Terms and Conditions

These Terms are a business-to-business (B2B) agreement between MKCIT LIMITED (operating Eventris) and the customer organisation that subscribes to the Service. They are not a consumer contract. Individuals accessing the Service do so under, and on behalf of, a subscribing organisation.

By subscribing to, accessing, or using the Service, the Customer agrees to be bound by these Terms. If you do not agree, you must not use the Service.

1. Definitions

Term	Meaning
"MKCIT", "we", "our", "us"	MKCIT LIMITED, registered in England and Wales (company number 16953736), registered office 9 Hatfield Court, Reading, RG31 7AL.
"Service"	The Eventris platform — its web application, mobile/native apps, and APIs — for event operations, incident-response coordination, and workforce/resource management.
"Customer", "you", "your"	The organisation that subscribes to the Service (e.g. an event-medical provider, security, stewarding, traffic-management firm, or event organiser).
"Authorised User"	An individual the Customer permits to access the Service under the Customer's account.
"Customer Records"	The operational, incident, and (where applicable) patient/clinical records the Customer and its Authorised Users create in the Service.
"Account Data"	User identity, organisation membership, subscription, and billing data MKCIT holds to operate the Service.
"DPA"	The Data Processing Agreement under which MKCIT processes Customer Records on the Customer's documented instructions.
"Privacy Policy"	The Eventris privacy policy (slug privacy-policy), which forms part of these Terms.

Eventris is a trading style of MKCIT LIMITED; our other trading styles are operated by the same legal entity.

2. The Service

The Service is a software platform that helps professional organisations coordinate event operations, log and manage incidents, and manage workforce and resources. Where used by medical providers, it also supports clinical record-keeping by those providers.

The Service is an operational and record-keeping tool. It is not a medical device, and it does not diagnose, treat, or provide clinical advice. See §10.

We may improve, modify, or add to the Service over time. We will not materially reduce the core functionality the Customer subscribes to without reasonable notice.

3. Accounts and access

• The Customer is responsible for nominating its Authorised Users and for managing their access and permissions within the Service.
• The Customer and its Authorised Users must keep login credentials confidential and are responsible for all activity under the Customer's account.
• Authorised Users must be at least 18 years old or otherwise authorised by the Customer to use the Service in a professional capacity.
• The Customer must notify us promptly of any suspected unauthorised access or security incident affecting its account.

4. Subscription and fees

• Access to the Service is provided on a subscription basis. Fees, billing frequency, and any usage-based charges are the subscription fees and charges set out in the Customer's order form, plan, or a separate commercial agreement.
• Unless otherwise agreed in writing, fees are exclusive of VAT (charged at the prevailing rate) and are payable in advance.
• We may change fees on reasonable notice, effective from the Customer's next renewal term.
• Except where required by law, fees paid are non-refundable.

5. Acceptable use

The Customer and its Authorised Users must not:

• use the Service for any unlawful purpose, or in breach of any applicable clinical, professional, or operational governance imposed on the Customer;
• attempt to gain unauthorised access to, disrupt, overload, or reverse-engineer the Service or its underlying systems;
• upload malicious code, or content that is unlawful, infringing, or that the Customer has no right to process;
• resell, sublicense, or provide the Service to third parties except its own Authorised Users, without our written agreement;
• use the Service to build a competing product or to benchmark it for a competitor.

We may suspend access where necessary to protect the Service, other customers, or the safety/integrity of a safety-critical system, and will restore access as soon as reasonably practicable.

6. Customer responsibilities

The Customer is responsible for its own use of the Service and, in particular:

• The Customer is the data controller of the Customer Records (including patient and operational records) it and its Authorised Users create. The Customer is responsible for determining and maintaining a lawful basis for processing those records, for obtaining any consents required, for the accuracy of what it records, and for setting and meeting its retention obligations. MKCIT processes those records only on the Customer's documented instructions, as processor (see §8 and the Privacy Policy and DPA).
• ensuring its Authorised Users are appropriately trained, registered, and (where relevant) clinically competent — the Service does not validate clinical competence or supervise clinical decisions;
• ensuring its use of the Service complies with the laws, regulations, and professional standards applicable to the Customer (including any CQC or other regulatory obligations);
• the accuracy and lawfulness of all data it inputs, and for responding to data-subject requests relating to the Customer Records it controls (we will assist as processor — see the Privacy Policy §10).

7. Intellectual property

• MKCIT owns the Service. All intellectual property rights in the Eventris platform — software, design, content we author (including any reference/template clinical content we provide as an adoptable default), and documentation — remain ours or our licensors'. We grant the Customer a non-exclusive, non-transferable right to use the Service during the subscription term.
• The Customer owns its data and records. All Customer Records, and any data the Customer inputs, remain the Customer's property. The Customer grants us the limited rights necessary to host, process, and deliver the Service (and any DPA-permitted processing).
• The Customer may give feedback; we may use it to improve the Service without obligation.

8. Data protection

• MKCIT processes personal data in accordance with the UK GDPR and the Data Protection Act 2018, as described in the Privacy Policy (slug privacy-policy), which forms part of these Terms.
• MKCIT is the controller of Account Data. MKCIT is the processor of the Customer Records, which the Customer controls; that processing is governed by the DPA, under which MKCIT acts only on the Customer's documented instructions.
• The Service is hosted in the United Kingdom with UK data residency. International transfers are limited as described in the Privacy Policy §7.
• Each party will comply with its respective obligations under applicable data-protection law.

9. Confidentiality

Each party may receive confidential information from the other. The receiving party will keep it confidential, use it only to perform these Terms, and protect it with reasonable care. This does not apply to information that is public through no fault of the receiving party, independently developed, or required to be disclosed by law or regulator (with notice where lawful). This clause survives termination.

10. Warranties and disclaimers

The Service is an operational and record-keeping tool. It is NOT a medical device, is not certified as one, and does not provide clinical advice, diagnosis, or treatment. Any clinical decision, assessment, protocol, dose, or treatment remains the sole responsibility of the Customer and its qualified professionals. Reference or template clinical content the Service may pre-populate is a non-operative draft the Customer must review, accept, and adapt; nothing the Service provides is authorised, mandatory, or clinically operative until the Customer adopts it.

• We provide the Service with reasonable skill and care, but, to the maximum extent permitted by law, the Service is otherwise provided "as is" and "as available", without further warranties (express or implied), including any implied warranty of fitness for a particular clinical purpose.
• We do not warrant that the Service will be uninterrupted or error-free, or that it will meet every requirement of the Customer.
• The Customer is responsible for maintaining appropriate clinical and operational fallback procedures (e.g. paper/radio) for use if the Service is unavailable.

11. Limitation of liability

• Nothing in these Terms excludes or limits liability that cannot lawfully be excluded — including liability for death or personal injury caused by negligence, fraud, or fraudulent misrepresentation.
• Subject to the above, neither party is liable for indirect or consequential loss, loss of profit, revenue, goodwill, or anticipated savings.
• Subject to the above, each party's total aggregate liability arising under or in connection with these Terms is limited to the total fees paid by the Customer to MKCIT in the 12 months preceding the event giving rise to the claim.

12. Term and termination

• These Terms apply from the start of the Customer's subscription and continue for the subscription term set out in the Customer's order form, renewing for successive terms of equal length unless either party gives notice of non-renewal at least 30 days before the end of the then-current term.
• Either party may terminate for the other's material breach not remedied within 30 days of written notice, or immediately if the other becomes insolvent.
• We may suspend or terminate access for non-payment or serious breach of §5, having first given notice where practicable.

13. Data export and deletion on termination

• During the subscription term and for a reasonable period after it ends, the Customer may export its Customer Records in a commonly used format. Customer Records remain the Customer's property and are not held hostage to payment disputes beyond any lawful lien on overdue fees.
• After the export period, we will delete or return the Customer Records in accordance with the DPA and the Customer's documented instructions, except where we are required to retain certain records (e.g. audit-trail authorship, or clinical records subject to statutory retention) as described in the Privacy Policy (§§2, 8). Retention of those records is the Customer's responsibility as controller; we act on its instructions and do not delete clinical records before the applicable retention period has elapsed.

14. Changes to these Terms

We may publish new versions of these Terms. Where a new version materially affects the Customer, the Customer (or its Authorised Users) will be asked to review and agree to it before continuing to use the Service. The current version and effective date are always shown at the top of this page.

15. Governing law and jurisdiction

These Terms, and any dispute or claim arising out of or in connection with them, are governed by the laws of England and Wales, and the parties submit to the exclusive jurisdiction of the courts of England and Wales.

16. Contact

MKCIT LIMITED, 9 Hatfield Court, Reading, RG31 7AL — hello@eventris.uk. Data-protection enquiries: privacy@eventris.uk (ICO registration ZC116358).