Terms of Service

01These terms

These terms are the agreement between you and MOFE LTD, a company registered in England and Wales under number 16633320, registered office First Floor, Swan Buildings, 20 Swan Street, Manchester M4 5JW, trading as ReadyPack. In these terms “we” and “us” means MOFE LTD, and “you” means the business buying a pack.

You accept these terms when you pay for a pack. If you are agreeing on behalf of a company, you confirm you are authorised to do so.

ReadyPack is sold to businesses. We supply to organisations and to individuals acting in the course of a trade or profession, not to consumers. That means the statutory consumer cancellation rights for distance selling do not apply to this purchase. We give you the 14-day guarantee in clause 7 anyway, as a contractual promise, because we think it is the right way to sell something you cannot inspect first.

How we handle personal data is set out in our Privacy Notice, which forms part of this agreement.

02What ReadyPack is

ReadyPack is a documentation service. You answer a structured questionnaire about how your business uses AI. We use those answers to produce a set of written documents tailored to what you told us — policies, registers, statements and procedures covering UK GDPR, the EU AI Act and the UK Data (Use and Access) Act 2025.

The documents are drafted by an AI model and then quality-checked by a second AI model before delivery: completeness, consistency with your answers, and accuracy against current guidance. Where your answers flag something higher-risk or uncertain, the pack is held back for a closer manual review rather than sent automatically. Exactly what is sent to the AI provider, and what is held back, is set out in section 5 of our Privacy Notice.

03What it is not

To be completely unambiguous, we are not, and do not claim to be:

• a law firm, or a provider of legal services;
• a regulatory authority, or approved or endorsed by one;
• a tax adviser, financial adviser or accountancy practice;
• an ICO-approved supplier — no such approval exists for what we do;
• a compliance guarantee or certification of any kind.

Buying a pack does not make your business compliant. It gives you the documentation that compliance is normally evidenced with. Whether you are actually compliant depends on what you do, not on what your paperwork says.

We cannot help with active enforcement action, an ICO investigation already underway, a specific contract negotiation, or litigation. If you ask, we will tell you that and point you towards someone who can.

04Ordering and payment

If you are an adviser, agency or consultancy producing documentation for several of your own clients, we handle that by agreement rather than as a fixed package — email hello@readypack.co.uk and we will agree the number of packs and the price in writing before you pay.

Prices are in pounds sterling and are the total amount you pay. We are not currently registered for VAT, so no VAT is added. If that changes we will update this page and show any VAT separately at checkout before you pay.

Payment is a one-off charge taken at checkout. There is no subscription and no recurring charge. Payment is processed by Stripe on their own checkout page — we never see or hold your card details.

Your order is confirmed when Stripe confirms the payment. We then email you a secure link to your questionnaire. If that email does not arrive, check your spam folder and then email hello@readypack.co.uk — we can resend it.

05What you get, and when

Every pack contains nine documents: an AI Use Statement, a Privacy Notice addendum, an AI Risk Register, a DPIA-Lite, an Internal AI Use Policy, Customer Disclosure snippets, a Vendor AI Register, a Complaints Procedure pack, and a Procurement Response Memo. They are delivered as PDFs through your customer portal, and we email you when they are ready.

Where your answers indicate a higher-risk situation, the pack is routed for a closer manual review and delivery can take up to 72 hours. The questionnaire tells you which applies to you at the point you submit, so you are never guessing.

These are the timescales we work to and expect to meet. They are not a refund-backed service level, and being late is not by itself a reason for a refund — but if we are going to miss it we will email you and tell you why rather than leaving you wondering, and the guarantee in clause 7 covers you either way.

Occasionally your answers leave a gap we genuinely cannot fill by guessing. In that case we come back to you with a specific question instead of inventing an answer. The clock pauses while we wait for your reply.

06What we need from you

Your pack is built entirely from your answers. That has two consequences and you should know both of them before you buy.

Your answers need to be accurate and complete. If you leave out an AI tool, understate what it does, or describe a policy you do not actually follow, the pack will document a business that does not exist. That is worse than having no pack, because you will hand it to a buyer. We are not responsible for a pack that is wrong because the answers were wrong.

Your pack describes a moment in time. It reflects what you told us, assessed against the regulations as they stood on the date printed on the documents. If you adopt a new AI tool, change how you use an existing one, or the law changes, your pack does not update itself. Reviewing it is your responsibility — each document carries a review date to prompt you.

You also confirm that where you give us personal data about other people — naming a colleague as your governance contact, for example — you are entitled to do so and have told them what they need to be told.

07The 14-day guarantee

If your pack does not meet the standard you expected, email hello@readypack.co.uk within 14 days of delivery and we will refund you in full. No questions, no forms, no requirement to explain yourself.

We refund to the original payment method. Stripe normally takes five to ten working days to return it to your account. Where an agreed arrangement covers packs for several of your clients, a refund covers the whole order rather than a single pack within it.

This is a promise we choose to make, not a statutory right you would otherwise have as a business customer. It sits on top of anything the law does give you, and nothing in these terms limits your legal rights.

Once refunded, the licence in clause 8 ends and you should stop using and distributing the documents. We do not expect to chase anyone about this, and we would rather refund a disappointed customer than argue with one.

08Who owns what

Your documents are yours

When your payment clears, you get a perpetual, worldwide, irrevocable, royalty-free right to use the documents we produce for you however you like: adopt them as your own policies, edit them, publish them, put your own branding on them, and send them to clients, buyers and regulators. No attribution to ReadyPack is required and there is nothing further to pay, ever.

Where we have agreed in writing that you are producing packs for your own clients, that right extends to producing and handing over the documents to those clients as part of your services to them.

Your answers stay yours

We claim no ownership of anything you type into the questionnaire or upload to us. We use it to build your pack and for nothing else.

Our system stays ours

We keep ownership of the ReadyPack website, software, questionnaire design, document templates, underlying prompts and generic template text. You are buying the output, not the machine that made it.

We improve those generic templates over time based on what we learn from doing this work. We never reuse your specific content for another customer. Anything that goes into our reusable library is generic compliance wording, written to be usable by any business, with nothing client-specific in it.

09Using your documents

The documents are a starting point that you adopt and take responsibility for. Before you rely on one, read it. Before you publish one, check that it describes what your business actually does.

Some of the documents are written to be published and some are not. Your pack comes with a read-me that tells you which is which, and why. Publishing an internal risk register because nobody told you not to is a real way to hurt yourself, so we tell you.

Where a document quotes or paraphrases a regulation, it cites the source by name so you can check it. If you find something in your pack you believe is wrong, tell us — we would rather fix it than have it sitting in your procurement file.

10Acceptable use

You agree not to:

• resell, sublicense or redistribute ReadyPack itself, or provide access to the questionnaire to anyone outside your organisation (an agreed arrangement covering packs for your own clients is different);
• use the service to produce documentation for a business you are not authorised to act for;
• submit personal data about anyone without the authority to do so, or submit special category data or third-party records into the free-text fields;
• copy, scrape, reverse-engineer or attempt to extract our templates, prompts or questionnaire logic;
• attempt to interfere with, overload or gain unauthorised access to the service or another customer’s data;
• present ReadyPack as a certification, a regulatory approval, or legal advice to a third party.

If you breach this clause we may suspend or close your account. Where we do, we will tell you why and, unless the breach was deliberate, we will refund the unused part of your order.

11Availability

We aim to keep the service available, but we do not promise it will be uninterrupted or error-free. We rely on third-party providers for hosting, the database, email and the AI model, and an outage at any of them can stop us delivering for a while.

We may change or improve the service, the questionnaire and the document set over time. If a change materially reduces what you have already bought and not yet received, we will tell you and you can have a refund.

Your documents remain available in your portal for 24 months from delivery, as set out in our Privacy Notice. Download your own copy — do not treat our portal as your only archive.

12Our liability

Nothing in these terms limits or excludes our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for anything else that cannot lawfully be limited.

Subject to that:

• Our total liability to you for everything connected with this agreement is capped at the total amount you have paid us for the order in question.
• We are not liable for loss of profit, loss of revenue, loss of a contract or tender, loss of anticipated savings, loss of goodwill, or any indirect or consequential loss.
• We are not liable for a regulatory finding, fine or enforcement action against you. Your compliance depends on what your business does, and we do not control that.
• We are not liable for a pack that is inaccurate because the answers you gave us were inaccurate or incomplete.

This allocation of risk is reflected in the price. A pack costs a few hundred pounds precisely because we are supplying documentation rather than underwriting your regulatory position. If you need advice you can rely on and sue over, engage a solicitor — and we will say so to your face rather than sell you something that is not that.

13Confidentiality

We treat what you tell us about your business as confidential. We do not publish it, discuss it, or share it with anyone beyond the suppliers named in our Privacy Notice, each of whom is engaged under a written agreement.

We will not name you as a customer, quote you, or use your logo in our marketing unless you tell us in writing that we may.

14Ending this agreement

A pack is a one-off purchase, so there is nothing to cancel. The agreement ends when the pack is delivered and the guarantee period has passed — except for the clauses that are meant to survive it: ownership and licence, liability, confidentiality, and Schedule 1.

You can ask us to close your account and delete your data at any time; see your rights. Closing your account before delivery means we cannot deliver, and we will refund you.

15General

S1Schedule 1 — Data processing terms

This schedule is the written contract required by Article 28(3) of the UK GDPR. It applies whenever you give us personal data about someone other than yourself — for example, naming a colleague as your AI governance contact. For that data you are the controller and we are your processor.

S1.1 Scope of the processing

S1.2 Our obligations

We will:

1. process the personal data only on your documented instructions, including on transfers out of the UK. These terms, the Privacy Notice and your use of the service are your instructions. If we are required by law to process it otherwise, we will tell you first unless the law forbids us from doing so;
2. ensure that everyone we authorise to access the data is bound by a duty of confidence;
3. take appropriate technical and organisational security measures as required by Article 32. The measures in place today are listed in section 9 of our Privacy Notice, and we keep that list accurate rather than aspirational;
4. engage sub-processors only on the terms in S1.3 below;
5. assist you, so far as we reasonably can, in responding to requests from individuals exercising their rights;
6. assist you with your obligations on security, breach notification, data protection impact assessments and prior consultation, taking into account what we know and what we hold;
7. notify you without undue delay, and in any event within 48 hours, if we become aware of a personal data breach affecting your data, with the detail you need to make your own notification;
8. delete or return the personal data at the end of the processing, at your choice, unless we are legally required to keep it;
9. make available the information you reasonably need to demonstrate compliance with Article 28, and allow and contribute to audits. In practice, ask us and we will answer — we would rather have the conversation than have you assume.

S1.3 Sub-processors

You give us general authorisation to engage the sub-processors listed in section 6 of our Privacy Notice, which names each one, what it does and where it processes data. That list is the current list.

We impose data protection obligations on each sub-processor that are no less protective than those in this schedule, and we remain fully liable to you for what they do.

If we intend to add or replace a sub-processor we will update that page and email customers with an active order at least 30 days beforehand. You may object on reasonable data protection grounds. If we cannot resolve your objection, you may terminate and we will refund any amount you have paid for an undelivered pack.

S1.4 International transfers

Some of our sub-processors process personal data outside the UK. The countries and the safeguards relied on are set out in section 7 of our Privacy Notice. You instruct us to make those transfers on those safeguards.

S1.5 Your obligations

You confirm that you have a lawful basis for giving us the personal data, that you have told the individuals concerned what they need to be told, and that our processing on your instructions will not put you in breach of data protection law.