DRAFT — Subject to solicitor review before publication
Acceptable Use Policy
Last updated: 1 April 2026
This Acceptable Use Policy (“AUP”) governs your use of the Licet construction compliance platform (“Service”). This AUP forms part of our Terms of Service and applies to all Users and Organisations.
1. Permitted Use
The Service is designed and licensed exclusively for construction compliance management. Permitted uses include:
- Managing and tracking worker competency records, certifications, and training.
- Conducting and recording site inspections, audits, and safety checks.
- Capturing digital signatures for compliance sign-offs and acknowledgements.
- Recording site attendance via clock-in/clock-out with GPS verification.
- Generating compliance reports, dashboards, and analytics for your Organisation.
- Storing and managing construction-related documents such as risk assessments, method statements, and construction phase plans.
- Receiving and managing automated expiry alerts and compliance notifications.
2. Prohibited Activities
You must not use the Service for any of the following purposes. Any violation may result in immediate suspension or termination of your account.
2.1 Unauthorised Access
- Attempting to access another Organisation’s data, accounts, or systems.
- Attempting to bypass, disable, or circumvent any security feature of the Service, including Row Level Security, MFA, or role-based access controls.
- Using automated tools, scripts, or bots to access the Service without our prior written consent.
- Probing, scanning, or testing the vulnerability of the Service or any related infrastructure.
2.2 Data Misuse
- Scraping, harvesting, or bulk-extracting data from the Service by automated means.
- Uploading, storing, or processing data that is not related to construction compliance management.
- Storing sensitive personal data beyond what is necessary for compliance purposes (e.g., detailed medical records, financial records, or national insurance numbers).
- Attempting to modify, delete, or tamper with immutable compliance records or the audit trail.
2.3 Credential Abuse
- Sharing your login credentials with any other person. Each User must have their own individual account.
- Creating accounts for fictitious persons or using another person’s identity.
- Attempting to disable or circumvent the mandatory MFA requirement.
2.4 Harmful Content and Behaviour
- Uploading or transmitting malicious software, viruses, or any code designed to disrupt, damage, or limit the functionality of the Service.
- Uploading illegal, defamatory, obscene, or otherwise objectionable content.
- Using the Service to harass, threaten, or intimidate any person.
- Using the Service in any way that violates applicable UK law or regulations.
2.5 Service Integrity
- Interfering with or disrupting the Service, servers, or networks connected to the Service.
- Imposing an unreasonable or disproportionately large load on our infrastructure.
- Reselling, sublicensing, or redistributing access to the Service without our written consent.
- Reverse-engineering, decompiling, or disassembling any aspect of the Service.
3. Account Security Requirements
All Users are required to maintain the security of their accounts by adhering to the following requirements:
3.1 Multi-Factor Authentication (MFA)
MFA is mandatory for all accounts without exception. We support authenticator apps (TOTP) and SMS-based verification. You must not attempt to disable or bypass MFA.
3.2 Password Requirements
- Minimum 8 characters in length.
- Must include a combination of uppercase letters, lowercase letters, numbers, and special characters.
- Must not be a commonly used or previously breached password.
- Must not be shared with any other person or reused across services.
3.3 No Credential Sharing
Each person who accesses the Service must have their own individual account. Sharing of login credentials is strictly prohibited. If you need to grant access to an additional team member, create a new user account with the appropriate role and permissions.
4. Reporting Violations
If you become aware of any violation of this Acceptable Use Policy, or any security vulnerability in the Service, please report it immediately to:
- Email: security@licet.co.uk
- For urgent security issues, email support@licet.co.uk with “URGENT: Security” in the subject line.
We will investigate all reports promptly and in confidence. We will not take action against anyone who reports a violation in good faith.
5. Consequences of Breach
If we determine that you have breached this Acceptable Use Policy, we may take one or more of the following actions at our sole discretion:
- Warning: Issue a written warning requiring you to cease the prohibited activity immediately.
- Suspension: Temporarily suspend your account or specific functionality pending investigation.
- Termination: Permanently terminate your account and access to the Service without refund.
- Data Preservation: Preserve and, if required, disclose data related to the breach to law enforcement or regulatory authorities.
- Legal Action: Pursue any available legal remedies, including seeking damages and injunctive relief.
The severity of the action taken will be proportionate to the nature and severity of the breach. Where possible, we will provide notice before taking action, except where immediate action is necessary to protect the Service or other Users.
6. Changes to This Policy
We may update this Acceptable Use Policy from time to time. We will notify you of material changes by email and/or by posting a prominent notice within the Service at least 30 days before the changes take effect.
7. Contact Us
If you have any questions about this Acceptable Use Policy, please contact us:
- Email: legal@licet.co.uk
- Post: Licet (pending Ltd formation), Wirral, Merseyside. Registered address to be confirmed.