Terms and Conditions

LH Risk Strategy Advisory Ltd, trading as DueTelligence

Version 2.2 · Last updated: 9 October 2026 · Next review: 9 October 2027

How these terms are organised

Read Part A and Part D, plus whichever of Parts B or C applies to you.

PART A — WEBSITE TERMS

A1. Who we are

This website is operated by LH Risk Strategy Advisory Ltd, trading as DueTelligence ("we", "us", "our").

A2. Acceptance

By using this website you accept these terms. If you do not accept them, do not use the website. If you
use the website on behalf of an organisation, you confirm you are authorised to bind that organisation.

A3. Information on this website is not advice

Content on this website is general information about our services. It is not engineering, safety,
regulatory, legal or financial advice, and must not be relied on as such. Nothing on this website
creates a professional relationship between us. Advice is given only under a written engagement.

A4. Acceptable use

You must not:

• use the website unlawfully, or in a way that damages or impairs it;
• attempt to gain unauthorised access to any part of the website or any system connected to it;
• probe, scan or test the vulnerability of our systems without our prior written permission;
• introduce malicious code;
• scrape or systematically extract content by automated means;
• use any content for recruitment, marketing lists, or resale;
• copy, reproduce or republish our content other than for your own internal business use.

A5. Intellectual property

All content on this website — text, documents, methodologies, branding, design and software — is owned
by or licensed to us. You may view and print pages for your own internal business use. Any other use
requires our written permission.

Our capability statements, methodology descriptions and service definitions may be used by contracting
authorities and prime contractors for the purpose of evaluating an engagement, and for no other
purpose.

A6. Availability

We do not guarantee that the website will be available or error-free, and we may change or withdraw any
part of it without notice.

A7. Links

We are not responsible for the content or practices of any website we link to.

PART B — SERVICES

B1. How our engagements are governed

Enquiring through this website does not create a contract. Services are provided under a written
engagement agreement, comprising a proposal or statement of work together with agreed terms.

The remainder of Part B applies where we accept an instruction without a fully executed engagement
agreement, and otherwise operates as our default position. Where anything in Part B conflicts with a
signed engagement agreement, the engagement agreement prevails.

B2. Proposals

Any fee, timescale or scope we indicate before a written proposal is issued is an estimate given for
discussion, is not an offer capable of acceptance, and does not bind us.

Written proposals remain open for 30 days unless stated otherwise, and are subject to the assumptions
and exclusions they contain.

B3. Basis of our work

• We deliver with the reasonable skill and care of a competent specialist in the relevant field.
• Our work is prepared for the client, for the purpose stated in the engagement, and on the information available to us. It should not be relied on for any other purpose or by any other party without our written agreement.
• Responsibility for the safety, compliance and regulatory acceptability of a client's assets, operations and submissions remains with the client. Our advice and recommendations support the client's own decision-making; they do not replace it, and they do not transfer the client's duties under any licence, permit, authorisation or statutory regime.
• Our findings and recommendations are an opinion formed on the information made available to us. We are not responsible for matters not disclosed to us.

B4. Client responsibilities

The client shall:

• provide accurate, complete and timely information, access and personnel;
• classify material correctly before providing it to us, and tell us what handling requirements apply;
• comply with export control and sanctions requirements before providing any controlled material;
• notify us of any relevant conflict of interest known to it;
• review and respond to our deliverables within the periods agreed.

Where a delay or additional work arises from a client dependency not being met, we may adjust the fee or
programme by written variation.

B5. Independence and conflicts

We do not advise on work we authored. We do not act for a supplier and for the party assessing that
supplier on the same matter. We declare relevant relationships before an engagement begins, and
immediately if a conflict emerges during one.

B6. Fees and payment

• Fees are as stated in the engagement agreement. Our default is a fixed fee for each engagement, never based on days or hours.
• Fees exclude VAT and any agreed expenses.
• Unless the engagement agreement says otherwise, half of the fee is payable on acceptance and the balance 45 days later.
• Once accepted, an engagement cannot be cancelled. It may be postponed, delayed or rescheduled without penalty, and payments remain due as scheduled. If you find evidence that we have not performed in a professional and ethical manner, we will refund the fee in full.
• Interest and fixed compensation on overdue sums accrue under the Late Payment of Commercial Debts (Interest) Act 1998, at the statutory rate.
• We may suspend work where an invoice is more than 30 days overdue, having given written notice.

B7. Intellectual property in deliverables

Unless the engagement agreement says otherwise, intellectual property rights in a deliverable pass to
the client on payment in full. We retain ownership of our own methodologies, templates, tools, know-how
and anything we developed independently of the engagement, and grant the client a non-exclusive,
perpetual, royalty-free licence to use those things to the extent embedded in a deliverable.

B8. Confidentiality

Each party shall keep the other's confidential information confidential, use it only for the engagement,
and disclose it only to those who need it and are bound by equivalent obligations. This does not apply
to information that is public other than through breach, was already lawfully held, is independently
developed, or must be disclosed by law — in which case we will notify the other party where lawful.

Our confidentiality obligations to clients survive indefinitely.

B9. Who delivers the work

We deliver engagements personally. We do not subcontract any part of an engagement without the client's
prior written agreement.

B10. Insurance

We maintain the following insurance, and will provide evidence of cover on request:

Cover is placed with Markel (UK) Ltd through Caunce O'Hara Insurance Brokers Ltd. Professional indemnity
is written on a claims-made basis.

We do not currently hold Cyber Essentials, Cyber Essentials Plus, ISO 27001 or ISO 9001 certification. We
operate in accordance with the principles of ISO 27001 and ISO 9001, as set out in our Quality, Security
and Technical Review Plan (LHRSA-QP-01), which is available on request.

Where an engagement requires higher limits than those above, we will seek to obtain them, and any
additional premium will be agreed in the engagement fee before work begins.

B11. Territorial and activity limits

Our insurance operates worldwide excluding the United States of America and Canada, and excludes
offshore work.

Accordingly we do not accept engagements for clients established in, or in respect of assets, operations
or work located in, the United States or Canada, and we do not accept offshore work, unless we have
first agreed this in writing and obtained cover extending to it. Any instruction purporting to fall
within these categories is not accepted until we confirm cover in writing.

PART C — THE DUETELLIGENCE PLATFORM

This Part applies only if you have been granted access to our software platform. Platform access is
provided under a separate written agreement; this Part sets out baseline terms.

C1. Access

Access is granted to named users for the term agreed. You are responsible for keeping credentials
confidential, for activity under your account, and for telling us promptly of any suspected
unauthorised access.

C2. Your content

You retain ownership of all material you upload. You grant us a limited licence to host, store and
process it solely to provide the platform to you, and to create backups.

We will not use your material for any purpose other than providing the service, will not disclose it to
third parties except as required by law or with your permission, and will not use it to train any
artificial intelligence or machine learning model.

C3. Our intellectual property

The platform, its software, interface, methodologies and documentation belong to us. You may not copy,
modify, reverse engineer, create derivative works from, or resell it, except to the extent the law
permits despite this clause.

C4. Suitability and classification

You are responsible for classifying material correctly before uploading it, for determining whether the
platform is an appropriate environment for that material, and for complying with your organisation's
security policy and any export control requirement. Do not upload material where doing so would
breach a security classification or handling requirement.

C5. The platform is a tool

Platform outputs support engineering judgement; they do not replace it. Responsibility for the accuracy,
adequacy and regulatory acceptability of any analysis, document or decision remains with you.

C6. Availability and support

We do not warrant uninterrupted or error-free operation. We may suspend access for maintenance or
security, giving notice where practicable. Any service level commitment applies only if expressly stated
in a written agreement.

C7. Export and termination

You may export your material at any time in supported formats. On termination you have 30 days to
export, after which we will securely delete it, subject to any retention required by law.

PART D — GENERAL

D1. Liability

Nothing in these terms limits or excludes liability for death or personal injury caused by negligence,
for fraud or fraudulent misrepresentation, or for anything else that cannot lawfully be limited.

Subject to that:

• Our total liability arising from an engagement is limited to the amount stated in the relevant engagement agreement or, where none is stated, to £1,000,000 in aggregate for that engagement.
• Our total liability arising from use of this website or from anything else not covered by a written agreement is limited to £25,000 in aggregate.
• Neither party is liable for loss of profit, revenue, contracts, goodwill or anticipated savings, or for indirect or consequential loss. **This exclusion does not apply to sums payable under the indemnity clause.**
• Your total liability to us is limited to £1,000,000 in aggregate, except in respect of sums payable under the indemnity clause, or breach of clause B8 (confidentiality), for which no cap applies.

The cap on our liability is set by reference to the professional indemnity cover described in clause B10.
We will not agree a higher cap without first obtaining insurance to match it.

These terms are between us and you. We each accept liability only to the other.

D2. Indemnity

You indemnify us against claims, losses and reasonable costs, including reasonable legal costs, arising
from your breach of these terms, your breach of applicable law, or material you provide to us infringing
a third party's rights.

An indemnity under this clause applies only to the extent the claim or loss was not caused by our own act
or default.

Where we seek to rely on an indemnity we will notify you promptly of the claim, take reasonable steps to
mitigate, give you the opportunity to take conduct of the defence at your cost, and not settle without
your consent, which is not to be unreasonably withheld.

D3. Force majeure

Neither party is liable for failure to perform caused by events beyond its reasonable control. Affected
obligations are suspended and resume when the event ends. Payment obligations are not suspended.

D4. Changes to these terms

We may change these terms. The version and date at the top show when they last changed. Changes apply
from the date of publication for website use. Changes do not affect a signed engagement agreement or
platform agreement.

D5. Notices

Notices to us: info@duetelligence.com, or by post to our registered office. Notices to you: the email
address you have given us, or your registered address.

Email notices are treated as received on the next business day, absent a delivery failure message.
Posted notices are treated as received two business days after posting within the UK.

D6. General

• Entire agreement. These terms, together with any engagement agreement, platform agreement, and our Privacy Policy, are the entire agreement between us.
• No waiver. Failing to enforce a provision does not waive it.
• Severability. If a provision is unenforceable, it is limited to the minimum extent necessary and the rest continues.
• Assignment. You may not assign these terms without our written consent. We may assign on notice to an affiliate or in connection with a sale of our business.
• Third parties. No person other than us and you may enforce these terms under the Contracts (Rights of Third Parties) Act 1999.
• No partnership. Nothing creates a partnership, joint venture, agency or employment relationship.
• Export control. You shall comply with all applicable export control and sanctions requirements, and shall not provide us with controlled material without telling us first.

D7. Governing law

These terms and any dispute arising from them are governed by the law of England and Wales, and the
courts of England and Wales have exclusive jurisdiction.

This choice applies to the fullest extent the law allows. We acknowledge that it cannot displace any
mandatory rule of the law of your own country that applies to you regardless of the law we have chosen,
including rules on employment or engagement status, and nothing in these terms purports to do so.

Before starting proceedings, we each agree to set out the dispute in writing and attempt to resolve it in
good faith for 30 days. This does not prevent either of us seeking urgent injunctive relief.

D8. Contact

LH Risk Strategy Advisory Ltd, trading as DueTelligence
Email: info@duetelligence.com · Website: duetelligence.com
Registered office and principal place of business: 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom
Company number: 16510387 · VAT number: GB 516 4979 58 · Registered in England and Wales