procurement portal, or security questionnaire that attempt to rewrite liability, insurance, or intellectual property, unless the Company has expressly agreed those other terms in a document signed by a person with apparent authority at the Company. Commencement of work after receipt of a purchase order that recites different terms does not, by itself, accept those different terms.

3. Authorised Scope and Computer Misuse Act

The Client warrants that it has all legal authority necessary to permit the Company to access, test, copy, modify, or observe the systems, accounts, data, premises, and third-party services included in the Authorised Scope, and that such permission will remain in force for the engagement. The Client shall obtain written permission from third-party owners, cloud providers, payment processors, content-delivery networks, telecommunications providers, and landlords where their consent is required. The Company shall not be required to commence or continue any activity that would, in its reasonable opinion, risk an offence under the Computer Misuse Act 1990, the Data Protection Act 2018, export-control law, sanctions law, or equivalent foreign law. The Company may pause work immediately if Authorised Scope is unclear, if credentials appear stolen, if a system appears to belong to a third party not named, or if a so-called emergency request would bypass tagging and recording. A pause under this clause is not a breach by the Company.

The Client shall name environments: production, staging, development, backup, and any shadow estate known to it. The Client shall name out-of-scope systems. Silence about a system does not bring it into scope. The Company is not obliged to discover every unnamed horizon. Survey work will attempt to identify mixed evidence, but the Client remains responsible for disclosing known adjacent systems that could be disturbed by a cut.

4. Nature of the method

The Company works by careful exposure. It will not, without written expansion of scope, collapse neighbouring layers to produce a dramatic finding. It will tag fragments. It will record context. It will withhold a verified interpretation until the agreed sequence can support it. The Client acknowledges that this method may take longer than a templated scan-and-slide exercise, and that speed without context is not a service the Company sells. Marketing language on https://farorbis.social, including metaphors of trenches, soil horizons, datum points and find bags, describes working character. It does not convert the Company into an excavation contractor, a museum, a university department, or a treasure-recovery firm, and it does not create duties beyond these Terms and Conditions and the engagement documents.

Recommendations are professional opinions based on information available at the date of the Deliverable. They are not a warranty that a system is free of vulnerability, that a platform will be profitable, that a stream will remain licensed, or that a regulator will agree. The Client remains responsible for deciding whether to implement a recommendation, for its own board duties, and for its own notifications to customers or authorities except where the Company has a direct legal duty of its own.

5. Cybersecurity Solutions

Cybersecurity Solutions may include attack-surface reading, control tagging, identity-horizon review, application exposure limited to Authorised Scope, tabletop support, and a verified interpretation of risk. They do not include a promise of undetectability, a 24-hour armed response unless separately purchased, or a transfer of the Client's residual risk to the Company. Red-team style activity, if any, shall be described with rules of engagement, kill switches, and data-handling limits. The Company will not store trophy exploits. Findings will be classified and transmitted by a method agreed in the engagement, not by an unauthenticated public form. The Client shall not press the Company to understate a finding for a sales demonstration or to overstate a finding for a budget theatre. Both distortions are a breach of the Client's duty to cooperate in good faith.

The Client shall provide a security contact who can authorise emergency pause, isolate a test account, and receive high-severity fragments outside ordinary hours if the engagement so requires. The Client shall not grant the Company broader production privileges than the cut requires. Shared administrator passwords shall be rotated after the engagement if they were used. The Company may refuse to use a personal staff account as the sole test identity because that practice contaminates evidence and employment records.

6. Cloud Computing Solutions

Cloud Computing Solutions may include tenancy survey, identity drift tagging, network and storage horizon maps, landing-zone advice, and implementation work where stated. Cloud providers remain independent controllers or processors of the Client's cloud data according to the provider's terms. The Company is not the cloud provider. Availability of a region, a managed database, or a marketplace image is not warranted by the Company. The Client shall maintain its own contractual relationship with the cloud provider, including billing, support entitlement, and shared-responsibility acceptance. If the Company creates infrastructure as code, the Client must understand that applying that code in production is a Client change unless the engagement states that the Company will apply it.

The Client shall disclose organisation identifiers, known root accounts, and any previous unmanaged accounts. The Client shall not ask the Company to evade the provider's acceptable-use rules. Snapshot and logging costs incurred because the Client requested a deeper cut are Client costs unless the statement of work prices them as included. Deletion of cloud resources can be irreversible. The Company will not perform irreversible destruction without a named Client instruction recorded as a Context Unit.

7. Digital Platform Development

Digital Platform Development may include discovery, architecture, interface design limited to what the engagement describes, implementation, and handover. The Company does not warrant market fit. The Client owns product decisions, pricing, community standards, and regulatory positioning of the live platform, including online-safety and consumer-law duties that attach to the Client as operator. Acceptance criteria shall be written. Absence of written criteria means the Company may treat a Deliverable as accepted if the Client uses it in production or does not reject it with particularised reasons within ten Working Days of delivery.

The Client shall supply content, brand assets, licences, and environment access on time. Delay in Client materials extends dates. Change requests shall be priced. The Company is not obliged to keep adding horizons without a change note. If the Client demands a theatrical launch date that would skip tagging and recording, the Company may refuse that date without breach.

8. Custom Computer Programming Services

Custom Computer Programming Services produce software for the Client's identified purpose. Unless the engagement says otherwise, code is written to be maintainable by a competent later practitioner, with comments omitted where the public website design system forbids comments in shipped marketing code, but with internal engineering notes supplied in the handover pack as the engagement requires. The Company does not assign its pre-existing libraries, snippets, or field methods except as a licence to use them within the Deliverable. Third-party open-source components remain under their licences. The Client shall not demand that the Company mis-licence open source.

The Client shall specify non-functional needs that matter: data residency, logging, secret handling, accessibility, and browser support. Unstated needs are not defects. Load testing, penetration testing, and accessibility audits are included only if listed. The Company may use third-party libraries that are commonly used in the relevant stack, and the Client accepts the residual risk of those libraries subject to the Company's duty to apply reasonable professional care in selection at the time of selection.

9. Software Development Services

Software Development Services include the planning, building, testing within agreed environments, and documentation of software systems. Sprint theatre without a Context Unit is not a substitute for acceptance. The Company may work in iterations. Each iteration still requires tagging of decisions that affect security or data. The Client's product owner must be available. If the product owner is silent, the Company may freeze the iteration and invoice for the freeze period if the Company remained ready to perform.

Source control, if hosted by the Client, must grant the Company a named identity, not a shared login. If hosted by the Company during delivery, export of the repository is a Deliverable at the end of the paid engagement, not an automatic daily dump to an unmanaged personal account. The Client shall not add unknown contractors to the repository without telling the Company, because mixed fills without tags recreate the buried complexity these terms exist to reduce.

10. Web Application Development

Web Application Development covers browser-facing applications and related server components described in scope. The Company is not responsible for the content the Client publishes, for user-generated content moderation, or for advertising networks the Client later attaches. Cookie consent implementation for the Client's application, if included, will follow a specification. The Company's own website Cookie Policy is not that specification.

The Client shall provide staging that resembles production in the ways that matter to the cut, or accept that differences may hide defects. Browser support means the then-current and previous major versions of widely used browsers named in the engagement, not every legacy intranet browser unless listed. Search-engine ranking is not a Deliverable unless Search Engine Technologies work is separately scoped.

11. Mobile Application Development

Mobile Application Development covers applications for named operating systems and store programmes. Store review, developer-account ownership, signing keys, and fee schedules belong to the Client unless the engagement states that the Company will operate a store listing as agent. The Company does not warrant that Apple, Google, or any other store will approve a binary. Secrets must not be requested to be compiled into clients as a permanent pattern. If a legacy secret is found, the Company will tag it and recommend a server horizon.

The Client shall own the developer accounts. Transfer of a listing is a Client legal act. Push-notification providers and analytics SDKs are third parties. Their privacy duties attach to the Client as operator. The Company will not conceal an SDK from a privacy review if the Company inserted it.

12. API Development and Integration

API Development and Integration includes design and implementation of interfaces and the wiring of systems. The Company will tag contracts, versions, and authentication methods actually implemented. Shadow integrations discovered during survey will be recorded; fixing them is a change unless already in scope. The Company is not liable for a third-party API that changes or is withdrawn. Rate limits, webhooks, and idempotency behaviour shall be specified if they matter. Unspecified behaviour is not a defect of professional care if it matches ordinary practice in the stack at the time.

The Client shall supply sandbox credentials and a lawful production window. The Client shall not instruct the Company to bypass a partner's certification. If a partner requires the Client to sign a specific addendum, that is the Client's signature. Breaking changes to a published API after acceptance are a new cut.

13. Data Analytics Services

Data Analytics Services include provenance tagging, model-light analysis, dashboards if scoped, and interpretation of what the tagged data can actually support. The Company will not present a chart as a verified interpretation if provenance is missing. Statistical uncertainty shall be stated where a reasonable professional would state it. The Company does not warrant business outcomes from a metric. Training of foundation models on Client personal data is not included unless expressly scoped and lawful.

The Client shall identify lawful bases and retention for analytical datasets that contain personal data. The Company acting as processor will follow documented instructions. If instructions are missing, the Company may refuse to run a query that appears to be bulk personal profiling without a basis. Derived insights that do not identify a person may still be Confidential Information of the Client.

14. Streaming Platform Development

Streaming Platform Development and Media Streaming Distribution Services may include origin, packaging, playback, entitlement checks, and related software. The Company does not grant the Client media licences. Content rights, performing rights, sports rights, and territorial windows are Client problems. CDN costs, egress, and encoding costs are Client costs unless priced. The Company does not warrant uninterrupted streaming, because upstream networks, device players, and rights-lock failures sit outside Authorised Scope unless included.

The Client shall supply mezzanine assets it has the right to use. The Client shall not instruct the Company to strip lawful protection measures. Token design will prefer short life and revocation. If the Client insists on long-lived tokens for convenience, the residual risk remains the Client's after the Company has tagged the decision.

15. Social Media Platform Development

Social Media Platform Development and work concerning Social Networks and Other Media Networks and Content Providers may include graph features, posting, feeds, and moderation tooling if scoped. The Client is the operator for online-safety, illegal-content, and community-standard duties that attach to a public network. The Company does not operate the network after handover unless a separate operations contract exists. Recommendation quality is not a warranty. Abuse will occur on public networks; tooling reduces and records, it does not eliminate.

The Client shall name a trust-and-safety owner. If none exists, the Company may still build software but will record the missing horizon as a risk. The Client shall not instruct the Company to design a feature whose primary purpose is unlawful covert tracking of natural persons. Permission models will be tagged. Inherited roles from a previous product shall be treated as buried signal, not as a safe default.

16. Search Engine Technologies

Search Engine Technologies and Web Search Portals may include crawl policy, indexing, ranking features, and search interfaces. The Company does not warrant that a portal will outrank unrelated global engines. Leakage of internal paths into a public index is a known buried signal; if in scope, the Company will tag crawl boundaries. Robots conventions are not law, but ignoring them may create conflict with third parties; the Client decides policy after being told the trade-off.

The Client shall disclose known sensitive paths. The Company is not liable for a third-party crawler that ignores policy. Logging of queries may constitute personal data; the Client must instruct retention. Autocomplete and related features can expose unexpected fragments; they will be treated as a horizon that needs a recorded decision if scoped.

17. Digital Content Distribution

Digital Content Distribution concerns the movement of licensed or Client-owned content to audiences through software systems. The Company does not act as a publisher. Defamation, copyright, and takedown operations are Client responsibilities except for defects in software that the Company built and that fail to implement an agreed takedown path. Watermarking and fingerprinting are included only if specified.

The Client shall ensure notices and licences travel with content if legally required. The Company will not insert hidden tracking into content for the Company's own benefit. If the Client requests tracking, it must be lawful and disclosed in the Client's notices, not in the FARORBIS LTD website policies.

18. Computer Systems Design and Related Services

Computer Systems Design and Related Services include architecture, selection advice, and integration planning. Advice is based on information the Client supplies and on what a careful survey can see. The Company is not a hardware vendor. Obsolescence of a selected component is not a breach if the selection was reasonable when made. The Company may recommend against a fashionable component if it would bury context.

The Client shall disclose existing standards, approved suppliers, and constraints from insurers or regulators. If the Client withholds a constraint and later cites it as a defect, that is not a Company default. Design workshops produce decisions that must be tagged; unminuted hallway decisions are not part of the record unless later written.

19. Computer Related Consulting Services

Computer Related Consulting Services include advisory work, reviews, and facilitation. Reports are Deliverables only if identified as such. Meeting attendance alone does not create a report duty. The Company may rely on specialists for narrow questions; the Company remains responsible for coordinating what it has agreed to coordinate, not for every specialist's independent practice unless named as a subcontractor under these terms.

The Client shall not attribute a casual remark in a workshop as a certified finding. Certified findings appear in a tagged Deliverable. The Client shall give timely comments. Silence after ten Working Days from delivery of a draft report may be treated as acceptance of the draft as final if the engagement so states, or otherwise as a waiver of later cosmetic complaints.

20. Computer Related Services (NEC) and Professional Scientific and Technical Services

Where work does not fit a single named horizon, it may still be supplied as Computer Related Services not elsewhere classified or as Professional Scientific and Technical Services, provided the Authorised Scope, fees, and Deliverables are written. These catch-all labels do not expand liability, do not create a research-publication duty, and do not convert the Company into a public laboratory. Scientific care means method and record, not academic authorship unless contracted.

The Client shall not use these labels to smuggle out-of-scope criminal investigation, covert surveillance of workers without a lawful basis, or work that requires a regulated legal or audit opinion the Company is not engaged to give. If a chartered or regulated opinion is required, the Client shall engage the appropriate professional. The Company may cooperate with that professional under a three-party protocol.

21. Fees, expenses and tax

Fees are those in the engagement documents, exclusive of VAT and of any similar tax that lawfully applies. The Company may invoice monthly in arrears, or on milestones, or in advance for a reserved field window, as stated. Expenses for reasonable travel within the United Kingdom, specialist tooling licences required only for the Client, and third-party cloud costs incurred at the Client's request are additional unless the engagement says they are included. The Client shall pay invoices within fourteen days of the invoice date unless another period is stated. Late sums bear interest at the statutory rate for commercial debts in England, together with fixed late-payment compensation where that statute applies. The Company may suspend Services for non-payment after written notice of not less than five Working Days. Suspension is not termination. Time spent preparing a pack for a Client's auditor, insurer, or acquirer is chargeable unless already included. Currency is pounds sterling unless stated. Withholding tax, if any foreign law imposes it, shall not reduce the net amount received by the Company unless a double-tax arrangement and documentation make a different result mandatory; the parties shall cooperate on forms.

22. Change control

A change is any alteration to Authorised Scope, Deliverables, dates that are of the essence, or fees. The Client shall request changes in writing. The Company shall respond with impact on fee, date, and risk. No change is binding until both parties record it. Using a chat message to demand a new horizon does not create a change. If the Client persistently directs work outside scope and the Company reasonably performs to protect a live system, the Company may invoice at its then-current rates for that protective work and then pause pending a change note. The Company is not obliged to perform protective work that would itself be unlawful.

23. Client obligations and dependencies

The Client shall supply truthful information, timely access, a named commercial contact, a named technical contact, and a lawful Authorised Scope. The Client shall back up data before a cut that could disturb a system. The Client shall obtain works-council, union, or employee notices if its local employment law requires them before monitoring staff systems. The Client shall not withhold a known incident from the survey. The Client shall ensure that its users do not sabotage a test window. Failure of these obligations extends dates and may increase fees. The Company may terminate for a material failure that remains unremedied for ten Working Days after notice, or immediately if the failure is unlawful access pressure.

24. Personnel and non-solicitation

The Company may choose which practitioners attend. The Client shall not, without consent, require a named individual as a condition if that individual is unavailable. The Company may use subcontractors, remaining responsible for their performance as if they were the Company's own, except for cloud providers and other independent utilities the Client already uses. Neither party shall, for twelve months after the later of the last invoice or the last on-site day, solicit the other's employees who materially participated in the engagement, except via a genuine public advertisement. A breach of this clause is adequately remedied, among other remedies, by a fee equal to thirty per cent of the solicited person's annualised remuneration, which the parties agree is a genuine pre-estimate of replacement disruption for a specialised London practice.

25. Intellectual property

Upon payment in full of sums due for the relevant Deliverable, the Company assigns to the Client the copyright in original code and original documents created uniquely for the Client as Deliverables, excluding the Company's pre-existing materials, methods, checklists, internal tools, generic libraries, and the field method itself. The Company grants the Client a non-exclusive, perpetual, worldwide licence to use those excluded Company materials as embedded in the Deliverables for the Client's internal operation of the Deliverables. The Client grants the Company a licence to use Client materials solely to perform the Services. Each party retains its trade marks. Feedback about the Company's method may be used by the Company to improve its practice without assigning the Client's Confidential Information. The Company may describe the engagement in generic terms for professional history unless the Client has purchased a stricter publicity clause. Source that the Company open-sources, if any, will not include Client Confidential Information.

26. Confidentiality

Each party shall keep the other's Confidential Information secret, using at least the care it uses for its own, and no less than reasonable care, and shall use it only for the engagement or as permitted. Disclosure is allowed to personnel and professional advisers who need it and are bound, and where law requires, in which case the disclosing party shall, if lawful, give notice. Confidentiality lasts for five years from disclosure, except that trade secrets and unpublished vulnerability details shall be kept secret for so long as they remain secret. Findings shall not be posted to public vulnerability lists by the Company without the Client's written go-ahead, except where a legal duty or a coordinated-disclosure policy agreed in the engagement requires it. The existence of a cybersecurity incident may itself be Confidential Information. Return or destruction of papers shall follow the Privacy Policy and the engagement. Residual memory of non-specific skills is not a breach.

27. Data protection

Each party shall comply with UK data protection law applicable to it. Where the Company processes personal data as a processor, the engagement shall include processor terms covering subject-matter, duration, nature, purpose, types of data, categories of data subjects, and obligations as to instructions, confidentiality, security, sub-processors, assistance, deletion or return, and information for audits proportionate to risk. The Client is responsible for providing lawful instructions and for privacy information to its own data subjects. International transfers of Client personal data shall use a UK-recognised tool. The Company may process limited contact data as a controller to administer the contract, as described in the Privacy Policy. The Client shall not instruct processing that would be unlawful. Security measures will be proportionate; a complete public list of controls will not be annexed if that annex would increase risk, but a summary may be provided under confidentiality.

28. Security limitations and no guarantee

The Client accepts that no survey, scrape, or test can expose every buried signal. Absence of a finding is not a warranty of absence of a defect. Tools produce noise. The Company will tag noise as noise where it recognises it. Zero-days, insider threats, supply-chain events after the Deliverable date, and Client changes after acceptance are outside the interpretation. If the Client asks for a certificate of perfect security, the Company will refuse. Insurance certificates, if requested, will be provided as then available; they are not an increase of the liability cap. The Company may rely on representations of the Client about inventory. An incomplete inventory produces an incomplete cut.

29. Warranties

The Company warrants that it will perform the Services with reasonable professional care and skill for a United Kingdom computer-related consultancy of its kind, and that it has the right to grant the licences it grants. Software Deliverables will, for thirty days after acceptance, materially conform to written acceptance criteria if such criteria exist. The Client's exclusive remedy for a proven warranty breach in software is, at the Company's choice, re-performance or a refund of the fee allocated to the non-conforming part. All other warranties, including merchantability, fitness for a particular purpose, and non-infringement of unknown third-party rights, are excluded to the maximum extent permitted by law. The Client warrants the accuracy of Authorised Scope and its authority.

30. Indemnities

The Client shall indemnify the Company against claims, damages, and reasonable legal costs arising from: the Client's lack of authority over systems in the Authorised Scope; content and data the Client supplies; the Client's operation of a platform after handover; a third-party allegation that Client materials infringe; and the Client's failure to implement a tagged recommendation where that failure is alleged as the Company's fault. The Company shall indemnify the Client against a third-party claim that original Company-written Deliverables, used as delivered and not combined with other matter, infringe UK copyright, provided the Client gives prompt notice, exclusive control of defence, and reasonable cooperation, and provided the Company may replace or modify the Deliverable or refund the relevant fee. This Company indemnity does not cover open-source components, Client specifications that required the infringing feature, or use after the Company offered a non-infringing substitute.

31. Liability

Nothing excludes liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be limited under English law. Subject to that, the Company's total aggregate liability arising out of or in connection with an engagement, whether in contract, tort, misrepresentation, or otherwise, shall not exceed the fees paid by the Client to the Company under that engagement in the twelve months preceding the claim, or five thousand pounds, whichever is higher. The Company shall not be liable for loss of profit, revenue, anticipated savings, goodwill, data, or for indirect or consequential loss, even if advised of the possibility, nor for loss caused by the Client's delay, by third-party platforms, by cloud-region failure, by store rejection, by rights-holder takedown, or by the Client's decision to operate with an untagged fragment. The parties agree that the fees reflect this allocation of risk. A claim must be notified within twelve months of the facts giving rise to it becoming reasonably discoverable, and legal proceedings issued within twelve months after that notice, or the claim is barred, except for fraud.

32. Insurance

The Company shall maintain professional indemnity and public liability insurance at levels it reasonably determines for a practice of its scale in London, and shall provide evidence on request, subject to policy terms. The existence of insurance does not increase the liability cap. The Client shall maintain insurance appropriate to operating digital platforms, including cyber insurance if the Client's board considers it proper. Each party shall bear its excess.

33. Term, suspension and termination

An engagement begins on the date of contract formation and continues until the Services are complete or it is terminated. Either party may terminate for material breach not remedied within fifteen Working Days after notice, or immediately if the other party becomes insolvent as defined by English insolvency law, or if continuing would be unlawful. The Company may terminate immediately if the Client pressures unlawful access, refuses to tag a production change that the Company reasonably believes would harm third parties, or is listed on a sanctions list. On termination the Client shall pay for work performed, committed non-cancellable expenses, and, if the Client terminates for convenience, any early-termination charge stated in the engagement. The Company shall deliver paid-for Deliverables in their then-current state without a duty to complete, and shall return or destroy Client Confidential Information according to the Privacy Policy except for minimal professional records.

34. Force majeure

Neither party is liable for delay or failure caused by circumstances beyond its reasonable control, including failure of utilities, cloud-provider outage not caused by that party's negligence, epidemic, strike at a third party, act of government, or denial-of-service attack on a third-party network. The affected party shall notify the other and take reasonable steps to mitigate. If force majeure continues for more than sixty days, either party may terminate without liability except for sums already due. Lack of funds is not force majeure. The Computer Misuse Act is not force majeure; it is a legal boundary.

35. Export control, sanctions and anti-bribery

The Client warrants that it is not a sanctioned person, that the Services will not be used to supply a sanctioned person, and that encryption and dual-use items, if any, will be handled under applicable UK export law. The Company may refuse work that would require an export licence it does not hold. Each party shall comply with the Bribery Act 2010 and shall not offer or accept improper advantages. The Company may terminate if it reasonably believes the Client has breached this clause. Modern slavery due diligence appropriate to a London professional services firm will be maintained by the Company in its supply of personnel; the Client shall do likewise in its supply of access and labour.

36. Non-public testing and residual risk after handover

After handover, the Client operates the system. The Company has no duty to monitor unless a retainer says so. A retainer, if any, is a separate horizon with its own fees. Public disclosure of a finding by the Client does not create a Company duty to comment. If the Client names the Company in a press statement, it shall not attribute to the Company a guarantee the Company did not write. Residual risk remains with the Client. The Company may, at its option, offer a further cut at then-current rates.

37. Publicity, references and website finds

The Company may list the Client's trading name as a professional reference unless the Client objects in writing. The Company shall not publish a recoverable exploit or a named vulnerability without consent. Anonymised recovered-context descriptions on https://farorbis.social are permitted if they cannot reasonably identify the Client. The Client shall not copy the Company's site design, legal pages, or method language as its own product skin.

38. Dispute resolution

The parties shall attempt good-faith negotiation for fourteen days after a written dispute notice. Either party may then suggest mediation in London under a recognised provider, without prejudice to injunctive relief for confidentiality, intellectual property, or unlawful access. Nothing requires mediation before court if a limitation period would expire. Subject to that, the courts of England and Wales have exclusive jurisdiction. The governing law is the law of England and Wales. The Contracts (Rights of Third Parties) Act 1999 is excluded, except that a Company affiliate performing Services may rely on the liability cap and on confidentiality. A party may assign to a purchaser of its business with notice; any other assignment requires consent not to be unreasonably withheld, except that the Company may assign receivables.

39. Notices

Notices shall be in English, in writing, and sent to the postal address 27 Old Gloucester Street, LONDON, WC1N 3AX United Kingdom or to inquiry@farorbis.social for the Company, and to the Client addresses on the engagement. Email notice is effective on the next Working Day if no bounce is received. Postal notice is effective on the second Working Day after first-class posting in the UK. This clause does not prohibit ordinary operational email. Service of legal process shall comply with the Civil Procedure Rules and is not completed by a website form.

40. Entire agreement, severance, waiver

The engagement documents and these Terms and Conditions are the entire agreement for the Services and supersede prior negotiations, except that nothing excludes liability for fraudulent misrepresentation. Each party acknowledges it has not relied on a statement not set out in those documents. A failure to enforce is not a waiver. If a provision is invalid, the remainder continues, and the invalid provision shall be modified to the minimum extent required to make it valid while preserving economic effect. These terms may be executed in counterparts, including electronic signature. Survival: clauses that by nature should survive, including intellectual property, confidentiality, data protection, liability, indemnities, non-solicitation, and governing law, survive termination.

41. Records, audit and evidence packs

The Company shall keep professional records sufficient to show what cut was agreed and what Deliverable was issued. The Client may, not more than once in twelve months and on twenty Working Days' notice, audit the Company's processor controls relevant to the Client's personal data, at the Client's cost, during Working Days, without access to other clients' packs, and without a right to copy the Company's internal method manuals. Security questionnaires shall be answered in good faith; a refusal to disclose a control that would increase risk is not a breach if an equivalent assurance is offered. Evidence packs remain Confidential Information. The Company may retain a copy of a Deliverable for the limitation period to defend claims.

42. Service hours and London field window

Unless a retainer states otherwise, Services are performed on Working Days between 09:00 and 17:30 United Kingdom time. Out-of-hours work, if requested and accepted, is chargeable at rates stated or, if not stated, at one and a half times the ordinary day rate. The Company is not a public emergency service. A telephone call to +44 7284 556677 outside hours may be logged on the next Working Day. If the Client requires a follow-the-sun operation, that is a different engagement. Site visits to 27 Old Gloucester Street are by appointment. That address is a registered office and field station for correspondence; it is not a walk-in laboratory and not a promise of a particular room layout.

43. Acceptance of Deliverables

Where the engagement sets an acceptance procedure, that procedure applies. Where it does not, Deliverables are accepted on the earlier of written acceptance, production use, or the tenth Working Day after delivery without a particularised rejection. Cosmetic preferences, additional features, and disagreements with a verified interpretation that the Client simply dislikes are not defects. A particularised rejection must name the acceptance criterion failed. The Company shall have a reasonable opportunity to re-perform. If the Client uses a Deliverable while purporting to reject it, the Deliverable is accepted as to the used part.

44. Third-party software, stores and networks

App stores, cloud marketplaces, payment schemes, telecommunications networks, certificate authorities, and similar utilities are third parties. Their outages, policy changes, fee changes, and account bans are not Company breaches. The Client shall comply with their terms. The Company shall not be required to reverse-engineer a third-party system in breach of law or contract. If a third-party licence prohibits the intended use, the Company will tag that prohibition and stop that path until the Client obtains rights.

45. TUPE and employment status

Practitioners are not the Client's employees. The Client shall not supervise them as employees. If a transfer of undertaking is alleged, the parties shall cooperate, and the Client shall indemnify the Company against unexpected employment liabilities caused by the Client's service provision change, except where the Company's own employees transfer by operation of law due to the Company's decision to organise a dedicated organised grouping whose principal purpose was the Client, in which case ordinary TUPE allocation shall be discussed in good faith before such a grouping is created. The Company does not intend to create such a grouping unless the engagement is a dedicated multi-year managed service that says so.

46. Ethical standards and conflict

The Company may decline or resign an engagement that would conflict with another client's Confidential Information in a way that cannot be walled, or that would require the Company to argue both sides of the same unpublished vulnerability in a manner that would be professionally improper. A conflict wall, if used, will be recorded. The Client shall disclose if it is asking the Company to examine a system in a dispute with a named other party who is also a client, if the Client knows that fact.

47. Miscellaneous commercial positions

The Company is not a law firm, is not a statutory auditor, and is not a regulated payment institution. Nothing in the Services is legal advice, audit opinion, or investment advice. The Client shall obtain those from appropriate firms. If the Services touch a listed company disclosure, the Client's counsel leads. If the Services touch a children's product, the Client remains the duty-holder for age-appropriate design. If the Services touch critical national infrastructure, additional protocol may be required and may be charged. The Company may issue a public statement if required by law. Otherwise, press is governed by the publicity clause. These Terms and Conditions may be updated for new engagements; live engagements change only by the change-control clause or by a replacement agreement. The website Terms of Service continue to govern mere website use. Inconsistency about paid work is resolved in favour of these Terms and Conditions and the engagement letter.

48A. Schedules, statements of work and order of documents

An engagement may attach schedules covering technical annexes, rate cards, processing particulars, authorised IP ranges, named environments, and data-handling matrices. A schedule is part of the contract if referenced in the engagement letter. If a schedule conflicts with the main body of these Terms and Conditions on a matter of liability, indemnity, or intellectual-property ownership, the main body prevails unless the schedule expressly states that it varies that numbered clause and is signed by both parties. If two schedules conflict, the later dated schedule prevails for the overlapping subject. A slide deck, workshop whiteboard, or chat log is not a schedule unless copied into a dated document that both parties treat as a schedule. The Company may refuse to treat a Client intranet page as a schedule if that page can be edited unilaterally after signature.

Statements of work may be sequential. Completion of one statement of work does not automatically commence another. A master services arrangement, if used, still requires a statement of work before a new cut begins. Estimates in a proposal are not a statement of work. If the Client issues an order that recites only a fee and a slogan, the Company may require a proper Authorised Scope before starting. Work performed under a letter of intent is chargeable even if a later statement of work is never signed, at the rates in the letter of intent or, if none, at the Company's ordinary rates then advised in writing.

48B. Access protocol, credentials and jump hosts

Remote access shall use named identities, multi-factor authentication where the Client environment supports it, and a jump path that can be logged. Shared root passwords, if temporarily unavoidable, shall be rotated at the end of the window and the rotation tagged as a Context Unit. The Company will not install persistent unknown remote-access tools without recording them in the engagement pack. Virtual private networks, bastion hosts, and privileged-access workstations supplied by the Client remain Client systems; the Company is a visitor on those systems. If the Client requires the Company to use a virtual desktop that cannot export a tagged record, the Company may keep its own contemporaneous notes outside that desktop, still bound by confidentiality, because a field record that exists only inside a Client-controlled session that later disappears cannot be verified.

Physical access, if any, to a Client site is by appointment, with visitor logs, and without a right to photograph other tenants. The registered office at 27 Old Gloucester Street, LONDON, WC1N 3AX United Kingdom is not a Client data centre. The Client shall not send hardware containing live production secrets to that address without a written chain-of-custody protocol. If hardware is sent contrary to this clause, the Company may refuse receipt or may isolate the parcel and charge for handling.

48C. Vulnerability handling, severity and disclosure clocks

Severity ratings used in Deliverables are the Company's professional labels for the engagement, unless the statement of work mandates a named industry scale. A rating is not a legal conclusion of negligence by any person. The Client shall not treat a medium finding as an instruction to ignore it. Coordinated disclosure to a vendor of a third-party product, if appropriate, will be discussed; the Company will not disclose a Client-specific configuration error to the public as a vendor bug. If a finding affects a third party who is not the Client, the Company will not contact that third party except as the Client instructs or as law requires. The Client shall not instruct the Company to remain silent about an ongoing crime in which silence would itself be unlawful.

Proof-of-concept material, if created, shall be the minimum needed to demonstrate the tagged fragment, shall not include a reliable public exploit pack, and shall be transmitted by the agreed channel. The Client shall restrict internal circulation of proof-of-concept material to persons who need it. The Company is not liable if the Client forwards a proof of concept to a mailing list. Destruction of proof-of-concept artefacts at the end of the engagement shall follow the retention clause, except for the minimal professional record.

48D. Incident response work

Incident response is included only if the engagement says so. When included, it is a careful exposure under time pressure, not a guarantee of containment. The Company may give oral guidance during an incident; oral guidance is superseded by the next tagged written note. The Client remains the decision-maker for isolation, ransom, public statements, and regulator notification, except where the Company has an independent legal duty. Forensic images, if taken, are Client property once paid for, subject to the Company's licence in its tools and methods. Chain of custody will be recorded to a professional standard for a consultancy, which is not identical to a police exhibit standard unless a litigation-hold protocol is separately scoped and priced.

The Company does not pay ransoms, does not negotiate with criminals as the Client's undisclosed agent, and does not promise recovery of encrypted data. Advice about whether to involve insurers or law enforcement is practical, not legal advice. If the Client withholds material facts during an incident, interpretations issued in that window are qualified and may be withdrawn in a later tagged note.

48E. Retainers, standby and unused windows

A retainer purchases availability of a named class of practitioner for a stated window, not unlimited hours. Unused hours do not roll over unless the engagement says they do. Emergency draw-down of a retainer still requires Authorised Scope. If the Client uses the retainer as a substitute for internal ownership, the Company may require a reset of the method: survey, scrape, expose, tag, record, interpret. Standby outside Working Days is not included in an ordinary retainer. A prepaid window that the Client cancels with less than five Working Days' notice may be charged in full if the Company cannot reasonably redeploy the practitioners.

48F. Training, workshops and knowledge transfer

Training is included only if listed. Workshop materials are Deliverables if so identified; otherwise they are facilitation aids. Recording of a workshop requires consent of attendees and of the Company. The Client shall not sell the Company's training as its own product. Knowledge transfer does not mean the Company must remain on chat indefinitely after acceptance. A competent receiving team at the Client is a Client obligation. If the Client's receiving team is not competent, that is not a defect in the Deliverable if the Deliverable meets the written criteria.

48G. Accessibility, localisation and language

Accessibility work for a Client product is included only if specified, with a standard named, such as a WCAG version. The Company's own public website strives for readable professional pages and keyboard-usable navigation; it is not a claim that every Client Deliverable is certified. Localisation, right-to-left layout, and translation are out of scope unless listed. The contract language is English. If the Client operates in other languages, the Client shall supply legal text for those locales. The Company is not responsible for a mistranslation performed by the Client.

48H. Artificial intelligence tools used in delivery

The Company may use internal or third-party software tools, including statistical and generative tools, as aids in drafting, searching, or summarising, under confidentiality controls proportionate to the risk. A verified interpretation of a Client estate is not issued solely by an unattended model. The Client shall not require the Company to paste Client secrets into a public consumer tool. If the Client mandates a particular enterprise tool, the Client shall provide licences and a lawful configuration. Outputs of generative tools shall be reviewed by a practitioner before they become a Deliverable. The Company does not warrant that a model-assisted draft is free of third-party style similarity; original Company authorship of unique Client logic remains the professional standard for assigned Deliverables.

The Client shall disclose if it requires that no generative tool be used. Such a requirement may increase fees and dates. The Company will not use Client Confidential Information to train a public model. Improvement of the Company's general method from non-confidential residual skill is permitted as already stated.

48I. Open-source compliance and software bills

Where software is delivered, the Company shall, if requested in the statement of work, provide a list of identified third-party components known to it at handover. Completeness of a software bill of materials is limited by the tools and time scoped. Licence conflicts discovered after selection will be tagged; resolving a conflict may be a change. The Client shall not demand that the Company strip copyright notices required by a licence. Copyleft obligations, if triggered by a Client specification, are the Client's operational burden after handover. The Company will not conceal a known copyleft trigger in a Deliverable it authors.

48J. Escrow, source and continuity

Source escrow is not included unless a separate escrow agreement names an escrow agent and fees. The Company is a consultancy, not a perpetual hosted-platform vendor, unless a hosted operations schedule exists. Business continuity of the Company will be maintained at a level reasonable for a London professional firm of its scale. That is not a hot-standby of the Client's production. If a key practitioner is unavailable, the Company may substitute a practitioner of reasonable skill. The Client shall not treat a particular personality as the entire contract unless a named-person schedule with a premium is signed.

48K. Multi-entity groups, affiliates and flow-down

Services are supplied to the Client named in the engagement. Affiliates may receive the benefit of Deliverables only if named, and each named affiliate is bound by confidentiality, Authorised Scope, and the acceptable-use obligations. Fees remain owed by the named Client unless an affiliate joins as a party. The Company is not required to flow down Client intra-group politics. A shared services company that is not named has no right to demand a pack. If the Client is acquired, these terms bind the successor to the Client's business as to accrued rights and duties, subject to the assignment clause.

48L. Set-off, deductions and disputed invoices

The Client shall not set off alleged damages against invoices except for sums finally awarded by a court or agreed in writing. A good-faith dispute of a line item shall be raised within ten Working Days of the invoice, with particularity. Undisputed amounts remain payable on due date. The Company may set off sums the Client owes against sums the Company owes. Deductions for withholding shall follow the tax clause. Chargebacks through a payment provider for a genuine contracted fee are a breach; the Company may recover the fee, the provider's costs, and the interest clause amounts.

48M. Benchmarks, most-favoured pricing and public sector

The Company does not offer most-favoured-client pricing unless a signed schedule says so. Benchmarking clauses that require disclosure of other clients' fees are refused because they would breach confidentiality. Public-sector Clients remain bound by Authorised Scope and by the Computer Misuse Act. Transparency duties of a public body do not automatically authorise publication of a vulnerability pack; redaction shall be agreed. Framework call-offs still need a statement of work. The Company is not obliged to accept a call-off that would conflict with another engagement or with law.

48N. Service levels for operations, if any

Unless an operations schedule states service levels, there are none. If service levels exist, they will name measurement method, exclusions for Client delay and third-party failure, and remedies, which shall be service credits as the exclusive remedy for missed levels, not an increase of the liability cap. Credits are not refunds except as stated. Chronic failure may justify termination under the termination clause, not an uncapped claim. Monitoring tools used to measure levels are not a substitute for the Client's own observability after handover of a build-only engagement.

48O. Documentation standards

Documentation shall be in English, in a form a competent later practitioner can use, including architecture notes, context identifiers, and operational runbooks if scoped. The Company does not produce academic papers, museum catalogues, or legal opinions as documentation. Diagrams may use the stratigraphy visual language of the public site or a plainer engineering style; either is acceptable if it records the cut. Video documentation is included only if listed. The Client shall not require the Company to document every rejected alternative considered in a workshop unless a decision log is scoped.

48P. Testing environments and production change

The Company prefers to expose a non-production horizon first. Production changes by the Company occur only if the engagement says so, during an agreed window, with a Client approver online. The Client shall have a rollback plan. The Company is not liable for a production incident caused by a Client-approved change that the Company advised against in a tagged note. Load generation against production is forbidden unless expressly authorised because it can be indistinguishable from an attack and can harm uninvolved users.

48Q. Subprocessors of personal data and infrastructure

Routine infrastructure for the Company's own practice, such as email and professional office software, is described at a summary level in the Privacy Policy. Client-specific subprocessors used only for a particular engagement will be listed in that engagement's processing particulars. The Client may object to a new Client-specific subprocessor on reasonable grounds related to security or law; an unreasonable objection that leaves no workable path may be treated as a Client delay. The Company will impose written processor terms where it is the processor appointing a subprocessor.

48R. Ethical walls and prior knowledge

Practitioners may have seen similar patterns in other estates. General knowledge of a class of weakness is not the Client's Confidential Information. Particular facts, particular keys, and particular diagrams are. The Company will not transplant a Client's unique architecture diagram into another client's pack. An ethical wall, if established, will restrict named persons. The Client acknowledges that a small London practice cannot wall every industry sector; if a strict sector exclusive is required, it must be priced as an exclusive and will be limited in time and territory.

48S. Insurance claims and expert witness work

Assistance with an insurance claim is chargeable and is not a legal representation. Expert witness work, if requested, is a separate engagement with different duties to the court, higher rates, and no result warranty. The Company may decline expert work that would conflict with a prior consulting role. Documents created as consulting Deliverables may be disclosable in litigation according to law; the Company will not destroy them to frustrate a known duty to preserve once a litigation hold is notified in writing.

48T. Health, safety and working time

If Company personnel attend a Client site, the Client shall provide a safe workplace and a briefing on site hazards. The Company may withdraw personnel from an unsafe site without breach. Working Time Regulations will be respected for Company personnel; the Client shall not demand continuous waking hours that would be unlawful. Fatigue increases error in careful exposure; the Company may insist on rest even during an incident, while remaining reasonably available according to the incident schedule if one exists.

48U. Environmental, paper and media destruction

Paper field notes, if printed, will be destroyed by a method appropriate to the classification of the pack. Electronic destruction follows the retention clause. The Company does not claim a particular environmental certification. The Client shall not send hazardous media without notice. Tape, disk, and phone destruction, if requested, is chargeable and will be evidenced by a certificate of destruction where the supplier provides one.

48V. Domain names, certificates and registries

The Client shall own domain names and TLS certificates for its products. The Company may assist in configuration. Failure to renew a domain or certificate is a Client operational duty after handover. The Company's domain farorbis.social and related marks remain the Company's. The Client shall not register a confusingly similar domain to impersonate the Company. Certificate authorities are third parties as already stated.

48W. Payment schemes, wallets and regulated activity

If a Client product moves money, the Client is responsible for payment-services permissions, safeguarding, and scheme rules. The Company will not pretend that software delivery is a banking licence. Wallet keys, if the Company ever touches them under Authorised Scope, will be handled as high-risk fragments with tagged custody. The Company does not custody Client crypto-assets as a business. Advice about token design in a streaming or social product is software advice, not an invitation to issue a security.

48X. Children, harmful content and operator duties

If the Client operates a service likely to be accessed by children, the Client remains the duty-holder for applicable online-safety, age-assurance, and design codes. The Company may implement technical measures that are scoped. The Company will not design a dark pattern whose purpose is to harvest children's data. Harmful-content tooling, if scoped, reduces and records; it does not make the Company the editor-in-chief of the Client's network.

48Y. Telecommunications, numbering and spam

The telephone number +44 7284 556677 is a Company contact number. The Client shall not republish it as a customer-support line for the Client's product. SMS, email, and push campaigns run by the Client must comply with PECR and other marketing law; the Company is not the sender unless a sending schedule exists. The Company will not supply harvested numbering lists. Integration with a communications provider is third-party work as to that provider's network.

48Z. Survival of metaphors and interpretation of marketing

Words such as trench, horizon, datum, shard, find bag, soil, scrape, and context tag appear in marketing and in working language. In these Terms and Conditions they have no geological, archaeological, or museum meaning. They do not create duties to handle artefacts, to obtain an excavation licence, or to publish in a journal. If a clause in marketing conflicts with a clause here, this document prevails for paid work. A court shall not interpret a colour name or a typeface choice as a contractual specification of Deliverables.

49A. Further fee mechanics

Day rates assume a Working Day of seven productive hours unless stated. Partial days may be charged as a half or a full day according to the rate card. Travel time within Greater London is not usually charged; travel time beyond that may be charged at half the day rate unless a project fee includes it. Hotels, if needed, shall be reasonable, not theatrical. The Company may require a deposit before a first cut with a new Client. Deposits are credited against the last invoice, not refunded as a penalty if the Client simply changes its mind after work has been reserved, except as consumer law would require if a consumer were somehow a party, which these terms do not contemplate as the primary model.

If a foreign Client pays late because of bank friction, interest still accrues. The Company is not obliged to accept a letter of credit unless agreed. Invoices will bear the Company name FARORBIS LTD and the address 27 Old Gloucester Street, LONDON, WC1N 3AX United Kingdom. Queries about invoices go to inquiry@farorbis.social. A query is not a licence to delay an undisputed balance.

49B. Further confidentiality mechanics

Marking a document Public does not make it public if it still contains a secret; marking is evidence of intention, not magic. The Company may disclose Confidential Information to a prospective purchaser of the Company's business under a comparable duty, in aggregated or redacted form where practicable. The Client may disclose the Company's Confidential Information to its lawyers, insurers, and auditors under a duty of confidence. Residual employees who leave the Client remain bound as to secrets they actually know, which the Client must police in its own contracts. A mandatory legal disclosure shall be limited to what is required. The Company will not lie to a court or regulator to protect a Client secret.

49C. Further intellectual-property mechanics

If a Deliverable includes a third-party component that cannot be assigned, the assignment clause operates only on what can be assigned, and the licence clause covers the rest. Moral rights are waived by the Company to the extent waivable under English law for assigned Deliverables, so that the Client may adapt them. The Client shall not register a design or patent that claims the Company's pre-existing method as the Client's invention. If the Client files such a patent, it shall, on request, abandon the claims that capture the method, or licence them royalty-free to the Company. Feedback the Client gives about the public website may be used to improve the site without payment.

49D. Further liability mechanics

Multiple claims arising from the same cut or the same omitted tag constitute one engagement for the cap. Affiliates' claims, if any are allowed, share the cap with the Client. The cap applies to indemnities except the Client's indemnity for lack of authority, which is uncapped as to third-party claims caused by that lack, because the Company cannot insure the Client's missing permission. Nothing in the cap limits the Client's duty to pay fees. Liquidated damages, if any appear in a Client paper, are refused unless signed as a variation; they are not a default part of these terms. The Company recommends that the Client maintain its own cyber insurance because residual risk stays with the Client.

49E. Further termination mechanics

On termination for the Company's material breach, the Client shall still pay for conforming work. On termination for the Client's convenience, work in progress is paid at rates or at a reasonable proportion of a fixed fee. Licences to Company materials continue for paid-for Deliverables unless termination was for the Client's intellectual-property or confidentiality breach, in which case those licences may be revoked on notice as to future use, without a duty to delete lawfully retained archival copies required by law. Transition assistance is chargeable. The Company has no duty to train a replacement supplier in its unique method beyond the paid documentation.

49F. Notices, language and counterparts further

A notice sent to inquiry@farorbis.social concerning legal claims should also be posted to 27 Old Gloucester Street, LONDON, WC1N 3AX United Kingdom. Telephone +44 7284 556677 is not a valid method to commence a claim. Electronic signatures, including typed names in an email that clearly accepts, may form a contract as already stated. A scanned signed letter is a counterpart. The parties may keep a copy. These terms are available on https://farorbis.social as a convenience; the version attached to the engagement letter is the version that binds that engagement even if the website is later updated.

49G. Regulatory cooperation

If a regulator, a court, or a competent authority lawfully requires information, the Company will cooperate as required. The Client shall not instruct the Company to obstruct. Costs of substantial regulatory assistance beyond a short factual letter may be charged if the request concerns the Client's estate rather than the Company's own affairs. The Company will not provide a comforting letter that contradicts a tagged finding. If the ICO, the FCA, Ofcom, or another body is relevant to a Client product, the Client's counsel leads the relationship. The Company may speak to a regulator about the Company's own processing as described in the Privacy Policy without Client consent.

49H. Entire professional relationship

The parties intend a commercial relationship of independent contractors. No partnership, joint venture, or agency is created except where the Company is expressly appointed as a limited agent for a store listing or a registrar action. Neither party may bind the other. The Client shall not order goods in the Company's name. The Company shall not hold itself out as the Client's employee. These Terms and Conditions, with the engagement documents, are the complete commercial terms for the Services. Website visitors who are not Clients remain under the Terms of Service only.

48. Contact for these Terms and Conditions

FARORBIS LTD, 27 Old Gloucester Street, LONDON, WC1N 3AX United Kingdom. Email: inquiry@farorbis.social. Telephone: +44 7284 556677. Website: https://farorbis.social. These Terms and Conditions are issued in English. They should be read with the Privacy Policy, Cookie Policy, and Terms of Service. A Client that needs a negotiated schedule shall not assume that a vendor portal has achieved that negotiation. The field method remains: layer exposed, evidence tagged, interpretation verified. That method is a way of working, not a reduction of these legal terms into metaphor. If a court must interpret a metaphor on the website, it shall treat it as descriptive marketing of working character and shall give primacy to this document for commercial obligations. Notices concerning these terms may be sent by post to the address above and by email to inquiry@farorbis.social; telephone +44 7284 556677 does not vary a written clause.

Each party has had the opportunity to take legal advice. A party that did not take advice nonetheless agrees that the liability cap, the Authorised Scope warranty, and the payment terms are prominent and reasonable for specialised United Kingdom computer and cybersecurity work. These Terms and Conditions were prepared for FARORBIS LTD's own use and are not a licence for another supplier to copy as a substitute for its own counsel. End of commercial terms.