The terms, in plain English.

1. About these terms

Pressfort is a service from Launch Creative Ltd, a company registered in England and Wales (company number 09758806), with VAT number GB221053564. In these terms, "we" and "us" means Launch Creative Ltd, and "you" means the person or business buying Pressfort.

You buy Pressfort from us. Payments are processed by Stripe, our payment provider, which also sends your receipts and invoices on our behalf. We add any tax that applies where you are, such as VAT, and show it before you pay.

Some parts of these terms depend on whether you're a consumer (buying for yourself, not for a business) or a business. Where that's the case, we say so.

2. The service

Each Pressfort subscription covers one WordPress site, paid yearly or monthly. It includes safe auto-updates with a backup first, a firewall with virtual patching, geo-blocking, AI malware scanning, vulnerability alerts, uptime monitoring, daily off-site backups kept for 90 days, a 7-day activity log, downloadable reports and hack repair as described below.

Protection starts once the Pressfort plugin is installed and your site has connected. It needs the plugin to stay active and connected to work.

3. Price, renewal and cancelling

• You pay per site, either once a year or once a month. You choose before you buy. Paying yearly costs less than twelve monthly payments. The price is shown in your currency before you buy, with any tax that applies.
• Your subscription renews automatically at the end of each year or month you've paid for. If you pay yearly, we'll email you at least 14 days before it renews.
• You can cancel at any time from your account. Your site stays protected until the end of the year or month you've paid for, then protection stops and it won't renew. If you've only just bought, see your right to cancel.
• If a renewal payment fails, protection keeps running while we retry the payment. If it can't be taken, the subscription ends.

4. Your right to cancel

If you're a consumer, you have the legal right to cancel within 14 days of buying Pressfort for a site, without giving a reason. The 14 days start the day after you buy. This applies to your first payment for each site, not to renewals.

• Starting straight away. When you buy, you ask us to start protecting your site straight away, before the 14 days are up. You can still cancel, but you'll pay for the protection you've had up to the day you tell us.
• How to cancel. Email hello@getpressfort.com within the 14 days, saying you want to cancel and which site it's for. You can use the form below, but you don't have to. If you cancel from your account within the 14 days, we'll get in touch to ask whether you want to use this right.
• Your refund. We'll refund what you paid, less a fair amount for the days of protection you've had, based on the price for the full year or month. We'll pay it back to the way you paid, within 14 days of you telling us. Protection for that site then stops, and the subscription ends.

If you're buying for a business, this legal right doesn't apply, but our refunds still do.

5. Access to your site

By buying Pressfort, you allow us to access your site's WordPress dashboard and files to apply updates, run backups and scans, and fix problems. We only access your site to provide the service, and we handle any personal data on it as described in section 6. You confirm you own the site or have permission from its owner to buy Pressfort for it.

6. Data on your website

Your site may hold personal data about other people, such as your customers' orders, form entries and user accounts, and your visitors' IP addresses in the firewall and activity logs. You're the controller of that data, and we process it for you. This section is our data processing agreement under Article 28 of the UK GDPR, and the EU GDPR where it applies.

• What we do with it. We back it up, scan it, keep logs of activity on your site, restore it when you ask and fix your site if it's hacked. We only do this to provide Pressfort, for as long as your subscription runs. The data covers whatever is on your site, about your site's users, customers and visitors.
• Your instructions. We only use it on your instructions, which are these terms and anything you ask us to do through your account or by email. If the law requires us to do something else with it, we'll tell you first unless the law forbids that. If we think an instruction breaks data protection law, we'll tell you.
• Confidentiality and security. Only people who need to work on your site can access it, and they're bound to keep it confidential. We and our providers use appropriate technical and organisational measures to keep it secure.
• Our providers. You agree that we can use the providers listed in our privacy policy to process it, mainly our website security provider, which stores your site's backups. Each one is bound by data protection terms that protect your data at least as well as this section, and we're responsible for them. We'll email you before we add or replace one, and you can cancel if you object.
• Outside the UK. Some of our providers process data in other countries, including the United States and India. We protect it as described in our privacy policy.
• Helping you. We'll help you, as far as we reasonably can, to respond to people using their data protection rights, and to meet your own duties on security, breaches and data protection impact assessments.
• Breaches. If we become aware of a personal data breach affecting data on your site, we'll tell you without undue delay, with what we know.
• When your subscription ends. We remove your site from our website security provider, which deletes its backups, and we don't keep copies of data from your site unless the law requires us to.
• Showing we comply. We'll give you the information you reasonably need to show we're meeting this section, and allow and contribute to reasonable audits, with reasonable notice.
• Your part. You're responsible for having a lawful basis for the personal data on your site, and for telling the people it's about how it's used, including that you use a service like Pressfort.

7. Hack repair

Pressfort protects against attacks that use known weaknesses in WordPress, plugins and themes on your site. It does this by keeping them updated, blocking attacks at the firewall, and patching known flaws until the developer releases a fix. This applies while the Pressfort plugin is active and we're allowed to update your site.

Two hack clean-ups a year are included for each site, whatever caused the hack. If you pay yearly, that's two for each year you've paid for. If you pay monthly, it's two in any 12 months. When our scanner finds malware, we start cleaning it up, and a developer steps in if the automatic clean-up can't finish the job. A site that's hacked again within 7 days of a clean-up counts as the same incident.

If your site keeps getting hacked, removing the malware isn't enough. From the third incident in that time, we'll give you a free consultation instead. We'll explain what's letting the attackers in and what we recommend. If the fix means replacing a plugin or building a new version, we'll quote for it first.

8. What's outside our control

Some attacks don't come through anything Pressfort can update or block. These include:

1. Someone logging in with a real password. For example, a password that was stolen, shared, reused from another site or easy to guess. This also covers a hacked computer belonging to someone with access to your site, or a user you added.
2. Your hosting. A problem with your hosting company or its servers, other sites on the same hosting account, or stolen hosting, FTP, database or domain logins.
3. Software we can't keep safe. Pirated ("nulled") plugins or themes, plugins that are no longer maintained after we've advised you to replace them, custom code, or anything you've asked us not to update.
4. Changes made by you or someone else. For example, turning off the Pressfort plugin or firewall, or another developer changing the site.
5. Brand-new flaws. A weakness nobody knew about yet, with no update or firewall rule available when the attack happened.

Your included clean-ups still apply when the cause is outside our control. What changes is what happens if the hacks keep coming back: we'll help you deal with the cause, but we can't promise to keep the site clean while it's still there.

9. Sites that are already hacked

An infection that was already on your site before it joined never uses up one of your included clean-ups. What we do about it depends on how you pay:

• If you pay yearly, cleaning it up is included. We start with an automatic clean-up, and a developer finishes the job by hand if that can't. If we can't get your site clean, we'll refund you in full.
• If you pay monthly, we'll try an automatic clean-up free of charge where we can. If that isn't possible or doesn't clear it, we'll quote to finish the job by hand. If you'd rather not go ahead, we'll refund you in full.

We treat malware our scans find in the first 3 days after your site connects as already there. If you think your site might already be hacked, you can tell us before you buy.

10. Refunds

On top of your right to cancel if you're a consumer, we'll give you a full refund of what you've paid for the site in the last 12 months if:

• your site was already hacked when it joined, you pay yearly, and we can't get it clean,
• your site was already hacked when it joined, you pay monthly, a free automatic clean-up wasn't possible or didn't clear it, and you'd rather not go ahead with our quote, or
• your site keeps getting hacked, you've followed our advice, and we still can't get it clean and keep it that way.

Refunds are paid back to the way you paid, and the subscription for that site ends.

11. Your part

• Keep the Pressfort plugin active and connected.
• Use strong, unique passwords for WordPress and your hosting, and remove users who no longer need access.
• Tell us before you or another developer make big changes to the site, or if you want something left out of updates.
• Keep your email address up to date in your account so our alerts reach you.

12. Our responsibility to you

We provide Pressfort with reasonable care and skill. If we don't, tell us and we'll put it right.

Our backups are there to get you out of trouble, but please keep your own copy of anything you can't afford to lose. We rely on outside providers to run Pressfort. We're not responsible for delays or failures caused by events outside our reasonable control, but we'll keep you informed and do what we reasonably can to keep your site protected.

If you're a consumer:

• We're responsible for loss or damage you suffer that's a foreseeable result of us breaking these terms or not using reasonable care and skill. We're not responsible for loss that wasn't foreseeable when you bought Pressfort.
• If something we supply, such as the Pressfort plugin, damages your device or other digital content because we didn't use reasonable care and skill, we'll repair the damage or pay you compensation.
• Nothing in these terms affects your legal rights. For advice about them, contact Citizens Advice or your local consumer advice service.

If you're a business:

• We're not responsible for loss of profit, revenue, sales, business or goodwill, for loss or corruption of data (beyond restoring it from our backups where we can), or for any indirect or consequential loss.
• If your site is hacked, the clean-ups, consultation and refunds in sections 7 to 10 are what we'll provide, unless the hack happened because we didn't use reasonable care and skill.
• Our total responsibility to you for each site, for everything in any 12 months, is limited to what you paid us for that site in those 12 months.

Nothing in these terms limits our responsibility for death or personal injury caused by our negligence, for fraud, or for anything else the law doesn't let us limit.

13. Which law applies

These terms are governed by the law of England and Wales, and the courts of England and Wales can deal with any dispute about them. If you're a consumer living in Scotland or Northern Ireland, you can also bring a claim in your local courts. If you're a consumer living outside the UK, you keep any protection that the law where you live gives you and that can't be changed by agreement.

If something goes wrong, please email us first. We'll try to sort it out quickly.

14. Changes and contact

We may update these terms. If a change affects your subscription, we'll email you before it applies, and you can cancel if you don't agree to it.

Questions about these terms? Email hello@getpressfort.com.