Website Maintenance Terms and Conditions
DEFINITIONS
"Service Provider" means D3 Network Ltd trading as D3 Creative
"Client" means the individual or organisation purchasing maintenance services
"Services" means the maintenance and support services as specified in the selected package (Core, Plus, or Max)
"Website" means the Client's single Statamic-based website covered under this agreement, including its staging and production environments only. Statamic installations using multi-site will be reviewed individually and priced separately
"Business Hours" means Monday to Friday, 9:00am to 5:00pm UK local time, excluding UK public holidays.
Business Day" means any day Monday to Friday, excluding UK public holidays.
"Service Commencement Date" means the date on which cleared payment is received by the Service Provider. This is the date the contract begins and the start of the 12-month Contract Year.
"Contract Year" means each successive 12-month period from the Service Commencement Date
"Personal Data" has the meaning given to it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018
"Prepaid Hour Block" means a block of prepaid hours purchased in advance by the Client, as described in clause 4.3.
This agreement is entered into between two businesses. The Client confirms they are entering into this agreement in the course of business and that the Consumer Rights Act 2015 and Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 do not apply.
SERVICE PACKAGES
The package applicable to this agreement is confirmed by the invoice issued to the Client prior to the Service Commencement Date. In the event of any ambiguity, the invoice takes precedence.
Core Package (£1,788 per annum)
12 Statamic CMS, Composer, and NPM updates per year (monthly)
Daily automated Ubuntu server security updates
CMS support via email during Business Hours
Post-update compatibility fixes for Statamic core and its dependencies. Issues arising from custom code will be scoped as a separate billable project
Major version upgrades for Statamic, PHP, Laravel, and their dependencies (including Composer and NPM packages) are included where the upgrade can be applied without modification to custom code. Where the upgrade requires refactoring of custom code or deprecated functionality, the refactoring work will be scoped and quoted as a separate billable project, while the upgrade itself remains included.
If critical or high-severity security patches are released for Statamic outside the scheduled monthly update cycle, they are applied as a priority, typically within one business day
Initial response within 72 Business Hours for issues outside of scheduled updates, including Statamic, hosting, and third-party service issues
Up to 1 hour per month of support (unused hours do not roll over)
Proactive monitoring of the Laravel application framework via Laravel Nightwatch (see Section 15) to identify performance issues and potential problems
Plus Package (£3,588 per annum)
12 Statamic CMS, Composer, and NPM updates per year (monthly)
Daily automated Ubuntu server security updates
CMS support via email during Business Hours
Post-update compatibility fixes for Statamic core and its dependencies. Issues arising from custom code will be scoped as a separate billable project
Major version upgrades for Statamic, PHP, Laravel, and their dependencies (including Composer and NPM packages) are included where the upgrade can be applied without modification to custom code. Where the upgrade requires refactoring of custom code or deprecated functionality, the refactoring work will be scoped and quoted as a separate billable project, while the upgrade itself remains included.
If critical or high-severity security patches are released for Statamic outside the scheduled monthly update cycle, they are applied as a priority, typically within one business day
Initial response within 48 Business Hours for issues outside of scheduled updates, including Statamic, hosting, and third-party service issues
Up to 2 hours per month of support (unused hours do not roll over)
Proactive monitoring of the Laravel application framework via Laravel Nightwatch (see Section 15) to identify performance issues and potential problems
Post-update summary report detailing updates applied and vulnerabilities addressed
Max Package (£7,188 per annum)
12 Statamic CMS, Composer, and NPM updates per year (monthly)
Daily automated Ubuntu server security updates
CMS support via email during Business Hours
Post-update compatibility fixes for Statamic core and its dependencies. Issues arising from custom code will be scoped as a separate billable project
Major version upgrades for Statamic, PHP, Laravel, and their dependencies (including Composer and NPM packages) are included where the upgrade can be applied without modification to custom code. Where the upgrade requires refactoring of custom code or deprecated functionality, the refactoring work will be scoped and quoted as a separate billable project, while the upgrade itself remains included.
If critical or high-severity security patches are released for Statamic outside the scheduled monthly update cycle, they are applied as a priority, typically within one business day
Priority response within 2 Business Hours for issues outside of scheduled updates, including Statamic, hosting, and third-party service issues
Up to 4 hours per month of support (unused hours do not roll over)
Proactive monitoring of the Laravel application framework via Laravel Nightwatch (see Section 15) to identify performance issues and potential problems
Post-update summary report detailing updates applied and vulnerabilities addressed
Management of your CDN including caching rules, security configuration, and regular monitoring
CONTRACT TERM AND PAYMENT
The Service Provider is not currently VAT-registered. All prices are stated as the total amount payable, with no VAT added.
Initial Term: All packages require a 12-month minimum commitment from the Service Commencement Date.
Payment Terms
All packages are billed annually in advance. Invoices are issued prior to each billing period and payment is due within 30 days of the invoice date.
Services will not commence until payment has been received and cleared.
The first maintenance cycle will be carried out within 7 Business Days of the Service Commencement Date.
Where renewal documentation has been agreed but cleared payment is not received by the end of the current Contract Year, Services will pause until payment is received and cleared. The new Contract Year will commence from the date of cleared payment.
Renewal
The Service Provider will contact the Client at least 60 days before the end of the current Contract Year to discuss renewal.
Renewal may be subject to updated Terms and Conditions, pricing, and service inclusions, which will be provided with the renewal notice.
A new invoice will be issued upon agreement to renew.
This agreement does not renew automatically. Continued provision of Services beyond the current Contract Year requires the Client's express agreement to the renewal terms and payment of the renewal invoice.
Service and Price Reviews
The Service Provider reserves the right to review and adjust pricing, service inclusions, and package features at any time.
Any changes will be communicated at least 60 days before renewal, and the Client may choose not to renew under the revised terms.
Changes do not affect the current Contract Year.
Non-Refundable
All payments are non-refundable except where credit is applied toward a package upgrade as described in clause 3.7.
Services will remain available for the remainder of the Contract Year should the Client wish to continue receiving maintenance.
Package Changes
The Client may upgrade to a higher package at any time during the Contract Year.
Upgrades take effect on receipt of payment and begin a new 12-month Contract Year from that date.
A pro-rata credit for the unused portion of the current Contract Year will be applied against the new annual fee.
Package changes do not affect the minimum 12-month commitment described in clause 3.1.
Any package change made during the Contract Year will be subject to the Terms and Conditions in effect at the time of the change.
SCOPE OF SERVICES
Included Services
The Service Provider will provide the services specified in the Client's selected package as detailed in Section 2.
Support Scope
Support covers issues arising outside of scheduled updates, including:
CMS usage and content management queries
Issue resolution and platform troubleshooting
Hosting provider issues
Third-party service issues (e.g CRMs, APIs, connected services)
Where an issue involves an external vendor, the Service Provider will handle communication and coordination on the Client's behalf.
Resolution times vary depending on the complexity of the issue, particularly where external vendors are involved.
Monthly Support Hours
The Core, Plus, and Max packages each include a monthly allocation of support hours as specified in Section 2 (Core: 1 hour, Plus: 2 hours, Max: 4 hours).These hours cover the activities described in clause 4.2.
Unused hours do not roll over to subsequent months.
If a task requires time beyond the monthly allowance, the Client may purchase a Prepaid Hour Block to cover the additional time. Prepaid Hour Blocks are available in blocks of 10 or 20 hours at £125 per hour. Prepaid hours expire 12 months from the date of purchase if unused
Prepaid hours are intended for small development tasks directly related to the maintenance of the Client's website. They are not a substitute for a development project; any sizable development work will be scoped and quoted separately.
Where no hour block is in place, additional time will be invoiced at the standard ad hoc rate of £150 per hour during Business Hours. Out-of-hours work is subject to the rates and conditions set out in Section 8. The Client will be notified and asked to approve any chargeable work before it is carried out.
Service Boundaries
The Services cover keeping your website secure, stable, and up to date - not new development work.
Anything beyond the scope listed in Section 2 will be quoted as a separate project.
UPDATE DEPLOYMENT PROCESS
All Statamic CMS, Composer, and NPM updates follow a three-stage deployment process:
Local: Updates are first applied and tested in a local development environment
Staging: Updates are then deployed to a staging environment for further verification
Production: Once verified, updates are deployed to the live production site and tested again
THIRD-PARTY AND CLIENT CHANGES
Any fixes required as a result of changes made by the Client or a third-party developer are outside the scope of this agreement and will be scoped and quoted separately.
Business Hours SUPPORT
All support is provided during Business Hours only.
Requests received outside Business Hours will be addressed on the next Business Day.
OUT-OF-HOURS SUPPORT
Out-of-hours support is not included in any package and is not guaranteed.
If the Service Provider chooses to assist with an urgent issue outside Business Hours, this is entirely at the Service Provider's sole discretion and does not create any obligation to do so in future.
Any out-of-hours work is chargeable at £200 per hour with a minimum charge of one hour, and will be invoiced separately.
RESPONSE TIMES
Response times apply to all packages as follows:
Core: Initial response within 72 Business Hours
Plus: Initial response within 48 Business Hours
Max: Priority response within 2 Business Hours during Business Hours
Response times indicate when the Service Provider will acknowledge and begin investigating an issue. They do not guarantee resolution within the same timeframe, as resolution times vary depending on the complexity of the issue and any third-party dependencies involved.
SERVER PATCHING
Server security updates are managed through automated daily patching systems across all packages.
Updates are applied automatically when available from Ubuntu's official security repositories.
Manual intervention is included if automated updates fail or require specific configuration.
POST-UPDATE FIXES
Post-update fixes cover standard compatibility issues for Statamic core and its dependencies.
If custom code breaks as a result of an update, this will be assessed, scoped, and quoted as a separate billable project.
Issues arising from deprecated legacy code requiring any refactoring will be assessed and scoped separately.
CLIENT RESPONSIBILITIES
Access
The Client must provide and maintain:
Server access credentials (SSH, control panel)
CMS administrator access
Access to third-party services (CDN, APIs, hosting providers etc.) where applicable
Any other access required to perform the Services
Where the Client fails to provide or maintain the required access, the Service Provider's obligations under this agreement are suspended for the affected period. Services will resume once the necessary access has been restored.
Data Processing Disclosure
The Client, as data controller, is responsible for ensuring their website's privacy policy accurately reflects all data processing activities carried out as part of the Services, including application performance monitoring and the collection of IP addresses and request metadata through server logging, as further described in Sections 15 and 16.
Cookie Compliance
The Client is solely responsible for ensuring their Website complies with applicable cookie, tracking, and privacy legislation in any jurisdiction in which their Website operates, including but not limited to the UK Privacy and Electronic Communications Regulations (PECR), UK GDPR, and the California Consumer Privacy Act (CCPA).
This includes the implementation, configuration, and ongoing maintenance of any cookie consent mechanism.
The Service Provider accepts no liability for the Client's failure to comply with cookie or tracking regulations.
BACKUPS
The Service Provider does not host or maintain Client backups. Backup arrangements are the Client's responsibility, as set out below.
The Client is solely responsible for maintaining their own independent backups of their Website and all associated data.
The Service Provider accepts no liability for data loss arising from the provision of Services where the Client has failed to maintain independent backups as required by Section 13.2.
Backups are typically configured at the server level by the Client's hosting provider, usually as scheduled snapshots, and any associated cost is paid by the Client directly to the hosting provider.
The Service Provider may, at its discretion, take a manual snapshot before applying significant updates as a precautionary measure. This is not a guaranteed service and does not replace the Client's responsibility to maintain their own backups.
Where the Client wishes to enable scheduled hosting-level snapshots or other automated backup services, the Service Provider can assist with setup. Any costs charged by the hosting provider for backup services are payable by the Client.
HOSTING ENVIRONMENT
The Client is responsible for procuring and paying for their own hosting environment.
The Service Provider will advise on minimum hosting requirements and manage/maintain the hosting environment remotely, but does not provide or pay for hosting services.
The Client is responsible for ensuring their hosting environment is sufficiently resourced to run the website reliably (e.g. during traffic bursts or when under heavy load). The Service Provider accepts no liability for issues arising from an under-resourced hosting environment.
THIRD-PARTY SERVICES
The Client is responsible for procuring, paying for, and maintaining subscriptions to all third-party services (CDN, hosting, APIs, etc.).
Monitoring tools used by the Service Provider to deliver the Services are provided at no additional cost to the Client.
The Service Provider will manage and maintain third-party services as part of the selected package but is not responsible for their costs or availability.
The Client is responsible for compliance with the terms and conditions of all third-party services procured by the Client.
Application Monitoring
The Service Provider uses Laravel Nightwatch (Laravel Holdings Inc.) to monitor application performance and stability as part of the Services.
Application monitoring data is processed by Laravel Holdings Inc. within EU datacentres by default. The Client may request US datacentre routing in writing at any time, in which case data will be processed in accordance with Laravel Holdings Inc.'s Data Processing Agreement and applicable cross-border transfer mechanisms. The DPA is available on request.
By accepting these Terms and Conditions, the Client acknowledges Laravel Holdings Inc. as a sub-processor of application data arising from the provision of the Services.
SERVER LOG ACCESS
As part of providing the Services, the Service Provider may access server logs, which may contain personal data such as IP addresses and request metadata.
Server log access is strictly limited to what is necessary to perform the Services. The Service Provider will not retain, copy, or use log data for any purpose beyond the delivery of the Services.
COMMUNICATION
The Client must ensure that the Service Provider can reach them, or a representative with authority to make decisions, within two Business Days of being contacted, particularly when action or approval is required.
Support requests should be submitted via email during Business Hours.
COMPLAINTS PROCEDURE
Any complaints regarding the Services should be submitted in writing via email.
The Service Provider will acknowledge receipt of a complaint within 2 Business Days and aim to provide a full response within 10 Business Days.
If the Client is not satisfied with the response, the matter may be escalated in accordance with the Dispute Resolution process set out in Section 31.
SITE COMPATIBILITY
The Client acknowledges that their Website must be running the current major version of Statamic to qualify for maintenance services.
Sites below the current major version are not eligible for maintenance until they have been upgraded.
The Client may arrange this upgrade independently or commission it as a separate project with the Service Provider prior to the commencement of Services.
Where, during the Contract Year, the Website ceases to run a supported version of Statamic and the Client does not commission the required upgrade, the Service Provider's obligations to provide updates and post-update fixes are suspended for the affected period. Other Services (such as server patching and support) will continue where technically possible. No partial refund will be issued.
TERMINATION
Early Termination by Client
The Client may terminate this agreement at any time by providing written notice via email.
As all payments are made annually in advance and are non-refundable, Services will continue until the end of the current Contract Year unless the Client instructs otherwise.
No partial refund will be issued for the remaining term.
Where the Client takes the Website offline or otherwise renders Services impossible to deliver, the Service Provider's obligation to provide further Services ends. No partial refund will be issued.
Termination by Service Provider
The Service Provider may terminate this agreement with immediate effect if:
The Client engages in abusive or threatening behaviour towards Service Provider staff
The Client uses the Website for illegal purposes
For all other material breaches, the Service Provider will provide written notice specifying the breach. If the breach remains unremedied after 14 days, the Service Provider may terminate the agreement with immediate effect.
Termination for Convenience
The Service Provider may terminate this agreement for any reason by giving the Client 60 days' written notice via email. Such reasons may include, but are not limited to:
the Service Provider's inability to continue delivering the Services to the required standard;
the Services becoming commercially or operationally unviable;
material changes to the Service Provider's business, capacity, or service offering;
changes in the technology stack or third-party platforms on which the Services rely;
personal circumstances affecting the Service Provider's ability to deliver the Services.
Where the Service Provider terminates under this clause, a pro-rata refund will be issued for the unused portion of the Contract Year, calculated from the end of the notice period.
During the notice period, the Service Provider will continue to provide the Services as normal and will, where reasonable, assist the Client with handover to a replacement provider.
Effect of Termination
Where Services end immediately under clauses 20.2.1 or 20.2.2, the Service Provider will provide reasonable assistance with transition if required. Where the Client holds a prepaid hour block, those hours will be used first. Any time beyond the available balance is chargeable at £150 per hour.
The Client is responsible for revoking the Service Provider's access to the website, server, and any third-party services after a reasonable handover period.
Any unused prepaid hours at the end of the Contract Year, or upon termination, are forfeited and not refundable in cash.
Change of Control
The Client shall notify the Service Provider via email within 30 days of any change of control, acquisition, merger, sale of the Client's business, or sale of the Website to a separate legal entity.
Following such notification, the Service Provider may, at its sole discretion:
Continue providing the Services under the existing terms;
Propose revised terms or pricing to take effect at the next renewal; or
Terminate the agreement on 30 days' written notice.
Where the Service Provider terminates under clause 20.4.2.3, a pro-rata refund will be issued for the unused portion of the Contract Year, calculated from the end of the notice period.
Where the Client wishes to assign or transfer this agreement to a successor entity, the successor entity must agree in writing to be bound by these Terms and Conditions before Services continue. This requirement operates alongside the assignment provisions in Section 27.
LIMITATION OF LIABILITY
Service Level
The Service Provider will perform all Services with reasonable skill and care expected of a professional web development agency.
Limitation
The Service Provider's total liability under this agreement shall not exceed the total fees paid by the Client in the current Contract Year.
Excluded Liability
The Service Provider shall not be liable for:
Loss of profits, revenue, or business opportunity
Loss of data, where the Client has failed to maintain independent backups as required by Section 13.
Indirect or consequential losses
Issues arising from third-party services or hosting providers outside the Service Provider's control
Downtime caused by hosting provider failures
Issues caused by the Client or third parties
Force majeure events
Costs of third-party services (hosting, CDN, APIs, etc.)
Security breaches, hacking attacks, zero-day exploits, or supply chain attacks outside the scope of the scheduled maintenance Services.
Performance issues caused by Client's content, traffic spikes, or hosting limitations
Website Availability
Whilst the Service Provider will use reasonable endeavours to maintain Website stability and performance, no uptime guarantee or SLA is provided.
All packages include a response time during Business Hours, with response times varying by package (see Section 9), but this does not guarantee zero downtime.
INTELLECTUAL PROPERTY
Existing IP
All intellectual property rights in the Website and its content remain the property of the Client.
Tools and Methods
The Service Provider retains all rights to reusable tools, methodologies, and code libraries developed during the provision of Services.
Site-specific code written solely for the Client's website remains the property of the Client. The Client receives a non-exclusive licence to use any reusable tools or libraries incorporated into their website.
Third-Party Software
Statamic CMS and other third-party software are subject to their respective licence agreements.
CONFIDENTIALITY
Both parties agree to keep confidential any proprietary or sensitive information disclosed during the provision of Services.
This obligation does not apply to information that:
Is publicly available
Was known before disclosure
Is required to be disclosed by law
DATA PROTECTION
Both parties will comply with applicable data protection legislation, including the UK GDPR and Data Protection Act 2018, in respect of their own respective obligations under this agreement.
The Service Provider will process personal data only as necessary to provide the Services and in accordance with the Client's instructions.
The Service Provider maintains appropriate technical and organisational measures to protect data security.
The Service Provider's use of third-party application monitoring tools and access to server logs in the course of providing the Services is described in Sections 15 and 16 respectively. Both sections form part of the Service Provider's data protection obligations under this agreement.
The Client retains direct control over their own infrastructure (hosting, server, CMS, third-party services). The Service Provider accesses these systems under credentials provided by the Client, and the Client remains the data controller in respect of all data processed by or through their Website.
The Service Provider will notify the Client without undue delay, and in any event within 48 hours, on becoming aware of any personal data breach affecting data processed in the course of the Services.
FORCE MAJEURE
Neither party shall be liable for failure to perform obligations due to circumstances beyond reasonable control, including but not limited to natural disasters, war, terrorism, strikes, or failure of third-party infrastructure.
GENERAL PROVISIONS
Entire Agreement
These Terms and Conditions, together with the Client's selected package details, constitute the entire agreement between the parties.
Amendments
The Client receives a copy of these Terms and Conditions with their invoice.
The Service Provider will honour those terms for the duration of the Contract Year, regardless of any subsequent changes to the current Terms and Conditions.
If the terms have been updated at the time of renewal, the Client will be notified of any changes with their renewal notice.
ASSIGNMENT
The Client may not assign or transfer this agreement without the Service Provider's written consent.
WAIVER
Failure to enforce any provision of this agreement does not constitute a waiver of that provision.
SEVERABILITY
If any provision is found to be invalid or unenforceable, the remaining provisions shall remain in full effect.
NOTICES
All notices must be in writing and sent via email.
DISPUTE RESOLUTION
In the event of a dispute, both parties agree to attempt to resolve the matter informally in the first instance by written (email) notice to the other party.
If the dispute cannot be resolved informally within 14 days, both parties agree to attempt resolution through mediation before commencing any legal proceedings.
Nothing in this clause prevents either party from seeking urgent injunctive or interim relief from the courts where necessary.
GOVERNING LAW
This agreement is governed by the laws of England and Wales, and both parties submit to the exclusive jurisdiction of the English courts.
ACCEPTANCE
Before any work begins, I ask all clients to sign a copy of these Terms and Conditions. This confirms you've had the chance to read and agree to everything before we get started