MULTI ME SUBSCRIPTION TERMS AND CONDITIONS

Version 2.1 | Last Updated: September 2026

These Terms apply to subscriptions to the Multi Me services provided by MULTI-ME LIMITED and should be read together with the applicable quotation, order form, purchase order or invoice.

1. Parties

This Agreement is between:

MULTI-ME LIMITED (Company No. 07450055), whose registered office is at 2 Bittam Wood Cottages, Woodend Lane, Nailsworth, Gloucestershire, GL6 0RH ("Multi Me")

and

The Customer identified on the applicable quotation, order form, purchase order or invoice.

2. Acceptance and Contract Documents

These Terms, together with the applicable quotation, order form, purchase order or invoice and any applicable Data Processing Agreement, form the agreement between Multi Me and the Customer (the “Contract”).

By accepting a quotation, issuing a purchase order, paying an invoice, or accessing or continuing to use the Services, the Customer agrees to be bound by these Terms. A separate signature is not required unless otherwise agreed in writing between the parties.

Where there is any conflict between these Terms and a separately signed agreement between the parties, the separately signed agreement will prevail to the extent of that conflict.

3. Services

Multi Me provides access to the Multi Me platform, associated websites and applications, RIX Wiki functionality where applicable, and associated support, training and implementation services (together, the “Services”).

Certain Services or functionality may be provided in partnership with or under licence from third parties, including RIX Inclusive Research, where applicable.

Multi Me may update, improve, replace or modify features of the Services from time to time, including where required for security, accessibility, compliance, performance or product development. Where a material change is likely to significantly affect the Customer’s use of the Services, Multi Me will endeavour to provide reasonable advance notice.

4. Subscription

The Customer is granted a non-exclusive, non-transferable right to access and use the Services during the Subscription Term.

Subscriptions are based on the number of Supported Users, Authorised Users, or other licence quantities specified within the applicable quotation, order form or invoice.

The Customer is responsible for ensuring that only authorised individuals access the Services and that access is managed appropriately within its organisation.

Additional subscriptions or licence quantities may be purchased during a Subscription Term subject to agreement with Multi Me and may be charged on a pro-rata basis where appropriate.

5. Subscription Term and Renewal

Unless otherwise agreed in writing:

·       Subscriptions are provided for an initial term of twelve (12) months.

·       Subscriptions automatically renew for successive twelve-month periods.

·       Either party may prevent renewal by providing at least ninety (90) days’ written notice before the end of the current Subscription Term.

6. Fees and Payment

Subscription fees are set out within the applicable quotation, order form or invoice.

Invoices are payable within thirty (30) days unless otherwise agreed in writing.

Multi Me may suspend access to the Services where an undisputed invoice remains unpaid more than thirty (30) days after the due date, following reasonable notice to the Customer.

Multi Me may revise Subscription Fees for a subsequent Subscription Term. Where fees are to increase, Multi Me will provide the Customer with at least ninety (90) days’ written notice before the start of the relevant renewal period.

Revised fees will apply from the commencement of the relevant renewal period and will be reflected in the applicable renewal quotation or invoice. Revised pricing will not apply retrospectively to a Subscription Term already in progress.

7. Customer Responsibilities

The Customer shall:

·       use the Services lawfully and in accordance with applicable legislation;

·       maintain appropriate user access controls within its organisation;

·       obtain any permissions, consents or other lawful bases required for the processing of personal data;

·       ensure that information entered into the Services is accurate and appropriate;

·       ensure that Authorised Users comply with applicable Terms of Use and other user-facing rules;

·       notify Multi Me without undue delay of any suspected unauthorised access or material security issue affecting its use of the Services.

The Customer remains responsible for the content uploaded to the Services by its users.

8. Data Protection

Each party shall comply with the data protection legislation applicable to it, including where applicable the UK GDPR, the Data Protection Act 2018, the EU GDPR and applicable Irish data protection legislation.

For most deployments involving health, social care, disability, support or education services, the Customer acts as the Data Controller and Multi Me acts as the Data Processor.

Where the Customer acts as Data Controller, the Customer is responsible for determining the lawful basis for processing personal data and, where special-category personal data is processed, identifying an appropriate condition under Article 9 UK GDPR and/or Article 9 EU GDPR.

Where Multi Me acts as Data Processor, it shall process personal data only on the Customer’s documented instructions, except where processing is otherwise required by law.

The data-processing provisions in Schedule 1 form part of the Contract. Where the parties enter into a separate Data Processing Agreement, that agreement will apply in addition to these Terms and will take precedence in relation to data-processing matters where there is any conflict.

Further information is provided within Multi Me’s Privacy Policy and Sub-Processor Register, as updated from time to time.

9. Hosting and Security

Multi Me maintains appropriate technical and organisational measures designed to protect Customer Data.

Customer Data is currently hosted within the United Kingdom using approved cloud infrastructure providers, including Amazon Web Services (AWS).

Where personal data relating to individuals in the European Economic Area is processed in the United Kingdom, Multi Me will rely on an applicable adequacy decision or other lawful transfer mechanism where required by EU GDPR.

Multi Me will not transfer personal data outside the United Kingdom or European Economic Area except where permitted by applicable data protection legislation and appropriate safeguards or transfer mechanisms are in place.

Multi Me maintains information-security controls aligned with ISO 27001 and publishes details of approved sub-processors within its Sub-Processor Register.

10. Support and Availability

Multi Me will use reasonable endeavours to provide the Services continuously and maintain service availability, subject to planned maintenance, emergency maintenance, technical issues and circumstances outside its reasonable control.

Support is provided in accordance with the support arrangements specified within the Customer’s subscription package or otherwise agreed in writing.

Additional consultancy, implementation, configuration or training services may be separately agreed and charged.

11. Intellectual Property

All intellectual property rights in the Services remain the property of Multi-Me Ltd., RIX Inclusive Research and/or their respective licensors, as applicable.

The Customer retains ownership of its own data and content uploaded to the Services.

Nothing in this Agreement transfers ownership of intellectual property rights between the parties except as expressly stated.

12. Confidentiality

Each party shall keep confidential any non-public business, technical, commercial or personal information obtained from the other party and shall not disclose such information except where reasonably required to perform the Contract, to professional advisers or service providers subject to appropriate confidentiality obligations, or where required by law.

This obligation survives termination of the Agreement.

13. Limitation of Liability

Nothing in this Agreement excludes or limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or any liability which cannot lawfully be excluded or limited.

Subject to the above, Multi Me’s total aggregate liability arising out of or in connection with the Services shall not exceed the Subscription Fees paid or payable by the Customer during the twelve (12) months immediately preceding the event giving rise to the claim.

Subject to the above, neither party shall be liable for indirect or consequential losses, including loss of profit, revenue, business opportunity or goodwill.

14. Termination

Either party may terminate this Agreement:

·       at the end of any Subscription Term by giving notice in accordance with Clause 5;

·       immediately where the other party commits a material breach which remains unremedied for fourteen (14) days following written notice;

·       immediately upon insolvency of the other party.

Upon termination:

·       access to the Services will cease;

·       Customer Data will be retained, returned and/or deleted in accordance with Schedule 1, Multi Me’s Data Retention and Deletion Policy and applicable law;

·       all undisputed amounts properly due to Multi Me will remain payable.

15. Changes to these Terms

Multi Me may update these Terms from time to time to reflect changes to the Services, applicable law, regulation, security requirements or business operations.

Where a change materially affects the Customer’s rights or obligations, Multi Me will provide reasonable advance notice before the change takes effect.

A change to these Terms will not retrospectively alter Subscription Fees for a Subscription Term already in progress.

16. General

These Subscription Terms, together with the applicable quotation, order form, purchase order or invoice, any applicable Data Processing Agreement, and any expressly incorporated Terms of Use, constitute the agreement between the parties in relation to the subscription Services.

These Terms are governed by the laws of England and Wales.

Nothing in these Terms affects any mandatory rights or protections available under Irish law, European Union law or applicable data protection legislation.

Any disputes shall be subject to the jurisdiction of the courts of England and Wales unless otherwise required by applicable law or otherwise agreed in writing.

SCHEDULE 1 – DATA PROCESSING PROVISIONS

1. Scope and roles

This Schedule applies where Multi Me processes personal data on behalf of the Customer in connection with the Services. In such circumstances the Customer is the Data Controller and Multi Me is the Data Processor, unless the parties agree otherwise in writing or applicable law requires a different allocation of roles.

2. Subject matter, nature and purpose of processing

Multi Me may collect, record, organise, store, retrieve, host, display, transmit, back up, support, delete and otherwise process personal data as reasonably necessary to provide, secure, maintain and support the Services configured by the Customer.

3. Duration of processing

Processing will continue for the Subscription Term and for such additional period as is reasonably required for secure return, retention or deletion of personal data in accordance with documented retention and backup procedures and applicable law.

4. Categories of data subjects

·       Supported Users and people receiving health, social care, disability or support services;

·       students and pupils;

·       family members, carers and advocates;

·       employees, support staff, professionals and contractors;

·       other persons authorised by the Customer to participate in the relevant Multi Me environment.

5. Types of personal data

·       names and contact information;

·       account and authentication information;

·       photographs, video and audio;

·       communications and user-generated content;

·       person-centred planning, support, educational and progress information;

·       goals, activities, diary entries and records;

·       health, disability, care or other special-category personal data where the Customer chooses to process such information through the Services.

6. Processor obligations

Multi Me shall:

·       process personal data only on documented instructions from the Customer, unless required otherwise by law;

·       ensure that persons authorised to process the personal data are subject to appropriate confidentiality obligations;

·       implement appropriate technical and organisational measures designed to protect personal data;

·       assist the Customer, taking account of the nature of the processing and information available to Multi Me, with data-subject requests, personal data breaches, data protection impact assessments and regulatory consultations where required by applicable law;

·       make available reasonable information necessary to demonstrate compliance with its obligations as a Data Processor;

·       permit and contribute to reasonable audits or inspections, subject to appropriate confidentiality, security, timing and scope arrangements.

7. Sub-processors

The Customer gives Multi Me general written authorisation to appoint sub-processors where reasonably necessary to provide and support the Services.

Multi Me shall maintain information about its material sub-processors through its Sub-Processor Register, impose appropriate data-protection obligations on sub-processors, remain responsible for their performance to the extent required by law, and provide reasonable advance notice of material additions or changes where required by applicable data-protection law so that the Customer may raise legitimate data-protection objections.

8. International transfers

Where personal data is transferred internationally, Multi Me shall ensure that an applicable adequacy decision, standard contractual clauses, international data transfer agreement or other lawful safeguard or transfer mechanism is used where required by applicable law.

9. Personal data breaches

Multi Me shall notify the Customer without undue delay after becoming aware of a personal data breach affecting personal data processed on behalf of the Customer and shall provide reasonable information and cooperation to assist the Customer in meeting its legal obligations.

The Customer remains responsible for determining whether notification to individuals or a relevant supervisory authority is required. Relevant supervisory authorities may include the Information Commissioner’s Office (ICO) in the United Kingdom and the Data Protection Commission (DPC) in Ireland.

10. Return and deletion

Following termination of the Contract, Multi Me shall, at the Customer’s request and subject to applicable law, provide reasonable means for Customer Data to be returned or exported and/or securely delete personal data in accordance with Multi Me’s documented retention and deletion procedures.

Personal data contained in backups may remain securely retained until overwritten or deleted through Multi Me’s normal backup lifecycle, provided it remains protected and is not processed for any other purpose.

11. Priority

If the parties enter into a separate Data Processing Agreement, that agreement will take precedence over this Schedule in relation to data-processing matters to the extent of any conflict.

Multi-Me Limited | Subscription Terms v2.1 | September 2026