Terms of Sale

1. Parties

These Terms of Sale are between:

Seller

RiskSignal, operated by G.O.O, Ireland.
Email: support@risksignal.co

Buyer

The individual or business completing a purchase at risksignal.co.

By completing a purchase, the Buyer enters into a contract with the Seller on the terms set out below.

2. The Service

RiskSignal provides a GDPR Risk Snapshot: a structured written assessment of how personal data handling currently operates in the Buyer's business, generated on completion of an online questionnaire.

The snapshot is generated automatically based on the responses provided. It describes how data handling appears to operate at the time of completion. It is not a compliance determination, a legal assessment, or a regulatory certification.

The service is intended for agencies, consultancies, and freelancers based in Ireland or the United Kingdom that handle personal data on behalf of clients.

3. Price and Payment

3.1 Pricing

The current price for a single GDPR Risk Snapshot is:

• • Ireland (EU GDPR): €39.00 per snapshot
• • United Kingdom (UK GDPR): £35.00 per snapshot

Prices are inclusive of any applicable taxes. No subscription or recurring charge applies. Each snapshot is a single purchase.

3.2 Payment processing

Payment is processed by Stripe, a third-party payment provider. The Seller does not receive or store full payment card details. By completing payment, the Buyer agrees to Stripe's terms of service and privacy policy in addition to these Terms of Sale.

A transaction confirmation will be issued on successful payment. The snapshot is delivered on completion of payment and generation.

3.3 Failed or incomplete payments

If payment fails or is not completed, no snapshot will be generated and no charge will be applied. If a charge appears without a corresponding snapshot being delivered, the Buyer should contact support@risksignal.co immediately.

4. Delivery

The GDPR Risk Snapshot is a digital product. It is generated and delivered immediately on completion of the questionnaire and successful payment.

Delivery is to the browser session in which the assessment was completed. The Buyer is responsible for saving or downloading the output at the time of delivery. The Seller does not guarantee indefinite retrieval of completed snapshots after the session ends.

Your snapshot is available to access for 30 days from the date of purchase. After 30 days, your submission data is permanently deleted and the snapshot can no longer be retrieved. RiskSignal does not store copies of completed snapshots beyond this period. If you require your snapshot after the 30-day window has closed, a new snapshot will need to be completed.

If the Buyer experiences a technical failure that prevented delivery of the snapshot after payment was taken, they should contact support@risksignal.co within 7 days of purchase with the transaction reference. The Seller will investigate and, where a technical failure is confirmed, will either reissue the snapshot or provide a full refund.

5. Right of Withdrawal and Refund Policy

5.1 Statutory right of withdrawal

Under the Consumer Rights Act 2022 (Ireland) and the Consumer Contracts Regulations 2013 (UK), consumers purchasing digital content online have a 14-day right of withdrawal from the date of purchase.

However, this right of withdrawal does not apply where: the consumer has given prior express consent to the digital content being supplied before the withdrawal period has expired, and the consumer has acknowledged that they will lose their right of withdrawal once supply has begun.

At the point of purchase, the Buyer is required to confirm both of these conditions by checking a consent box before payment is completed. By doing so, the Buyer expressly waives the right of withdrawal in respect of that purchase.

5.2 Withdrawal waiver — consent at checkout

Checkout consent statement

The following statement is presented to the Buyer at the checkout step and must be confirmed before payment proceeds:

“I agree that the GDPR Risk Snapshot is a digital product delivered immediately on completion of payment. I give my express consent for delivery to begin immediately and I acknowledge that I lose my right of withdrawal once the snapshot has been generated.”

No purchase can be completed without this confirmation. If the Buyer does not agree, they should not proceed with the purchase.

5.3 Refunds

Because the snapshot is generated and delivered immediately on completion of payment, and because the Buyer has waived the right of withdrawal at checkout, refunds are not available once the snapshot output has been received.

Refunds will be issued in the following circumstances only:

• • A confirmed technical failure prevented delivery of the snapshot after payment was taken.
• • The Buyer was charged in error — for example, a duplicate transaction.

Refund requests must be submitted to support@risksignal.co within 7 days of the transaction date and must include the transaction reference. Requests submitted outside this period may not be considered.

Refunds, where applicable, will be processed to the original payment method within 5 to 10 business days.

5.4 Business purchasers

The right of withdrawal under consumer law applies to consumers only. Where the Buyer is purchasing in the course of a business, trade, or profession, the statutory right of withdrawal does not apply. These Terms of Sale govern the transaction in full.

6. Nature and Limitations of the Service

6.1 Not legal advice

The GDPR Risk Snapshot does not constitute legal advice, regulatory advice, or professional compliance advice of any kind. The Seller is not a solicitor, data protection officer, or regulatory body.

The snapshot describes how personal data handling appears to operate in the Buyer's business based on the responses provided. It does not interpret the Buyer's regulatory obligations, certify compliance with GDPR or UK GDPR, or provide any assurance as to the adequacy of the Buyer's data handling practices.

6.2 Accuracy of responses

The snapshot reflects what the Buyer's responses describe. The quality and accuracy of the output depends on the accuracy and completeness of the responses provided. The Seller accepts no liability for outputs generated from inaccurate, incomplete, or misleading responses.

6.3 Scope limitations

The snapshot is designed around common patterns seen in day-to-day data handling for agencies, consultancies, and freelancers. It does not account for highly specialised processing activities, sector-specific regulatory requirements, or complex contractual arrangements. For those situations, specialist advice is appropriate.

6.4 Point-in-time assessment

The snapshot reflects the Buyer's business as described at the time of completion. It does not update automatically. If the Buyer's tools, team, processes, or client work change materially, a new snapshot may be required to reflect the updated position.

7. Intellectual Property

The GDPR Risk Snapshot output generated for the Buyer is provided for the Buyer's internal use. The Buyer may use, share internally, or reference the output for their own business purposes.

The Buyer may not resell, sublicense, or commercially exploit the snapshot output or any part of the RiskSignal service, methodology, or system without the prior written consent of the Seller.

All intellectual property rights in the RiskSignal service, platform, methodology, and assessment framework remain the property of the Seller.

8. Limitation of Liability

8.1 General limitation

To the fullest extent permitted by applicable law, the Seller's total liability to the Buyer in connection with any purchase or use of the RiskSignal service — whether in contract, tort, or otherwise — is limited to the amount paid by the Buyer for the snapshot in question.

8.2 Excluded losses

The Seller is not liable for:

• • any indirect, consequential, or special loss or damage;
• • loss of profit, revenue, business, or anticipated savings;
• • any regulatory fine, penalty, or enforcement action taken against the Buyer;
• • any loss arising from the Buyer's reliance on the snapshot output as legal or compliance advice;
• • any loss arising from inaccurate or incomplete responses provided by the Buyer.

8.3 Consumer rights

Nothing in these Terms of Sale limits or excludes the Seller's liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or any other liability that cannot be limited or excluded under applicable law, including the rights of consumers under Irish and UK consumer protection legislation.

9. Data Protection

The collection and processing of personal data in connection with the RiskSignal service is described in the Privacy Policy, available at risksignal.co/privacy.

The snapshot questionnaire is designed so that responses relate to business practices rather than personal data. Users are not asked to submit personal or special category data during the assessment. Payment data is processed by Stripe in accordance with Stripe's privacy policy.

10. Governing Law and Jurisdiction

10.1 Ireland

Where the Buyer is based in Ireland or another EU member state, these Terms of Sale are governed by the laws of Ireland. Any dispute arising from or in connection with these Terms of Sale shall be subject to the exclusive jurisdiction of the courts of Ireland, without prejudice to the Buyer's rights as a consumer under applicable EU law.

10.2 United Kingdom

Where the Buyer is based in the United Kingdom, these Terms of Sale are governed by the laws of England and Wales. Any dispute arising from or in connection with these Terms of Sale shall be subject to the exclusive jurisdiction of the courts of England and Wales, without prejudice to the Buyer's rights as a consumer under applicable UK law.

11. Complaints and Disputes

If the Buyer has a complaint about the service or believes these Terms of Sale have not been met, they should contact the Seller in the first instance at support@risksignal.co. The Seller will acknowledge complaints within 2 business days and aim to resolve them within 10 business days.

Consumers in Ireland have the right to refer unresolved disputes to the European Commission Online Dispute Resolution platform at ec.europa.eu/consumers/odr. The Seller's email address for ODR purposes is support@risksignal.co.

Consumers in the United Kingdom may refer unresolved disputes to an alternative dispute resolution scheme where applicable.

12. Changes to These Terms

The Seller may update these Terms of Sale from time to time to reflect changes in the service, applicable law, or operational requirements. The version in force at the time of purchase applies to that purchase. The current version will always be available at risksignal.co/terms.

13. Contact

For questions about these Terms of Sale or any purchase, contact:

support@risksignal.co
RiskSignal, operated by G.O.O, Ireland.