Website Terms of Use

1. Introduction

(a) These terms of use (Website Terms) apply when you use the public pages of each website we operate that links to these Website Terms and is listed in an Annex (each a Website). The public pages are the ones anyone can reach without signing in. The Annex lists them for each Website.

(b) These Website Terms do not govern the application behind the sign-in. Once you have signed in to a Service and accepted the documents it asks you to accept, what you may do there is governed by our SaaS Terms and Conditions and the Service Schedule for that Service, which each person who owns an organisation in the Service, or is about to create one, is asked to accept, and by our Acceptable Use Policy, which every person who signs in is asked to accept. Where these Website Terms and any of those documents differ, those documents prevail for your use of the Service (clause 2(c) of our SaaS Terms and Conditions).

(c) You agree to be bound by these Website Terms, which form a binding contractual agreement between you and us, ITSM Ltd, a company registered in England and Wales under company number 17339600, with registered office at 167-169 Great Portland Street, 5th Floor, London, W1W 5PF (“we”, “our” or “us”), trading on each Website under the brand the Annex names for it.

(d) If you do not agree to these Website Terms, you must refrain from using the Websites.

(e) We may change these Website Terms by publishing a new version on this page, showing the date it takes effect. People who use a Service — the owners and members of its organisations — are given at least 30 days' notice of a change, by email, in the same way as clause 19 of our SaaS Terms and Conditions. Otherwise, the version that applies to your use of a Website is the one in effect when you use it, and your continued use of a Website after a new version takes effect represents your agreement to it.

(f) Each Website has its own annex to these Website Terms (an Annex), lettered A, B and so on and printed after clause 13. Each forms part of these Website Terms, identifies one Website and its Service, and holds the contact details and the accessibility statement for it. “The Annex” means the Annex for the Website you are using, and a section such as section A2.3 is a section of it.

2. Access and use of the Websites

Each Website describes and gives access to one of our software-as-a-service products (a Service), which the Annex identifies. Where these Website Terms refer to a Service they mean the same thing as the “Service” defined in our SaaS Terms and Conditions and described in the Service Schedule for it. Our Privacy Policy and Cookie Policy use “Services” to cover each Website and its application together.

The public pages exist so that you can find out about a Service and what it costs, use any free tools and read any guides we publish there, ask us a question, join a waitlist before a Service opens or sign in once it has, read these legal pages, and get in touch. The Annex lists what each Website offers. You may use the public pages for those purposes, in accordance with these Website Terms and any applicable laws.

If you are responsible for an organisation's use of a Website or a Service, you must also ensure that your employees, volunteers, subcontractors and other agents who use the Websites comply with these Website Terms.

3. Your obligations

You must not:

• (a) copy, mirror, reproduce, translate, adapt, vary, modify, sell, decipher or decompile any part or aspect of a Website without our express consent;
• (b) use a Website for any purpose other than the purposes described in clause 2;
• (c) use, or attempt to use, a Website in a manner that is illegal or fraudulent, or that facilitates illegal or fraudulent activity;
• (d) use, or attempt to use, a Website in a manner that may interfere with, disrupt or create undue burden on the Website or the servers or networks that host it — which includes submitting any form the Annex names repeatedly or automatically; we limit how often those forms can be used, and getting round those limits is a breach of this paragraph;
• (e) scrape a Website, extract its content in bulk, or use any automated tool in a way that places an unreasonable load on it or circumvents any access control — this does not stop you using ordinary browser tools, assistive technology, form autofill, or the forms we provide;
• (f) act unlawfully or maliciously towards us, including by framing a Website or by linking to it in a way that misrepresents your relationship with us; or
• (g) attempt to breach the security of a Website, or otherwise interfere with its normal functions, including by:

• (i) gaining unauthorised access to any account or data reachable through the Website;
• (ii) scanning, probing or testing the Website for security vulnerabilities — except where you do so in good faith, without accessing or altering anyone else's data, without degrading the service for others, and where you report what you find to us promptly and privately in accordance with clause 10;
• (iii) overloading, flooding, mail-bombing, crashing, or submitting a virus to the Website;
• (iv) instigating or participating in a denial-of-service attack against the Website; or
• (v) using any form on a Website to cause us to send email to an address that is not yours, or that you are not authorised to use. Where a Service signs you in by a link sent to the address you type, its sign-in form is the main example. Doing this deliberately is a breach of these Website Terms.

4. Information on the Websites

While we make every effort to ensure that the information on the Websites is as up to date and accurate as possible, you acknowledge and agree that we do not (to the maximum extent permitted by law) guarantee that:

• (a) a Website will be free from errors or defects;
• (b) a Website will be accessible at all times;
• (c) messages sent through a Website will be delivered promptly, or delivered at all;
• (d) information published on a Website is complete or free from omission; or
• (e) any information provided through a Website is accurate or true.

We reserve the right to change information or functionality on a Website by updating it at any time, including product descriptions and other content we publish (see clause 6). That does not change the price or the contracted functionality of anything you have bought, whether a Subscription or a one-off purchase (as those terms are used in our SaaS Terms and Conditions): those change only as our SaaS Terms and Conditions provide.

5. Guidance on a Website, and what a Website is not

Nothing on a Website is legal or professional advice. Any checker, calculator or other guidance tool on a Website gives a guide based on the answers you give it. Its result is not a determination of your legal position, and it should be treated as a starting point rather than an answer to rely on.

Where the law places duties on a person, those duties remain theirs. Using a Website or a Service does not discharge them.

The Annex sets out what this means for each Website, including the statements that go with any guidance tool it offers.

6. Intellectual property

(a) We retain ownership of the Websites and the materials we publish on them (including text, graphics, logos, design, icons, images, pricing, guides, downloads and software) (Website Content), and we reserve all intellectual property rights owned or licensed by us that these Website Terms do not expressly grant you.

(b) Website Content does not include anything you or your organisation puts into a Service. That material is Client Data as defined in our SaaS Terms and Conditions, and clause 9 of our SaaS Terms and Conditions governs it, together with your organisation's rights in the documents a Service generates from it. Nothing in this clause prevents you from exporting, sharing or publishing your own organisation's records — including sending them to an insurer, a licensing officer, your trustees or committee, or a regulator that asks for them — or from adopting and publishing as your own a document a Service generates for your organisation, within the licence clause 9 of our SaaS Terms and Conditions gives it.

(c) You may make a temporary electronic copy of all or part of a Website for the sole purpose of viewing it. You must not otherwise reproduce, transmit, adapt, distribute, sell, modify or publish a Website or any Website Content without our prior written consent or as permitted by law, except that you may keep and print any result a Website lets you download or have emailed to you, and share it within your organisation and with those it answers to (such as its trustees or committee, its insurer or a licensing officer), and you may print the user guides we publish for your own use — in each case leaving in place any caveat or watermark they carry. The user guides are Website Content: they describe a Service as it stands, they are not part of any agreement and nobody accepts them, and where a guide and one of our legal documents differ, the legal document applies.

7. Links to other websites

(a) The Websites may contain links to other websites that are not our responsibility. We have no control over the content of linked websites and we are not responsible for it.

(b) Inclusion of a link on a Website does not imply our approval or endorsement of the linked website.

8. Security

We do not accept responsibility for loss or damage to computer systems, mobile phones or other electronic devices arising in connection with your use of a Website, except to the extent clause 12(d) applies. You should take your own precautions to ensure that the process you use to access a Website does not expose you to the risk of viruses, malicious computer code or other forms of interference.

9. Reporting misuse

If you become aware of misuse of a Website by any person, any errors in the material on a Website, or any difficulty in accessing or using a Website, please contact us immediately at support@itsm-ltd.com.

10. Reporting a security issue

If you believe you have found a security vulnerability in a Website or a Service, please tell us at support@itsm-ltd.com with enough detail for us to reproduce it, and give us a reasonable opportunity to fix it before you tell anyone else.

We will acknowledge your report and keep you informed, and we will not pursue you under clause 3(g) for research carried out in good faith within the limits set out there. We do not currently offer a bug bounty.

11. Privacy

Our Privacy Policy explains how we handle personal data collected through the Websites, including through the forms the Annex names, and our Cookie Policy explains the cookies we set: only essential cookies, so there is no consent banner. There is nothing to accept in either document, and both are published in the legal section of each Website.

12. Liability

(a) We make no warranties or representations about the Websites or their content beyond those these Website Terms expressly give.

(b) To the maximum extent permitted by law, we are not liable to you for loss of profit, loss of business, loss of anticipated savings, loss of goodwill, or any indirect or consequential loss, arising in connection with your use of a Website. Our total liability to you in connection with the Websites is limited to £100.

(c) The £100 in clause 12(b) is what we owe you personally as a visitor to the Websites. If you also use a Service as a User of it (as our Acceptable Use Policy uses that word), what we owe your organisation is governed by clause 13 of our SaaS Terms and Conditions, and what we owe you personally as a User is governed by clause 9 of our Acceptable Use Policy.

(d) Nothing in these Website Terms limits or excludes our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for anything else that cannot lawfully be limited or excluded. If you are a consumer, nothing in these Website Terms affects your statutory rights.

(e) You indemnify us against any loss or liability we suffer arising from your breach of these Website Terms or your unlawful use of a Website. You are not liable to indemnify us to the extent the loss arises from our own breach, negligence or wilful misconduct.

(f) To the extent that any applicable law restricts the extent to which liability can be excluded under these Website Terms — including, for the avoidance of doubt, sections 2, 3 and 11 of the Unfair Contract Terms Act 1977 relating to the requirement of reasonableness, Part 2 of the Consumer Rights Act 2015 (unfair terms) and section 65 of that Act, and their equivalents in any other jurisdiction — the exclusions in this clause are limited in accordance with those restrictions, and the remainder continues in full force and effect.

13. General

13.1 Governing law and jurisdiction

These Website Terms, and any dispute or claim (including non-contractual disputes or claims) arising out of or in connection with them or their subject matter or formation, are governed by and construed in accordance with the law of England and Wales. If you use the Websites in the course of a business, the courts of England and Wales have exclusive jurisdiction over any such dispute or claim. If you are a consumer, you may also bring or defend proceedings in the courts of the part of the United Kingdom in which you live, and nothing in this clause deprives you of the protection of mandatory provisions of the law of the place where you live.

13.2 Third party rights

These Website Terms do not give rise to any rights under the Contracts (Rights of Third Parties) Act 1999 to enforce any of their terms.

13.3 Waiver

No party may rely on the words or conduct of any other party as a waiver of any right unless the waiver is in writing and signed by the party granting it.

13.4 Severance

Any term of these Website Terms which is wholly or partially void or unenforceable is severed to the extent that it is void or unenforceable. The validity and enforceability of the remainder is not affected.

13.5 Joint and several liability

An obligation or liability assumed by, or a right conferred on, two or more persons binds or benefits them jointly and severally.

13.6 Entire agreement

These Website Terms, read together with the documents named in clauses 1(b) and 11, and including their Annex, embody the entire agreement between the parties in relation to their subject matter and supersede any prior negotiation, conduct, arrangement, understanding or agreement, express or implied, in relation to it. Nothing in this clause limits liability for fraud or fraudulent misrepresentation.

13.7 Interpretation

In these Website Terms: (a) (singular and plural) words in the singular include the plural and vice versa; (b) (gender) words indicating a gender include every other gender; (c) (defined terms) if a word or phrase is given a defined meaning, any other grammatical form of it has a corresponding meaning; (d) (person) a reference to “person” or “you” includes an individual, the estate of an individual, a corporation, an authority, an association, consortium or joint venture (whether incorporated or unincorporated), a partnership, a trust and any other entity; (e) (party) a reference to a party includes that party's executors, administrators, successors and permitted assigns; (f) (these Website Terms) a reference to a clause is to a clause of these Website Terms, and a reference to a section whose number begins with a letter, such as section A2.3, is to that section of the Annex; (g) (document) a reference to a document is to that document as varied, novated, ratified or replaced from time to time; (h) (headings) headings, and the bold words in brackets that label a paragraph, are for convenience only and do not affect interpretation; bold type anywhere else is emphasis, and the words in it have full effect; (i) (includes) the word “includes” and similar words in any form are not words of limitation; (j) (adverse interpretation) if you use a Website in the course of a business, no provision will be interpreted adversely to a party because that party prepared it; if you are a consumer, section 69 of the Consumer Rights Act 2015 applies instead; and (k) (currency) a reference to £ or “GBP” is to pounds sterling.

Annex A — Martyn's Law Evidence Kit website

This Annex forms part of these Website Terms (clause 1(f)). It covers one Website: this website, which carries the Martyn's Law Evidence Kit brand.

A1. This Website and the Service

This section identifies the Service this Website describes, the pages these Website Terms cover, and what the tier checker and the forms on this Website are, and are not.

A1.1 The Service and who provides it

This Website describes and gives access to the Martyn's Law Evidence Kit (the Service): a record-keeping tool for premises within scope of the Terrorism (Protection of Premises) Act 2025, which produces public-protection procedure packs for adoption by the responsible person and keeps the decisions, drills and reviews recorded against them.

ITSM Ltd provides the Service under our SaaS Terms and Conditions and its Service Schedule, which sets out its plans, prices, refunds and support. What anyone has bought is decided by those documents, not by the descriptions on this Website. What a User may do with the documents the Service generates is in section A3 of Annex A to the Acceptable Use Policy.

A1.2 The public pages

The public pages of this Website are:

• the home page, including the pricing and the larger-estate enquiry form;
• the free tier checker;
• the user guides;
• before sign-ups open, the waitlist, and once they have, the sign-in page; and
• the legal pages, including these Website Terms.

These Website Terms also cover three pages reached from links we email rather than from the Website itself: the sign-in confirmation page (/auth/confirm), which signs you in only when you press its button; the page that stops a reminder (/unsubscribe), which changes nothing until you press its button; and the invitation page (/invite/…), which asks you to sign in first. An invitation joins an organisation only for someone signed in as the address it was sent to, but anyone signed in who opens the link can see the organisation's name and that address, so treat an invitation link as private.

On this Website you can find out about the Service and what it costs; use the tier checker and, if you wish, download a PDF of the result, with an email repeating its headline if you tick the box; read the user guides; send a larger-estate enquiry; join the waitlist before sign-ups open, or sign in once they have; read the legal pages; and get in touch (section A2.2).

A1.3 The tier checker, and what we are not

The tier checker is free and needs no account. This Website calls it the free tier checker: “tier” there means the standard or enhanced tier under the Terrorism (Protection of Premises) Act 2025, not a Plan or anything else you can buy. Three things are free: the result on screen, a PDF of that result, and, when you download the PDF, an email repeating the result's headline.

The on-screen result is worked out in your browser and is not sent to us. A PDF of it needs an email address, which we keep with your answers, the result and your network address, as section A1 of Annex A to the Privacy Policy describes. We send you an email with the result's headline only if you tick the box asking for one; it does not attach the PDF or repeat the full result.

The result is a plain-English guide, not a legal determination. It applies published thresholds to the answers you give. It does not know the shape of your premises, how your capacity is counted, or anything a regulator might decide. The on-screen result and the PDF both say so. The PDF also carries on every page the watermark “Template for adoption by the responsible person — not certified advice.”, the same one every document the Service generates carries (section 1 of the Service Schedule), and that email says that the result is guidance, not legal advice. You may keep and share them as clause 6(c) allows, leaving those words in place.

Nothing on this Website is legal advice, and using the Service does not make any premises compliant with anything. The Act places duties on the responsible person for a premises. Those duties are theirs, they remain theirs, and no software can discharge them.

At the standard tier — where it is reasonable to expect 200 to 799 people to be present at the same time — the Act asks the responsible person to notify the Security Industry Authority (SIA) and to have public-protection procedures in place so far as reasonably practicable. Documenting those procedures, running drills and completing training are good practice — not required at standard tier. Places of worship, and early years, school and further-education premises, stay in the standard tier however many people may be present, although very large events held there may bring other duties. Premises in the enhanced tier (800 or more) should seek professional advice: the Service is not aimed at them.

We are not a regulator, a certifying body, a security consultancy or a firm of solicitors. We do not notify the SIA for you, and nothing we produce certifies anything. The tier checker's result, and the tier the Service shows against each premises, are a plain-English guide, not a legal determination. Section 1 of the Service Schedule says what this means for the Service itself.

A1.4 Forms, the waitlist and larger-estate enquiries

The forms clause 3(d) refers to are the tier checker's PDF request, the larger-estate enquiry form and the waitlist form. Each is limited per email address and per network address; section A1 of Annex A to the Privacy Policy gives the limits, and getting round them is a breach of clause 3(d). The on-screen tier check is not limited, and the sign-in form relies on the limits our authentication provider applies.

Three forms on this Website send email to an address typed into them: the sign-in form (a sign-in link), the waitlist form (an acknowledgement) and the tier checker's PDF request (an email with the result's headline, if you ask for one). Clause 3(g)(v) applies to each of them.

Joining the waitlist creates no account, reserves no price and places no order. We send one acknowledgement when you join and one email when sign-ups open, and we take you off the list if you reply and ask. Once sign-ups open, the waitlist page sends you to the sign-in page instead.

Sending a larger-estate enquiry makes no contract and places no order. An estate above the self-serve maximum shown on the pricing page is supplied only under a separate written order, as section 2(e) of the Service Schedule describes. We use the address you give to answer the enquiry. There is no automatic acknowledgement, and section A4 of Annex A to the Privacy Policy says how long we keep what you send.

Downloading a tier-check PDF, with or without the email repeating its headline, creates no account and places no order either.

A2. Contact and company details

This section says who you are dealing with, how to reach us, which request goes where, and how to complain.

A2.1 Who you are dealing with

The Martyn's Law Evidence Kit is a brand of ITSM Ltd. ITSM Ltd is the company you contract with and pay, and the one that invoices you, however you pay.

A2.2 How to reach us

Write to us at support@itsm-ltd.com. There is no telephone support line.

If your organisation uses the Service, ITSM Ltd's support portal is a second way to reach us. Section 5 of the Service Schedule describes both, and who has a portal account.

Replies to the emails the Service sends reach this inbox; section 5(h) of the Service Schedule says which emails others send for us, and how to reach us about them.

A2.3 What to write about, and where

A2.4 Data protection and complaints

Complaints. If you want to complain about anything we do, email us and say that is what you are doing. If our answer does not satisfy you, say so, and a director will look at it again.

Data protection. We are registered with the Information Commissioner's Office and have not appointed a data protection officer; section 16 of the Privacy Policy says who handles data protection questions. You may complain to the Information Commissioner at any time, and section 14 of the Privacy Policy says how. We would rather you told us first.

A3. Accessibility statement

This statement says what we have done to make this Website and the Service usable, what has not been tested, the barriers we already know about, and how to report one.

A3.1 Scope, target and where we are

This statement applies to the Martyn's Law Evidence Kit, operated by ITSM Ltd: both this Website's public pages and the application behind the sign-in. It also covers the content of the sign-in email, which we write, although our authentication provider delivers it.

It does not cover ITSM Ltd's support portal, which is a separate system, or Stripe's pages and the invoices and receipts Stripe sends (section A3.4). Whatever you cannot use, you can write to us instead (section A2.2).

We aim to meet WCAG 2.2 level AA, and the design decisions in section A3.2 were made with it in mind.

No independent accessibility audit has been carried out, and no testing with users of assistive technology has been done. We therefore do not claim that the Service meets that standard — only that we have built it with care and that we know of the problems listed in section A3.3.

A3.2 What we have done

• Most of the Service works without JavaScript. Almost every page is rendered on the server and uses ordinary forms. Three things need scripting: the tier checker, the drill photograph upload, and the “Try again” button on the page shown when something goes wrong. Everything else — including creating a premises, recording a decision, logging a drill and exporting evidence — does not.
• A skip link to the main content is the first thing in the tab order, and the main region takes focus when it is used, on every page except the three error pages. On the “page not found” and “something went wrong” pages the main region does not take focus, and the page shown when the whole application fails to load has no skip link.
• The language is declared as British English, so a screen reader pronounces it correctly.
• Form controls have visible labels tied to them. The one exception we know of is listed in section A3.3.
• Colour comes from a fixed set of tokens. Text and interface colours are chosen from one set of named tokens rather than screen by screen, and the stylesheet records a contrast ratio beside most text colours, the control border and the focus colour — though not beside every token: the accent colour used for links in the light theme, for example, has none. Our design rules allow a bordered control only one border colour, the one the stylesheet names as meeting 3:1 against its surface. An automated check on every pull request rejects seven named raw colour scales and a plain white background in the application's code; it does not measure contrast, and the recorded ratios are not tested automatically. The page shown when the whole application fails to load uses fixed colours of its own.
• Status is shown in words, not by colour alone.
• A visible focus ring marks the focused control, in a dedicated colour rather than the browser default, everywhere except the page shown when the whole application fails to load.
• Light and dark are both supported, following your device's own setting.
• Text reflows. Layouts use relative units, and running text is set to a reading measure of about 11 words a line.
• Figures line up. Dates and the figures in tables are set in tabular figures, so columns line up when they are read or magnified.
• Procedure packs come in two formats. A procedure pack can be downloaded as a Word document as well as a PDF. The evidence pack, the estate roll-up and the tier-check result are PDF only (section A3.3).

A3.3 Known problems

These are the barriers we already know about. They are listed so that you can decide whether the Service works for you before you pay for it, and so that an auditor is not telling us something we could have told them.

A3.4 Content that is not ours

When you buy, you pay on Stripe's pages: its Checkout, the billing portal reached from Settings, and the hosted invoice pages linked from Stripe's invoices and from our notices of unpaid Fees. The invoices and receipts Stripe emails are Stripe's too. They are outside our control and outside this statement, and we cannot fix a barrier you meet on them — but tell us anyway, and we will raise it with Stripe.

Two alternatives avoid some of those pages. An annual subscription can be bought by invoice against a purchase order and paid by bank transfer using the details on the invoice, without Stripe's Checkout or its hosted invoice page — although the invoice itself is one Stripe emails for us. And a subscription can be cancelled by email rather than in the billing portal, as clause 15.1(a) of our SaaS Terms and Conditions provides. There is no such alternative for a one-off procedure pack or a monthly subscription, which can be bought only by card through Stripe's Checkout, or for updating a card, which is done in the billing portal.

A3.5 Reporting a barrier, and other formats

If you find something you cannot use, please tell us at support@itsm-ltd.com. Say what you were trying to do, what happened, and what you were using — the browser, and any assistive technology. We will tell you how to work around it now, or when we expect to fix it.

If you need something the Service produces in another format — a procedure pack, an evidence pack or a tier-check result in large print, in plain text, or as an accessible document — ask, and we will produce it. There is no charge for that.

A3.6 Enforcement

In England, Scotland and Wales, the Equality and Human Rights Commission is responsible for enforcing the Equality Act 2010, and if you are not happy with how we respond to your complaint you can contact the Equality Advisory and Support Service. In Northern Ireland, where the Disability Discrimination Act 1995 applies instead, you can contact the Equality Commission for Northern Ireland if you are not happy with how we respond.

This is a commercial service rather than a public sector body's own website, so the Public Sector Bodies (Websites and Mobile Applications) (No. 2) Accessibility Regulations 2018 do not apply to it directly. They may well apply to you: a council or other public body procuring this Service may need to assess it against them, and we would rather you asked us than assumed.

A3.7 Preparation of this statement

This statement was first prepared on 09/09/2026 and last reviewed on 24/09/2026 by ITSM Ltd. It was written from a review of the Service's own code and design rules. It has not been reviewed by an external auditor.