Clever Patients Logo

Terms & Conditions - Business usage

This Agreement is entered into by and between Healthxchange Pharmacy UK Limited of 1st Floor Sackville House, 143-149 Fenchurch Street, London, England, EC3M 6BL with Company No. 01999872 (the "Supplier") and the entity agreeing to this Agreement (the "Clinic"). Supplier is willing to license the Clinic to use the Web App on the terms set out in this Agreement, which govern the Clinic's access to and use of the Web App. This Agreement is effective as of the date you click the acceptance button (the "Effective Date"). If you are accepting on behalf of your employer or another entity, you represent and warrant that: (1) you have full legal authority to bind your employer or the applicable entity to this Agreement; (2) you have read and understand this Agreement; and (3) you agree on behalf of the party that you represent to this Agreement. If you don't have the legal authority to bind your employer or the applicable entity, please do not click the acceptance button.

  1. 1. Definitions and interpretation

      1.1
    1. In these Conditions, the following definitions apply:
      "Agreement" means the Licence and the Conditions;
      "Conditions" means the terms and conditions set out in this document, as amended from time to time in accordance with clause 17.3;
      "Data Protection Laws" means the following legislation relating to data protection and privacy, to the extent applicable to the Clinic and Supplier, including: (a) the General Data Protection Regulation (EU) 2016/679 (the "GDPR"); (b) the GDPR as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018, and as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019; (c) the Data Protection Act 2018; (d) the Data Protection (Bailiwick of Guernsey) Law 2017; (e) the Privacy and Electronic Communications (EC Directive) Regulations 2003 and all other national laws implementing the Directive on Privacy and Electronic Communications (2002/58/EC) and (f) any other data protection law or regulation applicable to the processing of Personal Data;
      "Documentation" means any electronic documentation related to the Web App provided by Supplier to the Clinic;
      "Goods" means the goods as set out in the Order;
      "Heightened Cybersecurity Requirements" means any laws, regulations, codes, guidance (from regulatory and advisory bodies, whether mandatory or not), international and national standards, industry schemes and sanctions, which are applicable to either the Clinic or its end users (but not Supplier) relating to security of network and information systems and security breach and incident reporting requirements, which may include the Network and Information Systems Regulations 2018 (SI 506/2018), all as amended or updated from time to time;
      "Instructions" means the detailed written instructions regarding how to store and use the Goods including, without limitation, any dosage instructions and any Use by Date as supplied with the Goods (where applicable);
      "Intellectual Property" means all patents, rights to inventions, copyright and related rights, trade marks, trade names, copyright, rights in designs, rights in Web App and any other intellectual property rights, in each case whether registered or unregistered and including all applications (and rights to apply) for, and renewals or extensions of, such rights and all similar or equivalent rights or forms of protection which subsist or will subsist, now or in the future, in any part of the world;
      "Licence" means the licence provided to the Clinic by Supplier in clause 2.1;
      "Misuse" means the intentional use of the system in order to gain an outcome that was not expected or intended, including but not limited to: circumventing authentication mechanisms; unauthorised access, including using credentials belonging to another person; deliberately inputting unexpected or incorrect data in order to gain a specific outcome; hacking, cracking, pirating, or otherwise modifying the code or compiled binary of the Web App; running the Web App on a "jailbroken" device; or exploiting a bug in the system to gain an unintended outcome, or perform an unintended task or action;
      "Order" means the order placed by the Patient for the supply of Goods through the Web App;
      "Patient" means the patient of the Clinic;
      "Specification" means the product specification for the Goods;
      "Supervisory Authority" means any local, national or multinational agency, department, official, parliament, public or statutory person or any government or professional body, regulatory or supervisory authority, board or other body responsible for administering, or enforcing Data Protection Laws;
      "Use by Date" means, where applicable, the date after which the Goods should not be used, as marked on the Goods;
      "VAT" means value added tax chargeable under the Value Added Tax Act 1994 and any similar replacement or additional tax;
      "Web App" means the white-label Clever Patients website application powered by Supplier for the Clinic to personalise for use with its Patients; and
      "Year" means each calendar year starting with the Effective Date.
    2. 1.2
    3. In these Conditions the following rules apply:
      (a) a person includes a natural person, corporate or unincorporated body (whether or not having separate legal personality);
      (b) a reference to a party includes its personal representatives, successors and permitted assigns;
      (c) a reference to a statute or statutory provision is a reference to such statute or provision as amended or re-enacted; and
      (d) any phrase introduced by the terms including, include, in particular or any similar expression shall be construed as illustrative and shall not limit the sense of the words preceding those terms.

  2. 2. Licence

      2.1
    1. In consideration for the Clinic agreeing to abide by the terms of this licence (the "Licence"), Supplier grants to the Clinic a non-exclusive, non-transferable, sublicensable licence to use the Web App with its Patients.

  3. 3. Licence Restrictions

      3.1
    1. For the purposes of clause 2, use of the Web App shall be restricted to use of the Web App in object code form for the purpose of processing the Clinic's data for the normal business purposes of the Clinic (which shall not include allowing the use of the Web App by, or for the benefit of, any person other than Clinic Personnel).
    2. 3.2
    3. For the purposes of clause 3.1, "use of the Web App" means downloading or streaming the Web App onto a computer or device and viewing, using and displaying the Web App on such computer or device.
    4. 3.3
    5. The Clinic may not use the Web App other than as specified in clause 2 and clause 7.1 without the prior written consent of Supplier, and the Clinic acknowledges that fees may be payable on any change of use approved by Supplier.
    6. 3.4
    7. Subject to clause 2.1, the Clinic shall not:
      (a) use the Web App in any unlawful manner, for any unlawful purpose, or in any manner inconsistent with these terms, or act fraudulently or maliciously, for example, by hacking into or inserting malicious code, such as viruses, or harmful data, into the Web App;
      (b) infringe our Intellectual Property Rights or those of any third party in relation to its use of the Web App, including by the submission of any material;
      (c) transmit any material that is defamatory, offensive or otherwise objectionable in relation to its use of the Web App;
      (d) use the Web App in a way that could damage, disable, overburden, impair or compromise Supplier's systems or security or interfere with other users; or
      (e) otherwise Misuse the App
    1.2
  4. The Clinic may use any Documentation to support the Clinic's permitted use of the Web App.
  • 1.3
    The Clinic has no right (and shall not permit any third party) to copy, adapt, reverse engineer, decompile, disassemble, modify, adapt or make error corrections to the Web App in whole or in part except as permitted by applicable law (in which case the Clinic shall notify Supplier of its intention to do so).
  • 1.4
    The Clinic may not use any such information provided by Supplier or obtained by the Clinic during any such reduction permitted under clause 3.6 to create any Web App whose expression is substantially similar to that of the Web App nor use such information in any manner which would be restricted by any copyright subsisting in it.
  • 1.5
    The Clinic shall not and ensure that its sublicensees shall not:

  • (a) assign or novate the benefit or burden of this Licence in whole or in part;
    (b) in respect of the sublicensees only, sublicence the benefit or burden of this Licence in whole or in part;
    (c) rent, lease, loan, provide or otherwise make available, the Web App in any form, in whole or in part;
    (d) allow the Web App to become the subject of any charge, lien or encumbrance;
    (e) copy the Web App or Documentation except as part of the normal use of the Web App; or
    (f) deal in any other manner with any or all of its rights and obligations under this Licence,
    without the prior written consent of Supplier.
  • 1.2
    Subject to Schedule 1 Part 11, Supplier may at any time sub-license, assign, novate, charge or deal in any other manner with any or all of its rights and obligations under this Licence.
  • 1.3
    Notwithstanding clause 14, a party assigning any or all of its rights under this Licence may disclose to a proposed assignee any information in its possession that relates to this Licence or its subject matter, the negotiations relating to it and the other party which is reasonably necessary to disclose for the purposes of the proposed assignment, provided that no disclosure pursuant to this clause 3.10 shall be made until notice of the identity of the proposed assignee has been given to the other party.
  • 1.4
  • The Clinic shall:
    (a) keep a complete and accurate record of the Clinic's disclosure of the Web App and its users, and produce such record to Supplier on request from time to time;
    (b) notify Supplier as soon as it becomes aware of any unauthorised use of the Web App by any person; and
    (c) at Supplier's discretion, pay, for broadening the scope of the licences granted under this Licence to cover the unauthorised use.
  • 1.2
    The Clinic shall permit Supplier to inspect and have access to any premises (and to the computer equipment or devices located there) at or on which the Web App is being kept or used by the Clinic, and have access to any records kept in connection with this Licence, for the purposes of ensuring that the Clinic is complying with the terms of this Licence, provided that Supplier provides reasonable advance notice to the Clinic of such inspections, which shall take place at reasonable times.
  • 1.3
    The Clinic shall comply with all applicable technology control or export laws and regulations that apply to the technology used or supported by the Web App.

  • 2. Operating System Requirements

      2.1
    1. The Clinic may also access the Web App using the following browsers (the version in brackets denotes the minimum version required):
      (a) Internet Explorer (v 11);
      (b) Microsoft Edge (44.18362.387.0);
      (c) Google Chrome (77.0.3865.90); and
      (d) Firefox (69.0.1).

  • 3. Updates to the Web App

      3.1
    1. Supplier may automatically update the Web App to improve performance, enhance functionality, reflect changes to the operating system or address security issues.
    2. 3.2
    3. If the Clinic opts out of automatic updates, the Clinic may not be able to continue using the Web App.

  • 4. Support

      4.1
    1. Supplier does not warrant that the use of the Web App will be uninterrupted or error-free or that it will meet any Heightened Cybersecurity Requirements. The Clinic shall back up any content and data used in connection with the Web App to protect itself in case of problems with the Web App.
    2. 4.2
    3. Where the Clinic requests any support for the Web App, Supplier shall provide the Clinic with a quote for providing such support.

  • 5. Supply of the Goods

      5.1
    1. Each Order for Goods placed by the Patient via the Web App shall be deemed to be an offer by the Patient to purchase the Goods.
    2. 5.2
    3. The Supplier is not the manufacturer of the Goods.
    4. 5.3
    5. The Supplier is under no obligation to accept any Orders for delivery outside of the UK.

  • 6. Private Prescriptions

      6.1
    1. Unless Supplier otherwise notifies the Clinic, Goods supplied by Supplier to a Patient on a private prescription in the UK, will be dispensed within the UK and supplied by Supplier via a home delivery service at the point of delivery in accordance with clause 1.
    2. 6.2
    3. The Clinic or their appointed representative may send a copy of the prescription for the Goods to Supplier via Healthxchange online facility known as e-pharmacy™.
    4. 6.3
    5. Prescriptions for Goods shall be electronically authorised online by the Clinic via Healthxchange e-pharmacy™ by a bona fide qualified and registered physician, dentist or nurse prescriber and shall meet any and all applicable regulatory and other requirements prescribed by law, rules, regulations and codes of conduct.
    6. 6.4
    7. All Goods supplied by Supplier against a named Patient prescription are for the personal use of the named Patient and are not for re-sale or wholesale.
    8. 6.5
    9. It is understood and agreed by Clinics, that the supply of prescription Goods is exclusively for the purpose of enabling the Clinic to dispense prescribed Goods upon presentation of a relevant prescription in its capacity and under its retail pharmacy licence, in accordance with applicable laws and regulations.
    10. 6.6
    11. Prescribers belonging to the GMC, GDC, NMC, GPhC and HCPC should not self-prescribe or prescribe for anyone with whom they have a close personal or emotional relationship, such as close family members unless the following is met:
      (a) There is no other person available with the legal right to assess the individual and prescribe without a delay.
      (b) Emergency treatment is immediately necessary to avoid serious deterioration in health or serious harm.

  • 7. Rates and Payment

      7.1
    1. All payments for Orders will be processed by Adyen, therefore the Clinic agrees to sign up to use the Adyen payments system. The Patient will pay for the Order using Adyen and Adyen will make payments to Supplier and the Clinic in accordance with this clause 9.
    2. 7.2
    3. Unless otherwise agreed in writing by Supplier, the price payable for the Goods shall be stated in Healthxchange e-pharmacy™ price list provided to the Clinic from time to time (or quotation relating to the Goods), but Supplier reserves the right to alter such prices without prior written notice to the Clinic.
    4. 7.3
    5. Unless otherwise agreed in writing by Supplier, the price for the Goods is exclusive of the cost of delivery, VAT, customs duties and all other taxes, duties and expenses in respect of the Goods all of which shall be added to the price payable by the Clinic.
    6. 7.4
    7. The Clinic shall receive an amount from Ayden equal to the difference between the price at which the Clinic makes the Goods available to purchase on the Web App and the sum of the price payable for the Goods as set out in the price list referred to in clause 9.2 and any other applicable costs as set out in clause 9.3.
    8. 7.5
    9. Ayden shall pay the Clinic any due payments resulting from Orders on the Web App to the Clinic's nominated bank account every Tuesday and every Friday at midnight, unless the Friday falls on a UK public holiday, in which case Ayden shall transfer the funds to the Clinic on the following business day.
    10. 7.6
    11. The Clinic is responsible for entering its bank account details correctly when completing Ayden's on-boarding process.
    12. 7.7
    13. Time of payment shall be of the essence.
    14. 7.8
    15. Unless otherwise agreed by Supplier in writing, payment by the Clinic to Supplier shall be made in advance of delivery of the Goods pursuant to this clause 1 to the Clinic.
    16. 7.9
    17. No payment shall be deemed to have been received until Supplier has received cleared funds.
    18. 7.10
    19. VAT will be applied to all invoices for the Goods except where dispensed against an original prescription in the UK.
    20. 7.11
    21. VAT will be applied to postage fees where vatable items are included in an order. VAT is applied to the delivery charge in direct proportion to the value of the vatable items included in the total order.

  • 8. Intellectual Property Rights

      8.1
    1. The Clinic acknowledges that any and all Intellectual Property in and relating to the Goods, the Web App and listed products (i.e. excluding any personalisation by the Clinic), Supplier and / or Supplier's business belong solely to Supplier or its licensors (as applicable) and shall remain entirely in the ownership or control of Supplier. Nothing said or done by either party shall constitute the transfer of any such rights.

  • 9. Description

      9.1
    1. All samples, drawings, descriptive matter, specifications and advertising issued by Supplier and any descriptions or illustrations contained in Supplier's catalogues, brochures or on the Web App are issued or published for the sole purpose of giving an approximate idea of the Goods described in them. They shall not form part of the Agreement or have any contractual force.

  • 10. Permission

      10.1
    1. The Clinic undertakes and warrants that it has obtained, at its own cost, all necessary permissions, certificates, licences, permits and consents required by any and all applicable laws, orders and regulations relating to the Goods.

  • 11. Liability

      11.1
    1. This clause 13 sets out the entire financial liability of Supplier (including any liability for the acts or omissions of its employees, agents and sub-contractors) to the Clinic in respect of any breach of the Agreement; and any representation, statement or tortious act or omission (including negligence) arising under or in connection with the Agreement.
    2. 11.2
    3. Nothing in these Conditions limits or excludes the liability of Supplier for: death or personal injury resulting from Supplier's negligence; or for any damage or liability incurred by the Clinic as a result of fraud or fraudulent misrepresentation by Supplier; or for any liability that, by law (including, but not limited to, breach of the terms implied by section 12 of the Sale of Goods Act 1979 or section 2 of the Supply of Goods and Services Act 1982), cannot be limited or excluded.
    4. 11.3
    5. Except as set out in this Agreement all warranties, conditions and other terms implied by statute or common law are, to the fullest extent permitted by law, excluded from this Agreement.
    6. 11.4
    7. Subject to clause 13.2:
      (a) Supplier shall bear no responsibility and fully excludes all liabilities in respect of how the Patient uses the Goods and/or how the Goods are prescribed;
      (b) Supplier shall not be liable, whether in contract, tort (including negligence) breach of statutory duty or otherwise, for any: loss of profits; or loss of business; or depletion of goodwill and/or similar losses; or loss of anticipated savings; or loss of goods; or loss of contract; or loss of use; or loss of corruption of data or information; or any special, indirect, consequential or pure economic loss, costs, damages, charges or expenses; and
      (c) Supplier's total liability in contract, tort (including negligence or breach of statutory duty), misrepresentation or otherwise shall be limited to the price paid or payable for the relevant Goods.

  • 12. Confidentiality & Data Protection

      12.1
    1. The Clinic shall at all times keep secret and confidential all Intellectual Property and technical or commercial know-how, specifications, formulas, inventions, processes, initiatives, business and trade secrets, methods of doing business, Clinic lists and all other information of a confidential nature which have been disclosed to the Clinic or the Clinic's agent by Supplier (or any of its subsidiaries) or their respective employees, agents or sub-contractors and any other confidential information concerning Supplier's business or its products which the Clinic may obtain. The Clinic shall restrict disclosure of such confidential material to such of its employees, agents or sub-contractors as need to know the same for the purpose of discharging the Clinic's obligations to Supplier, and shall ensure that such employees, agents or sub-contractors are subject to obligations of confidentiality corresponding to those which bind the Clinic.
    2. 12.2
    3. The above clause 14.1 shall not apply to confidential information which is in or subsequently enters the public domain otherwise than as a result of unauthorised disclosure by the Clinic or any other person.
    4. 12.3
    5. This clause 14 shall survive termination of the Agreement, however arising.
    6. 12.4
    7. Each party agrees to comply with the terms of the Schedule.

  • 13. Termination

      13.1
    1. Supplier may (without prejudice to any other rights) terminate the Agreement by written notice to the Clinic:
      (a) if the Clinic commits a material breach of any provision of the Agreement which is not capable of remedy;
      (b) if the Clinic commits a material breach of any provision of the Agreement which is capable of remedy and fails to remedy such breach within 30 days of receipt of a notice from Supplier specifying the breach; or
      (c) if the Clinic becomes bankrupt, insolvent, makes an arrangement or compounds with its creditors or shall have distress or execution levied upon its property or is wound up or goes into liquidation (except for the purposes of a bona fide reconstruction or amalgamation) or shall have a receiver administrative receiver or administrator appointed over the whole or any part of its assets or shall suffer the appointment of any similar person under the laws of its domicile.
    2. 13.2
    3. The exercise of the rights granted under clause 15.1 shall not prejudice or affect any right of action or remedy which may have already accrued or may accrue thereafter to Supplier.
    4. 13.3
    5. Either party may terminate the Agreement by providing the other party with written notice as follows:
      (a) [one month] for the first Year;
      (b) [two months] for the second Year;
      (c) [three months] for the third Year; and
      (d) [three months] if the agreement lasts longer than three Years.
      Notice may be given and end on any day of a calendar month.

  • 14. Consequences of termination

      14.1
    1. On termination of the Agreement:
      (a) if any to the extent that the Commercial Agents (Council Directive) Regulations 1993 (as amended from time to time) apply, and provided that the Clinic gives notice of its intention as required thereunder, the Clinic shall, unless any of the circumstances mentioned in Regulation 18 of those Regulations applies, have the right to be indemnified as provided in Regulation 17 of those Regulations. For the avoidance of doubt, the Clinic shall have no right to any compensation under those Regulations on termination of this Agreement;
      (b) the Clinic shall cease to promote, market or advertise the Goods;
      (c) the Clinic shall immediately cease to describe itself as an agent of the Supplier and cease to use and sub-license the Web App, all trade marks, trade names and brand names of the Supplier (including without limitation on stationery and vehicles); and
      (d) the Clinic shall at its own expense within 30 days return to the Supplier all samples and any advertising, promotional or sales material relating to the Goods then in the possession of the Clinic, or otherwise dispose of the same as the Supplier may instruct.
    2. 14.2
    3. On termination of the Agreement, the provisions of clause 9 shall continue in force in relation to all sales of the Goods where the sale has been concluded before the date of termination.

  • 15. General provisions

      15.1
    1. Each provision of the Agreement is severable and distinct from the others and if any provision is or at any time becomes to any extent or in any circumstances invalid, illegal or unenforceable for any reason, it shall to that extent or in those circumstances be deemed not to form part of the Agreement, but the validity, legality and enforceability of all other provisions of the Agreement shall not otherwise be affected or impaired, it being the parties' intention that every provision of the Agreement shall be and remain valid and enforceable to the fullest extent permitted by law.
    2. 15.2
    3. Supplier shall have no liability to the Clinic under the Agreement if it, or any of its subsidiaries acting on its behalf, is prevented from or delayed in performing any of its obligations under the Agreement or from carrying on its business by acts, events, omissions or accidents beyond its reasonable control, including strikes, lock-outs or other industrial disputes (whether involving the workforce of Supplier or any other party), failure of a utility service or transport network, act of God, act of terrorism, war, riot, civil commotion, malicious damage, compliance with any law or governmental order, rule, regulation or direction, accident, breakdown of plant or machinery, fire, flood, storm or default of suppliers or subcontractors ("Force Majeure Event(s)").
    4. 15.3
    5. No variation of the Agreement shall be effective unless it is in writing, refers specifically to the Agreement and is executed by a duly authorised representative of each party.
    6. 15.4
    7. Failure or delay of a party to exercise or enforce any right or remedy under the Agreement shall not be deemed to be a waiver of that right or any other right, nor operate to bar or restrict exercise or enforcement of it or any other right at any time or times thereafter. No single or partial exercise of such right or remedy shall preclude or restrict the further exercise of that or any other right or remedy.
    8. 15.5
    9. Each party warrants to the other that:
      (a) this Agreement constitutes the entire agreement and understanding between the parties and supersede any previous agreement between them relating to the matters contained in these Conditions (which shall be deemed to have been terminated by mutual consent); and
      (b) in entering into these Conditions, it does not rely on any statement, representation, assurance, promise or warranty of any person (whether a party to this agreement or not) other than as expressly set out in these Conditions. Neither party excludes its liability for fraud or fraudulent misrepresentation.
    10. 15.6
    11. Supplier may at any time assign, transfer, mortgage, charge or deal in any other manner with any or all of its rights and obligations under these Conditions and the Agreement.
    12. 15.7
    13. The Clinic shall not assign, transfer or sub-contract the Agreement or any of its rights, benefits or obligations under it to any other person, firm or supplier, without the prior written consent of Supplier.
    14. 15.8
    15. Nothing in the Agreement shall be deemed to constitute a partnership between the parties nor the relationship of employer and employee under a contract of service.
    16. 15.9
    17. A person who is not a party to the Agreement has no right under the Contracts (Rights of Third Parties) Act 1999 to enforce any terms of the Agreement. The rights of the parties to terminate, rescind or agree any variation, waiver or settlement under the Agreement are not subject to the consent of any other person.
    18. 15.10
    19. The Agreement and all non-contractual obligations arising from or connected with this Agreement shall be governed by and construed in accordance with English law and the English courts shall have exclusive jurisdiction to settle any disputes (contractual or non-contractual) which may arise out of or in connection with the Agreement.
    20. 15.11
    21. If any provision or part-provision of these Conditions becomes invalid, illegal or unenforceable, it shall be deemed deleted, but that shall not affect the validity and enforceability of the remaining Conditions.
  • Schedule 1

    Data Protection

      1.
    1. In this Schedule the terms "Personal Data", "Data Processor", "Data Subject", "process" and "Data Controller" are as defined in the Data Protection Laws.

    2. 2.
    3. The parties consider that each party is an independent controller in respect of the personal data processed by it pursuant to this Agreement and shall independently determine the purposes and means of such processing.

    4. 3.
    5. Each party will observe all applicable requirements of Data Protection Laws and the terms of this Agreement in relation to its processing of the personal data, and will, on request, provide the other at its own expense with reasonable assistance, information and cooperation to ensure compliance with the other party's obligations under Data Protection Laws in relation to the personal data.

    6. 4.
    7. If either party (the "Data Receiving Party") receives any complaint, notice or communication from a Supervisory Authority which relates directly or indirectly to the other party's: (i) processing of the personal data; or (ii) potential failure to comply with Data Protection Laws, the Data Receiving Party shall, to the extent permitted by law, promptly forward the complaint, notice or communication to the other party and provide the other party with reasonable co-operation and assistance in relation to the same.

    8. 5.
    9. If a data subject makes a written request to a party to exercise their rights in relation to the personal data, the other party shall provide reasonable co-operation and assistance in fulfilling that request in accordance with Data Protection Laws.

    10. 6.
    11. Each party shall implement appropriate technical and organisational security measures:
      (a) to protect the security and confidentiality of personal data processed by it in providing the services under this Agreement; and
      (b) to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure, access, or processing; and
      (c) as required under Data Protection Laws to ensure a level of security appropriate to the risk, including as appropriate: (A) the pseudonymization and encryption of personal data; (B) the ability to ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems and services; (C) the ability to restore the availability and access to the personal data in a timely manner; and (D) a process for regularly testing, assessing and evaluating the effectiveness of technical and organizational measures for ensuring and maintaining the security of the processing.

    12. 7.
    13. If either party becomes aware of a Personal Data Breach involving personal data, it shall notify the other party as soon as practicable and each party shall co-operate with the other, to the extent reasonably requested, in relation to any notifications to Supervisory Authorities or to data subjects which either party is required to make under Data Protection Laws.

    14. 8.
    15. On termination or expiry of this Agreement, at either party's request, the Data Receiving Party shall delete or return to that party all personal data processed on behalf of that party, and the Data Receiving Party shall delete existing copies of such personal data except where necessary to retain such personal data strictly for the purposes of compliance with law.