Home | Pricing | Contact | Privacy Policy
Terms and Conditions of Service
Last Updated: 12th August 2026
1. Introduction
Welcome to https://credwell.co.uk. These Terms and Conditions ("Terms") govern your use of our website and the provision of our data protection consulting, incident response planning, and fractional DPO services ("Services").
This website is operated, and Services are provided, by Credwell Limited, a company registered in England and Wales.
Company Registration Number: 09833757
Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Contact: compliance@credwell.co.uk
By using our website or engaging our Services, you agree to be bound by these Terms. If you are entering into these Terms on behalf of a law firm, company, or other legal entity, you represent that you have the authority to bind such entity to these Terms.
2. The Services & Service Level Agreement (SLA)
Credwell Limited provides specialized data protection and information governance consultancy services, including the drafting of bespoke Data Breach Incident Response Plans (DBIRP), Tabletop Breach Simulations, and Retained Fractional DPO advisory services.
The 7-Business-Day SLA: For our DBIRP packages, we aim to deliver your completed response plan within 7 business days. This timeline commences only when two conditions are met:
We have received payment in full or the agreed initial deposit (50%).
We have successfully completed the deep-dive discovery interviews with your designated internal stakeholders (e.g., COLP, IT Lead, Practice Manager).
Role of the Consultant: We act strictly as Expert Privacy and Governance Consultants. We use your disclosures, system architecture details, and operational inputs to draft tailored compliance frameworks.
Non-Law Firm Disclaimer: Credwell Limited is a data protection and information governance consultancy, not a law firm. We do not provide formal legal representation, legal advice, or litigation services, and Credwell Limited is not regulated by the Solicitors Regulation Authority (SRA). Engagement of our Services does not establish a solicitor-client relationship.
3. Client Obligations & Final Sign-Off
To enable us to provide the Services safely, accurately, and within SLA timelines, you agree to:
Provide complete, accurate, and truthful documentation and disclosures regarding your firm's technical architecture, practice management systems, cloud setups, and security postures.
Ensure that you have the lawful right to share any documentation provided to us.
Final Review and Adoption: You acknowledge that Credwell Limited provides draft operational plans and recommendations based on the information you supply. Your firm's leadership team, COLP, and Management Board remain strictly responsible for conducting a final review, formally adopting the DBIRP, and ensuring internal operational compliance.
4. Fees and Payment
Our standard pricing is displayed on our website and is subject to change. All fees are exclusive of Value Added Tax (VAT), which will be added where applicable.
Project Packages (DBIRP & Stress-Test): Billed on a 50/50 basis (50% deposit payable prior to discovery, and 50% payable upon delivery of the draft plan or prior to the Tabletop Exercise).
Retained Fractional DPO: Billed monthly in advance at £450 per month. This subscription operates on a rolling monthly basis and may be cancelled by either party upon providing 30 days' written notice prior to the next billing date.
Payment Terms: Payments may be made via corporate credit card or bank transfer upon receipt of an invoice. Invoices are strictly payable within 14 days of issue unless alternative terms are specified in a signed Statement of Work (SOW).
5. Confidentiality and Data Protection
Confidentiality: Both parties agree to keep all commercial, operational, and technical information exchanged during the provision of the Services strictly confidential. We utilize an Enterprise-Grade, end-to-end encrypted Microsoft 365 environment to ensure the secure transfer and storage of your technical and operational disclosures.
Data Protection: Our handling of any personal data is strictly governed by our Privacy Policy and complies with the UK GDPR and the Data Protection Act 2018.
6. Limitation of Liability & Disclaimers
Regulatory & Breach Disclaimers: While our recommendations are engineered to align with UK GDPR, ICO guidelines, and SRA regulatory standards, Credwell Limited does not guarantee that the adoption of a DBIRP will prevent cyber incidents, data breaches, regulatory investigations, or enforcement actions by the ICO or SRA.
Liability Cap: To the maximum extent permitted by law, Credwell Limited's total aggregate liability to you, whether in contract, tort (including negligence), breach of statutory duty, or otherwise, arising under or in connection with these Terms, shall be strictly limited to the total fees paid by you to us for the specific Service giving rise to the claim in the 12 months preceding the event. We shall not be liable for any indirect, consequential, or special losses, including but not limited to lost billable hours, lost profits, or reputational damage.
7. Intellectual Property
You retain all intellectual property rights in the internal data, documentation, and operational disclosures you provide to us.
Credwell Limited retains all intellectual property rights in our proprietary DBIRP frameworks, SOP templates, playbooks, diagnostic tools, and methodologies.
Upon full payment of our fees, we grant you a perpetual, non-exclusive, non-transferable license to use the completed DBIRP and associated documentation for your firm's internal compliance and operational resilience.
8. Governing Law and Jurisdiction
These Terms, and any dispute or claim arising out of or in connection with them or their subject matter, shall be governed by and construed in accordance with the laws of England and Wales. The courts of England and Wales shall have exclusive jurisdiction to settle any dispute or claim arising under these Terms.