Shawtawt Terms of Service

YOU WARRANT AND REPRESENT THAT YOU ARE ENTERING INTO THESE SHAWTAWT ONLINE TERMS (AGREEMENT) ON BEHALF OF A COMPANY, COMMUNITY OR OTHER LEGAL ENTITY, AND THAT YOU HAVE FULL AUTHORITY TO BIND SUCH ENTITY TO THIS AGREEMENT. SUBSEQUENT REFERENCES TO YOU, YOUR OR CUSTOMER MEAN SUCH ENTITY.

This Agreement is an agreement between you and Shawtawt. References to Shawtawt, us, we, or our mean Shawtawt.

The following terms shall apply to your use of Shawtawt. You acknowledge that the features and functionality of Shawtawt may vary, and may change over time.

Certain capitalized terms are defined in Section 12 (Definitions) and others are defined contextually in this Agreement.

  1. Use of Shawtawt
    1. Your Usage Rights. During the Term, you have a non-exclusive, non-transferable, non-sublicensable right to access and use Shawtawt in accordance with this Agreement. Use of Shawtawt is limited to the Users (including, where applicable, those of your Affiliates) for whom you enable accounts, and you are responsible for all Users and their compliance with this Agreement and their access to, and use of, Shawtawt. For clarity, Shawtawt is provided as a service to you, not to Users individually.
    2. Accounts. Your registration and admin account information must be accurate, complete and kept up-to-date. User accounts are for individual Users and cannot be shared or transferred. You must keep all login credentials confidential and agree to notify Shawtawt immediately if you discover any unauthorized use of your accounts or login credentials.
    3. Restrictions. You will not (and will not permit anyone else to): (a) use Shawtawt on behalf of any third party or rent, lease, provide access to or sublicense Shawtawt to any third party, except Users as permitted herein; (b) reverse engineer, decompile, disassemble, or otherwise seek to obtain the source code to Shawtawt, except to the extent expressly permitted by applicable law (and then only upon advance notice to Shawtawt); (c) copy, modify or create derivative works of Shawtawt; (d) remove, modify or obscure any proprietary or other notices contained within Shawtawt; or (e) publicly disseminate technical information regarding the performance of Shawtawt.
    4. Setup. During the setup of your Shawtawt instance, you will appoint one or more User(s) as the system administrator(s) of your Shawtawt community who is responsible for managing your Shawtawt instance. You must ensure you have at least one active system administrator for your Shawtawt instance at all times.
    5. Shawtawt API. During the Term, Shawtawt may make available one or more Shawtawt API(s) to you, in order for you to develop and use services and applications that complement your use of Shawtawt. Any use of the Shawtawt API(s) by you, your Users, or any third party on your behalf shall be governed by the applicable provisions of the Shawtawt Platform Terms that will become available as amended by Shawtawt from time to time.
    6. Support. We will provide Shawtawt support to you via the support function in the Shawtawt web application (Direct Support Channel). You may submit a support request to resolve a question, or report an issue, concerning Shawtawt, by raising a ticket through the Direct Support Channel (Support Ticket). We will provide an initial response to each Support Ticket within 48 hours from the time you send your support request.
  2. Your Data and Obligations
    1. Your Data. Under this Agreement:
      1. you retain all right, title and interest (including intellectual property rights) in and to Your Data;
      2. during the Term, you grant Shawtawt a non-exclusive, worldwide, royalty-free, fully-paid right to use Your Data solely to provide Shawtawt (and related support) to you, pursuant to this Agreement; and
      3. you acknowledge that Shawtawt is the data processor and that you are the data controller of Your Data, and by entering into this Agreement you instruct Shawawt to process Your Data on your behalf, only for the purposes specified in this Agreement and in accordance with this Agreement (including the Data Processing Addendum).
    2. Your Obligations. You agree (a) that you are solely responsible for the accuracy and content of Your Data; (b) to obtain all necessary rights and consents required by Laws from your Users and any applicable third party to allow the collection and use of Your Data as contemplated in this Agreement; and (c) that your use of Shawtawt, including Your Data and its use hereunder, will not violate any Laws or third party rights, including intellectual property, privacy or publicity rights. If any of Your Data is submitted or used in violation of this Section 2, you agree to promptly remove it from Shawtawt. You are solely responsible for any decision to share Your Data among Users or with any third parties, and Shawtawt is not responsible for use, access, alteration, distribution or deletion of Your Data by those to whom you or your Users make it available.
    3. Prohibited Data. You agree not to submit to Shawtawt any information or data that is subject to safeguarding and/or limitations on distribution pursuant to applicable laws and/or regulation (Prohibited Information). With regard to health information, you acknowledge that Shawtawt is not a Business Associate or subcontractor (as those terms are defined in the Health Insurance and Accountability Act (HIPAA)) and that Shawtawt is not HIPAA compliant. Shawtawt will have no liability under this Agreement for Prohibited Information, notwithstanding anything to the contrary herein.
    4. Indemnification. You will defend, indemnify and hold harmless Shawtawt (and its Affiliates and their respective directors, officers, employees, agents, and representatives) from and against all claims (from third parties and/or Users), costs, damages, liabilities and expenses (including reasonable attorneys fees) arising out of or in connection with your breach or alleged breach of this Section 2 or otherwise related to Your Data, Your Policies or use of Shawtawt in violation of this Agreement. Shawtawt may participate in the defence and settlement of any such claim with its own counsel and at its own expense. You shall not settle any claim without Shawtawts prior written consent if the settlement requires Shawtawt to take any action, refrain from taking any action, or admit any liability.
    5. Backups. Shawtawt does not provide an archiving service, and you are solely responsible for creating backups of Your Data.
    6. Aggregate Data. Under this Agreement, we may also generate aggregated statistical and analytical data derived from your use of Shawtawt (Aggregate Data), but such Aggregate Data will not include Your Data or any personal data.
  3. Data Security
    1. Security of Your Data. We will use appropriate technical, organizational and security measures designed to protect Your Data in our possession against unauthorized access, alteration, disclosure or destruction, as further described in the Data Security Addendum.
    2. Legal Disclosures and Third Party Requests. You are generally responsible for responding to third party requests regarding Your Data, such as from regulators, Users, or a law enforcement agency (Third Party Requests), but you understand that, in response to a Third Party Request, Shawtawt may disclose Your Data to comply with its legal requirements. In such circumstances, we will, to the extent allowed by law and by the terms of the Third Party Request, use reasonable efforts to (a) notify you of our receipt of a Third Party Request and ask the third party to contact you and (b) comply with your reasonable requests regarding your efforts to oppose a Third Party Request at your expense. You will first seek to obtain the information required to respond to the Third Party Request on your own, and will contact us only if you cannot reasonably obtain such information.
  4. Payment
    1. Fees. You agree to pay Shawtawt the standard rates for your use of Shawtawt, subject to any free trial period as described in Section 4.e (Free Trial), unless otherwise agreed in a signed written document. All fees under this Agreement will be paid in USD, unless otherwise specified in-product, or unless otherwise agreed in a signed written document. All fees will be settled in full in accordance with your payment method pursuant to Section 4.b. Any late payments shall be subject to a service charge equal to 1.5% per month of the amount due or the maximum amount allowed by law, whichever is less.
    2. Payment Method. When you enter into this Agreement you agree to settle fees under one of two categories of payment: (i) payment card customer (whether paying directly, or through a third party payment platform), or (ii) invoiced customer, as determined in Shawtawts discretion. Payment card customers may (in Shawtawts sole discretion) become invoiced customers (and vice versa) based on factors such as the number of Users and creditworthiness, but Shawtawt retains the right to re-classify you as a payment card customer or an invoiced customer at any time.
      1. Payment Card Customers. Payment card customers will have their designated payment card charged for usage of Shawtawt.
      2. Invoiced Customers. Invoiced customers will be extended a credit line by Shawtawt and will be issued invoices on a monthly basis, unless otherwise agreed in a signed written document. If categorised as an invoiced customer, you will pay all fees due under this Agreement, in full and cleared funds as directed by us, within 30 days of the invoice date.
    3. Taxes. All fees are stated exclusive of any applicable taxes, and you are required to pay and bear any sales, use, GST, value-added, withholding, or similar taxes or duties, whether domestic or foreign, related to the transactions under this Agreement, other than taxes based on the income of Shawtawt. You will pay all amounts due under this Agreement in full without any set-off, counterclaim, deduction or withholding. In the event any payment that you make under this Agreement is subject to a deduction or withholding, you shall be responsible for making the appropriate payment to the appropriate taxing authorities and financially responsible for interest, penalties, fines, or similar liabilities resulting from your failure to timely remit such taxes to the proper governmental authority or agency. You acknowledge and accept that you are accessing and using Shawtawt at the billing address listed in this Agreement or otherwise provided to us in writing You agree to indemnify us for any underpayment or non-payment of any tax, penalty and interest.
    4. Suspension. Without affecting our other rights under this Agreement, if you do not pay any fees by the due date, then we may suspend all or part of the Shawtawt services (including access to paid for services) until payment has been made in full.
    5. Free Trial. Shawtatw may in its sole discretion offer you a free trial of Shawtawt for a fixed period, the duration of which shall be determined at Shawtawts sole discretion and communicated to you via the admin panel of your Shawtawt instance. At the end of such free trial Section 4.a (Fees) will apply.
  5. Confidentiality
    1. Obligations. Each party agrees that all business, technical and financial information it obtains (as Receiving Party) from the disclosing party in connection with this Agreement (Disclosing Party) constitutes the confidential property of the Disclosing Party (Confidential Information), provided that it is identified as either confidential or proprietary at the time of disclosure or should be reasonably known by the Receiving Party to be confidential or proprietary due to the nature of the information disclosed and the circumstances surrounding the disclosure. Except as expressly authorized herein, the Receiving Party will (1) hold in confidence and not disclose any Confidential Information to third parties and (2) not use Confidential Information for any purpose other than fulfilling its obligations and exercising its rights under this Agreement. The Receiving Party may disclose Confidential Information to its employees, agents, contractors and other representatives having a legitimate need to know (including, for Shawtawt, those of its Affiliates and the subcontractors referenced in Section 11.j), provided that they are bound to confidentiality obligations no less protective of the Disclosing Party's Confidential Information as provided in this Section 5 and that the Receiving Party remains responsible for compliance by any such person with the terms of this Section 5.
    2. Exceptions. The Receiving Partys confidentiality obligations will not apply to information that the Receiving Party can document: (a) was rightfully in its possession or known to it prior to receipt of the Confidential Information; (b) is or has become public knowledge through no fault of the Receiving Party; (c) is rightfully obtained by the Receiving Party from a third party without breach of any confidentiality obligation; or (d) is independently developed by employees of the Receiving Party who had no access to such information. The Receiving Party may make disclosures to the extent required by Laws or court order, provided that (unless prohibited by Laws) the Receiving Party notifies the Disclosing Party in advance and cooperates in any effort to obtain confidential treatment.
    3. Injunctive Relief. The Receiving Party acknowledges that use of or disclosure of Confidential Information in violation of this Section 5 could cause substantial harm for which damages alone would not be a sufficient remedy, and therefore that upon any such threatened or actual use or disclosure by the Receiving Party the Disclosing Party will be entitled to seek appropriate equitable relief in addition to whatever other remedies it might have at law.
  6. Intellectual Property Rights
    1. Shawtawt Ownership. This is an agreement for access to and use of Shawtawt, and no ownership rights are conveyed to Customer. Shawtawt and its licensors retain all right, title and interest (including all intellectual property rights) in and to Shawtawt, Aggregate Data, any and all related and underlying technology, and any derivative works, modifications or improvements to any of the foregoing created by or on behalf of Shawtawt, including based on your Feedback (defined below). No rights are granted to you except as expressly set forth in this Agreement.
    2. Feedback. If you submit comments, questions, suggestions, use cases or other feedback relating to your use of Shawtawt or its API or our other products or services (Feedback), we may freely use or exploit such Feedback in connection with any of our products or services or those of our Affiliates, without obligation or compensation to you.
  7. Disclaimer
    SHAWTAWT EXPRESSLY DISCLAIMS ANY AND ALL WARRANTIES AND REPRESENTATIONS OF ANY KIND, EXPRESS, IMPLIED OR STATUTORY, INCLUDING ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE OR NON-INFRINGEMENT. WE DO NOT GUARANTEE THAT SHAWTAWT WILL BE UNINTERRUPTED OR ERROR-FREE. WE MAY PERMIT THIRD PARTIES TO DEVELOP AND MAKE AVAILABLE SERVICES AND APPLICATIONS THAT COMPLEMENT YOUR USE OF SHAWTAWT OR WE MAY PERMIT SHAWTAWT TO OTHERWISE INTEGRATE WITH OTHER SERVICES AND APPLICATIONS. SHAWTAWT IS NOT RESPONSIBLE FOR ANY SERVICES OR APPLICATIONS THAT YOU CHOOSE TO USE IN CONNECTION WITH SHAWTAWT. YOUR USE OF SUCH SERVICES OR APPLICATIONS IS SUBJECT TO SEPARATE TERMS AND POLICIES AND YOU ACKNOWLEDGE AND AGREE THAT ANY USE IS AT YOUR OWN RISK.
  8. Limitations of Liability
    1. EXCEPT FOR EXCLUDED CLAIMS (DEFINED BELOW):
      1. NEITHER PARTY WILL BE LIABLE FOR ANY LOSS OF USE, LOST OR INACCURATE DATA, INTERRUPTION OF BUSINESS, COSTS OF DELAY OR ANY INDIRECT, OR CONSEQUENTIAL DAMAGES OF ANY KIND (INCLUDING LOST PROFITS), REGARDLESS OF THE FORM OF ACTION, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR OTHERWISE, EVEN IF INFORMED OF THE POSSIBILITY OF SUCH DAMAGES IN ADVANCE; AND
      2. NEITHER PARTY'S ENTIRE LIABILITY TO THE OTHER WILL EXCEED THE AMOUNT ACTUALLY PAID OR PAYABLE BY CUSTOMER TO SHAWTAWT DURING THE PRIOR TWELVE (12) MONTHS UNDER THIS AGREEMENT OR, IF NO FEES ARE PAID OR PAYABLE DURING SUCH PERIOD, FIVE THOUSAND DOLLARS ($5,000).
    2. For the purposes of this Section 8, Excluded Claims means: (a) Customer's liability arising under Section 2 (Your Data and Your Obligations); and (b) a party's breach of its obligations in Section 5 (Confidentiality) but excluding claims relating to Your Data.
    3. The limitations in this Section 8 will survive and apply even if any limited remedy specified in this Agreement is found to have failed of its essential purpose, and the parties agree that neither party is limiting or excluding their liability for anything that cant be limited or excluded by law. You acknowledge and agree that our provision of Shawtawt is based upon the assumption that our liability is limited as provided in this Agreement.
  9. Term and Termination
    1. Term. This Agreement will commence on the date on which you first access your Shawtawt instance and continue until terminated as permitted herein (the Term).
    2. Termination for Convenience. Without prejudice to your termination rights under paragraph 2.d of the Data Processing Addendum, you may terminate this Agreement at any time, for no reason or any reason, upon thirty (30) days advance notice to Shawtawt by your admin electing to delete your Shawtawt account within the product. Shawtawt may also terminate this Agreement at any time, for no reason or any reason, upon thirty (30) days advance notice to you.
    3. Shawtawt Termination and Suspension. Shawtawt reserves the right to terminate this Agreement with reasonable notice to you or immediately suspend your access to Shawtawt if you breach this Agreement or if we deem such action necessary to prevent harm to the security, stability, availability or integrity of Shawtawt.
    4. Deletion of Your Data. Shawtawt may delete Your Data promptly after any termination of this Agreement, but you understand that deleted content may persist in backup copies for a reasonable period of time whilst deletion is carried out. As set forth in Section 2.e, you are solely responsible for creating any back-ups of Your Data for your own purposes.
    5. Effect of Termination. Upon any termination of this Agreement: (a) you and your Users must immediately cease using Shawtawt; (b) at the Disclosing Partys request, and subject to 9.d, the Receiving Party will promptly return or delete any of the Disclosing Partys Confidential Information in its possession; (c) you will promptly pay Shawtawt any unpaid fees incurred prior to termination; (d) if Shawtawt terminates this Agreement without cause in accordance with Section 9.b, Shawtawt will refund to you a pro rata amount of any pre-paid fees (where applicable); and (e) the following Sections will survive: 1.c (Restrictions), 2 (Use of Your Data and Your Obligations) (other than Shawtawts license to Your Data in Section 2.a), 3.b (Legal Disclosures and Third Party Requests), 4 (Payment) through 12 (Definitions). Except as may be specified in this Agreement, either partys exercise of any remedy, including termination, is without prejudice to any other remedies it may have under this Agreement, by law or otherwise.
  10. Ads
    1. Shawtawt and Ads. We will not show third-party advertising to your Users on Shawtawt and we will not use Your Data to provide or target advertising to your Users. Shawtawt may, however, make in-product announcements or inform system administrators about features, integrations or functionality related to Shawtawt.
  11. General
    1. Changes. Shawtawt may change terms of this Agreement and policies referenced in or incorporated by this Agreement at any time, including but not limited to the Data Processing Addendum and Data Transfer Addendum (to comply with applicable data protection law), Data Security Addendum, and Acceptable Use Policy, by providing you with notice by email, through the service or by other reasonable means (Change). By continuing to use Shawtawt fourteen (14) days after our notice, you consent to such Change.
    2. Governing Law. This Agreement and your and your Users use of Shawtawt as well as any claim that might arise between you and us, are governed by, and must be construed in accordance with, the laws of the United Arab Emirates, as applicable, without giving effect to their principles of conflicts of law. Any claim or cause of action arising out of or relating to this Agreement or Shawtawt must be commenced exclusively in the United Arab Emirates, and each party hereby consents to the personal jurisdiction of such courts.
    3. Entire Agreement. This Agreement (which includes the Acceptable Use Policy) is the entire agreement between the parties regarding your access to and use of Shawtawt and supersedes any prior representations or agreements relating to Shawtawt. Headings are for convenience only, and terms such as including are to be construed without limitation. This Agreement is written in English (US), which will control over conflicts in any translated version.
    4. Waiver and Severability. Failure to enforce a provision will not be deemed a waiver; waivers must be in writing signed by the party claimed to have waived. Any terms or conditions in any Customer purchase order or business form will not modify this Agreement and are hereby expressly rejected, and any such document will be for administrative purposes only. If any provision of this Agreement is adjudged by a court of competent jurisdiction to be unenforceable, invalid or otherwise contrary to law, such provision will be interpreted so as to best accomplish its intended objectives and the remaining provisions of this Agreement will remain in full force and effect.
    5. Publicity. Any press release or marketing campaign about the parties relationship requires the prior written approval of both parties. Notwithstanding the foregoing: (a) within your own company, you may publicize or promote use of Shawtawt during the Term (e.g., to encourage User adoption), subject to Shawtawt brand usage guidelines provided from time to time, and (b) Shawtawt may reference your name and status as a Shawtawt customer.
    6. Assignment. Neither party may assign this Agreement or its rights or obligations under this Agreement without the prior written consent of the other party, except that Shawtawt may assign this Agreement without consent to any of its Affiliates or in connection with a merger, reorganization, acquisition, or other transfer of all or substantially all of its assets or voting securities. Subject to the foregoing, this Agreement will bind and inure to the benefit of each partys permitted successors and assigns. Non-permitted assignments are void and will create no obligations on Shawtawt.
    7. Independent Contractor. The parties are independent contractors. No agency, partnership, joint venture, or employment is created as a result of this Agreement and neither party has authority to bind the other.
    8. No Third Party Beneficiaries. This Agreement benefits Shawtawt and Customer and there are no intended third party beneficiaries, including any Users.
    9. Notices. Where you are terminating this Agreement pursuant to Section 9.b you must notify us by your system administrator electing to delete your Shawtawt account within the product. Any other notice under this Agreement must be in writing, which must be sent to Shawtawt at the address announced on the web site. Shawtawt may send notices to the email address on Customers account. Shawtawt may also provide operational notices regarding Shawtawt or other business-related notices through messages to Users within Shawtawt or conspicuous posting within Shawtawt.
    10. Subcontractors. Shawtawt may use subcontractors and permit them to exercise Shawtawts rights under this Agreement, but Shawtawt remains responsible for compliance of any such subcontractor with this Agreement.
    11. Force Majeure. Neither party will be liable to the other for any delay or failure to perform any obligation under this Agreement (except for a failure to pay fees) if the delay or failure is due to unforeseen events that occur after the signing of this Agreement and that are beyond the reasonable control of such party, such as a strike, blockade, war, act of terrorism, riot, natural disaster, failure or diminishment of power or telecommunications or data networks or services, or refusal of a license or authorisation by a government agency or entity.
    12. Third Party Websites. Shawtawt may contain links to third-party websites. This does not imply our endorsement of any website and we are not responsible for the actions, content, information, or data of third-party websites or actions or any link contained in them, or any changes or updates to them. Third-party websites may provide their own terms and conditions of use and privacy policies that apply to you and your Users and your use of such third-party websites is not governed by this Agreement.
    13. Export Controls and Trade Sanctions. In use of Shawtawt, Customer agrees to comply with all export and import laws and regulations of applicable jurisdictions, as well as any applicable sanctions or trade restrictions.
    14. Conditions on Governmental Entity Use. If you are a Governmental Entity, you represent that: (i) no applicable law, policy, or principle restricts you from agreeing and performing, or accepting performance of, any term or condition of this Agreement, (ii) no applicable law, policy, or principle renders any term or condition of this Agreement unenforceable against you or any applicable Governmental Entity, (iii) you are authorized to, and have the legal capacity under applicable laws, policies, and principles to represent and bind any applicable Governmental Entity to this Agreement; and (iv) you enter into this Agreement based upon an impartial decision concerning the value of Shawtawt to you and your Users and no improper conduct or conflict of interest has influenced your decision to enter into this Agreement. Do not enter into this Agreement if you cannot make the representations in this Section 11.n. If a Governmental Entity enters into this Agreement in violation of this Section 11.n, Shawtawt may elect to terminate this Agreement.
    15. Resellers. You may choose to access and use Shawtawt through a Reseller. In the event you access and use Shawtawt through a Reseller, you are solely responsible for: (i) any related rights and obligations in your applicable agreement with your Reseller, and (ii) as between you and Shawtawt, any access by Reseller to your Shawtawt account, Your Data, and any User accounts that you may create for your Reseller. In addition, in the event you access and use Shawtawt through a Reseller, you agree that the Reseller Customer Terms shall take precedence over any conflicting terms in this Agreement.
  12. Definitions
    In this Agreement, unless otherwise stated:

"Acceptable Use Policy" means the rules for use of Shawtawt found at www.Shawtawt.com/legal as may be modified from time to time.

"Affiliate" means an entity that directly or indirectly owns or controls, is owned or is controlled by or is under common ownership or control with a party, where control means the power to direct the management or affairs of an entity, and ownership means beneficial ownership of 50% (or, if the applicable jurisdiction does not allow majority ownership, the maximum amount permitted under such law) or more of the entitys voting equity securities or equivalent voting interests. For purposes of this definition, a Governmental Entity is not an affiliate of another Governmental Entity unless it wholly controls such other Governmental Entity.

Data Processing Addendum means the data processing addendum attached to, and forming part of, this Agreement.

Data Security Addendum means the data security addendum attached to, and forming part of, this Agreement.

"Governmental Entity" means any country or jurisdiction in the world, including without limitation any state, local, municipal, regional, or other unit or political subdivision of government, any governmental organization, instrumentality, enterprise, or other entity established, owned or controlled by such a government, and any representative or agent of any of the foregoing.

"Laws" means all applicable local, state, federal and international laws, regulations and conventions, including, without limitation, those related to data privacy and data transfer, international communications, the exportation of technical or personal data, and public procurement.

"Reseller" means a third party partner that has a valid agreement with Shawtawt authorising them to resell and facilitate access to Shawtawt.

"Reseller Customer Terms" means the terms found at https://www.Shawtawt.com/legal/, as may be updated from time to time, and forming part of this Agreement, and being the additional terms between the parties which are applicable to you, if you access and use Shawtawt through a Reseller.

"Users" means any of your or your Affiliates employees, contractors, community members or other individuals that you permit to access Shawtawt.

"Shawtawt" means the Shawtawt service that we make available to you under this Agreement, and any subsequent versions thereof, including any websites, apps, online services, tools, and content that we may provide to you under this Agreement, as may be modified from time to time.

"Your Data" means (a) any contact information or network or account registration data that you or your Users submit to Shawtawt; (b) any content or data that you or your Users publish, post, share, import or provide on Shawtawt; (c) information we collect when you or your Users contact or engage us for support regarding Shawtawt, including information about hardware, software, and other details gathered related to the support incident; and (d) any usage or functional information (e.g., IP addresses, browser and operating system types, and device identifiers) regarding how Users interact with Shawtawt.

"Your Policies" means any of your applicable employee, community member, systems, privacy, HR, complaint or other policies.

Data Processing Addendum

  1. Definitions
    Within this Data Processing Addendum, GDPR means the General Data Protection Regulation (Regulation (EU) 2016/679), and Controller, Data Processor, Data Subject, Personal Data, Personal Data Breach and Processing shall have the same meanings as are defined in the GDPR. Processed and Process shall be construed in accordance with the definition of Processing. References to GDPR and its provisions include the GDPR as amended and incorporated into UK law. All other defined terms herein shall have the same meanings as are defined elsewhere in this Agreement.
  2. Data Processing
    1. In conducting its activities as Processor under this Agreement in relation to any Personal Data within Your Data (Your Personal Data), Shawtawt confirms that:
      1. the duration, subject matter, nature and purpose of the Processing shall be as specified in the Agreement;
      2. the types of Personal Data Processed shall include those specified in the definition of Your Data;
      3. the categories of Data Subjects include your representatives, Users and any other individuals identified or identifiable by Your Personal Data; and
      4. your obligations and rights as Data Controller in relation to Your Personal Data are as set out in this Agreement.
    2. To the extent that Shawtawt Processes Your Personal Data under or in connection with the Agreement, Shawtawt shall:
      1. only Process Your Personal Data in accordance with your instructions as set out under this Agreement, including in respect of the transfer of Your Personal Data, subject to any exceptions permitted by Article 28(3)(a) of the GDPR;
      2. ensure that those of its employees authorised to Process Your Personal Data under this Agreement have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality in relation to Your Personal Data;
      3. implement the technical and organisational measures set out in the Data Security Addendum;
      4. respect the conditions referred to below in Sections 2.c and 2.d of this Data Processing Addendum when appointing sub-Processors;
      5. assist you by appropriate technical and organisational measures, insofar as this is possible through Shawtawt, to enable you to fulfil your obligations to respond to requests for the exercise of rights by a Data Subject under Chapter III of the GDPR;
      6. assist you in ensuring compliance with your obligations pursuant to Articles 32 to 36 GDPR taking into account the nature of the Processing and the information which is available to Shawtawt;
      7. on termination of the Agreement, delete the Personal Data pursuant to the Agreement, unless law requires Personal Data to be retained;
      8. make available to you the information described in this Agreement and via Shawtawt in satisfaction of Shawtawts obligation to make available all information that is necessary to demonstrate compliance with the obligations of hawtawt under Article 28 GDPR; and
    3. You authorise Shawtawt to subcontract its data Processing obligations under this Agreement to Shawtawts Affiliates, and to other third parties, a list of which Shawtawt will provide to you upon your written request. Shawtawt shall do so only by way of a written agreement with such sub-Processor which imposes the same data protection obligations on the sub-Processor as are imposed on Shawtawt under this Agreement. Where that sub-Processor fails to fulfil such obligations, Shawtawt shall remain fully liable to you for the performance of that sub-Processor's data protection obligations.
    4. Where Shawtawt engages an additional or replacement sub-Processor(s), Shawtawt shall inform you of such additional or replacement sub-Processor(s) no later than fourteen (14) days in advance of the appointment of such additional or replacement sub-Processor(s). You may object to the engagement of such additional or replacement sub-Processor(s) within fourteen (14) days of being so informed by Shawtawt by terminating the Agreement immediately on written notice to Shawtawt.
    5. Shawtawt shall notify you without undue delay upon becoming aware of a Personal Data Breach relating to Your Personal Data. Such notice shall include, at the time of notification or as soon as possible after notification, relevant details of the Personal Data Breach where possible, including the number of your records affected, the category and approximate number of affected Users, anticipated consequences of the breach and any actual or proposed remedies, where appropriate, for mitigating the possible adverse effects of the breach.







Data Security Addendum

  1. Background and Purpose
    This document describes the minimum security requirements applicable to     Shawtawts provision of Shawtawt to you.
  2. Information Security Management System
    Shawtawt may maintain an Information Security Management System (ISMS) designed to implement industry-standard information security practices applicable to its provision of Shawtawt. Shawtawts ISMS is designed to protect against unauthorized access, disclosure, use, loss or alteration of Your Data.
  3. Risk Management Process
    Security of information and information processing facilities, including IT infrastructure and physical facilities, shall be based upon risk assessment. Risk assessment of Shawtawt will be done on a regular basis.
  4. Organization of Information Security
    Shawawt may have designated Security personnel with overall responsibility for security in the organization. Shawtawt may have designated personnel responsible for oversight of security of your Shawtawt account.
  5. Physical and Environmental Security
    Shawtawts security measures may include controls designed to provide reasonable assurance that access to physical processing facilities is limited to authorized persons and that environmental controls are established to detect, prevent and control destruction due to environmental hazard. The controls include:

The controls may include:

    • Logging and auditing of all physical access to the data processing facility by employees and contractors;
    • Camera surveillance systems at critical entry points to the data processing facility;
    • Systems that monitor and control the temperature and humidity for the computer equipment; and
    • Power supply and backup generators.

Shawtawt shall implement industry-standard procedures for secured deletion and disposal of data on electronic media, subject to the Agreement.

  1. Segregation
    Shawtawt will establish technical mechanisms designed to ensure that Your Data is logically segregated from other customers data and that Your Data is only available to authorized users.
  2. Personnel
    1. Training
      Shawtawt shall ensure that all employees with access to Your Data undergo security training.
    2. Screening and Background Checks
      Shawtawt Shall:
      • Have a process for verifying the identity of the personnel working with your account of Shawtawt.
      • Have a process for performing background checks on personnel working with your account of Shawtawt in accordance with Shawtawts standards.

Shawtawt shall provide personal ID cards with picture and written name to all personnel working with your account of Shawtawt. ID cards shall be required for entry to all Shawtawt facilities.

    1. Personnel Security Breach
      Shawtawt will establish sanctions for unauthorized or impermissible access to Your Data by Shawtawts personnel, including punishments up to and including termination.
  1. Security Testing
    Shawtawt may perform regular security and vulnerability testing to assess whether key controls are implemented properly and are effective.
  2. Access Control
    1. User Password Management
      Shawtawt may have an established process for User Password Management, designed to ensure passwords are personal and inaccessible for unauthorized persons, including at minimum:
      • Password provisioning, including verifying the identity of the user prior to a new, replacement or temporary password.
      • Encrypting all passwords when stored in computer systems or in transit over the network.
      • Altering all default passwords from vendors.
      • Strong passwords relative to their intended use.
      • User awareness.
    2. User Access Management
      Shawtawt may implement a process for changing and / or revoking access rights and user IDs, without undue delay. Shawtawt may have procedures for reporting and revoking compromised access credentials (passwords, tokens etc.) 24/7. Shawtawt may implement appropriate security logs including userid and timestamp..

The following minimum events shall be logged:

      • Authorization Changes;
      • Failed and successful authentication and access attempts; and
      • Read and write operations.
  1. Communications Security
    1. Network Security
      Shawtawt may employ technology that is consistent with industry standards for network segregation.

Remote network access may require encrypted communication by use of secured protocols, and use of multi-factor authentication.

    1. Protection of Data in Transit
      Shawtawt may enforce use of appropriate protocols designed to protect the confidentiality of data in transit over public networks.
  1. Operational Security
    Shawtawt may institute and maintain a vulnerability management program for Shawtawt that includes definition of roles and responsibilities, dedicated ownership of vulnerability monitoring, vulnerability risk assessment and patch deployment.
  2. Security Incident Management
    Shawtawt may establish and maintain a security incident response plan for monitoring, detecting and handling possible security incidents affecting your account of Shawtawt. The security incident response plan at least shall include definition of roles and responsibility, communication and post mortem reviews, including root cause analysis and remediation plans.

Shawtawt may monitor any security breaches and malicious activity. The monitoring process and detection techniques may be designed to enable detection of security incidents affecting your account of Shawtawt according to relevant threats and ongoing threat intelligence.

  1. Business Continuity
    Shawtawt may maintain a business continuity plan for responding to emergency or other critical situations that could damage your account of Shawtawt. Shawtawt may formally review its business continuity plan at least once a year.

Last updated: 14 December 2022