Terms

The free scan and the free report

The scanner reads a public web address from outside and reports what it found at that moment. It is free, it is offered as it is, and it is not a security audit. A clean grade is not a promise that a site is safe, and a poor grade is not proof that it is broken. Scan sites you own, or sites you have been asked to look at.

The written report is a person's opinion of what we would fix and in what order. Acting on it is your decision, and doing the work yourself is completely fine.

Work we quote for

Every job starts with a written quote: what is included, what is not, and what it costs. Nothing begins until you accept it. If the job turns out to be bigger than the quote, we stop and tell you before doing the extra work, never after.

Money

• Prices are in US dollars, and taxes in your own country, if any, are yours to handle.
• Build and Secure jobs are usually half up front and half when the work is handed over. We start when the first part arrives.
• Care plans are billed monthly in advance.
• Payment is by bank transfer, or by card through a payment link where we can offer one. Bank charges at your end are yours, ours are ours.
• Invoices are due within fourteen days. If an invoice goes unpaid for thirty days we stop work and say so first.

What is yours

When a job is paid for, the site, the content, the designs and the code we wrote for you are yours. You get the files and the logins, and you can move to anyone else at any time without asking us. We keep the right to say we did the work and to show it, unless you would rather we did not.

Anything you give us stays yours, and you confirm you are allowed to use the text, pictures and logos you hand over.

Care plans

A care plan runs month to month. Either of us can stop it with the month that is already paid for, and there is nothing to cancel beyond telling us. Work outside the plan is quoted separately before it starts.

What security work can and cannot promise

We clean what we find, close the way in that we can identify, and harden what is left. No one can promise a site will never be attacked again, and anyone who does is selling something. What we do promise is that if a site we look after is hacked while the plan is running, the cleanup is included.

Backups

On a care plan we take daily backups and test them by restoring them, because a backup nobody has restored is only a hope. Keep your own copy as well. We are not the only place your site should exist.

Limits

Websites depend on hosts, networks, plugins and services we do not control. We are responsible for our own work and we will put our own mistakes right. We are not responsible for losses caused by someone else's outage, for lost profits, or for anything beyond what you paid us for the work in question. Nothing here limits anything that cannot be limited by law.

Stopping

You can stop at any time. We can too, and if we do we will finish or refund what you have paid for, hand over everything, and help whoever takes over. No one should be stuck with a supplier because their website is held hostage.

Law

These terms are governed by the laws of Kuwait, where Norval is based, unless we agree otherwise in writing for a particular job. If part of them cannot be enforced, the rest still stands.

Changes

If we change these terms, the date at the top changes with them. Work already quoted or in progress keeps the terms it started under.

Questions

Ask before you sign anything: contact us. See also privacy and the facts about us.