Terms of Service & Disclaimer Statutory authorization & warranty covenants.

1. Operator Identity & Merchant of Record

OhmCode.uk is engineered, owned, and operated by Tarquin Barnsby, trading as a sole proprietor based in the United Kingdom (TarquinBarnsby.com).

All commercial payments and subscriptions are processed securely via Stripe Payments UK, Ltd. Credit and debit card statement descriptors will appear as OHMCODE or TARQUINBARNSBY.

2. Computer Misuse Act 1990 & Target Authorization Covenant

Under the UK Computer Misuse Act 1990 (and equivalent international cyber legislation), unauthorized access, port scanning, or security fuzzing of computer material without explicit authorization is a criminal offence.

Binding Customer Warranty: As a strict condition of using OhmCode.uk, you expressly warrant, represent, and covenant that for every domain, URL, IP address, web application, or repository submitted to OhmCode:

• You are the registered owner and lawful administrator of the target asset; OR
• You have obtained explicit, legally binding written authorization from the lawful owner of the target asset permitting automated DAST vulnerability audits, TLS cipher probes, and port testing.

Indemnification Clause: You agree to fully indemnify, defend, and hold harmless Tarquin Barnsby, OhmCode.uk, and its affiliates from and against any claims, regulatory actions, damages, liabilities, losses, costs, or legal expenses resulting from any scan performed on unauthorized targets.

3. Disclaimer of All Warranties ("AS IS" / "AS AVAILABLE")

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE OHMCODE.UK SERVICE, AUDIT REPORTS, OHMHEAL REMEDIATION SCRIPTS, OHMGUARD PROXY FILTERS, AND UK CYBER ESSENTIALS PROOF CERTIFICATES ARE PROVIDED STRICTLY ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE.

TARQUIN BARNSBY AND OHMCODE.UK EXPRESSLY DISCLAIM ALL IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, ACCURACY, AND NON-INFRINGEMENT. OHMCODE DOES NOT WARRANT OR GUARANTEE THAT:

• The service will discover 100% of existing or future vulnerabilities or security defects;
• Target web applications or codebases will be impenetrable to cyber attacks or zero-day exploits;
• Remediation code generated by OhmHeal or AI prompt exporters will be completely error-free or compatible with all third-party dependencies;
• Compliance proof certificates guarantee formal statutory certification or audit immunity by regulatory bodies (such as Ofsted, NHS, or the Information Commissioner's Office).

4. Limitation of Liability & Consequential Damage Cap

TO THE MAXIMUM EXTENT PERMITTED BY THE LAWS OF ENGLAND AND WALES (INCLUDING THE CONSUMER RIGHTS ACT 2015):

• No Consequential Damages: IN NO EVENT SHALL TARQUIN BARNSBY OR OHMCODE.UK BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, PUNITIVE, OR EXEMPLARY DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, LOSS OF REVENUE, LOSS OF DATA, LOSS OF GOODWILL, BUSINESS INTERRUPTION, REGULATORY FINES, OR SECURITY BREACH DAMAGES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
• Strict Aggregate Liability Cap: TOTAL AGGREGATE LIABILITY OF TARQUIN BARNSBY FOR ALL CLAIMS, DISPUTES, OR CAUSES OF ACTION OF ANY KIND ARISING OUT OF OR RELATED TO THIS AGREEMENT OR THE SERVICE SHALL BE STRICTLY LIMITED TO THE TOTAL FEES ACTUALLY PAID BY YOU TO OHMCODE IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO LIABILITY (OR £100 GBP, WHICHEVER IS GREATER).

5. Customer Responsibility for Code Review & Deployment

All automated code patches, .env extractions, middleware integrations, and .cursorrules generated by OhmHeal or the AI Project Manager bridge are recommendations provided for developer convenience. The customer bears sole and absolute responsibility for reviewing, testing, and verifying all source code changes in a staging environment prior to production deployment.

6. Commercial Subscriptions, Billing & Cancellation

• Billing Cycle: Subscriptions are billed in advance on a recurring Monthly or Annual cycle via Stripe.
• Cancellation: You may cancel your subscription at any time with 1 click via the Customer Billing Portal. Cancellation takes effect at the end of the current paid billing period with zero cancellation fees.
• Refunds: Due to the instant delivery of computational resources, scan infrastructure, and downloadable proof certificates, payments are non-refundable once the billing period has commenced, except as required by UK statutory consumer law.

7. Governing Law & Exclusive Jurisdiction

These Terms of Service and any dispute, controversy, or claim arising out of or in connection with them (including non-contractual disputes) shall be governed by and construed in accordance with the Laws of England and Wales. The Courts of England and Wales shall have exclusive jurisdiction to resolve any dispute.

8. Independent Technical Readiness Assessment & Trademark Notice

"Cyber Essentials" and "Cyber Essentials Plus" are registered certification schemes and trademarks of the National Cyber Security Centre (NCSC) / Crown Copyright and are managed by the IASME Consortium. "NHS" and "NHS DSPT" are trademarks/standards of NHS England and the Department of Health and Social Care. "Ofsted" and "NMS 24" refer to statutory standards published by the Office for Standards in Education, Children's Services and Skills and the Department for Education. "ISO/IEC 27001" is a standard published by the International Organization for Standardization (ISO).

OhmCode.uk is an independent developer security and application resistance platform providing automated technical diagnostics, static source code reviews (SAST), and dynamic application security testing (DAST) aligned with NCSC Cyber Essentials, Ofsted NMS 24 safeguarding guidelines, NHS DSPT clinical informatics baselines, and the ICO Age Appropriate Design Code.

OhmCode.uk is not an accredited Certification Body (CB) or government regulatory inspectorate. OhmCode reports, cryptographic SHA-256 proofs, and telemetry are engineered for internal engineering verification, pre-audit readiness diagnostics, and continuous perimeter monitoring. Official statutory certifications, DSPT submissions, or Ofsted inspections must be formally filed through the respective government bodies or accredited certification authorities.

10. Contact & Inquiries

For legal notices, compliance disclosures, or SLA inquiries, contact the operator at [email protected].