Version 1.0 · Effective 30 April 2026 · Jurisdiction: England & Wales
Governed by UK GDPR, Data Protection Act 2018, PECR
2.1 The Platform is intended solely for business use. By registering, you represent that you are acting on behalf of a business entity and have authority to bind that entity to these Terms.
2.2 You must provide accurate, complete, and current registration information. You are responsible for maintaining the confidentiality of your login credentials and for all activity under your account.
2.3 You must notify us immediately at legal@autocoshh.com if you suspect any unauthorised use of your account.
2.4 We reserve the right to refuse or terminate accounts at our discretion, including for suspected breach of these Terms.
3.1 Access to the Platform requires a paid Subscription. Current Subscription tiers and pricing are published on our website and may be updated on reasonable notice.
3.2 Subscriptions are billed monthly or annually in advance as selected at checkout. All fees are in GBP and are exclusive of VAT unless otherwise stated. VAT will be applied at the applicable UK rate.
3.3 Payment is due immediately upon subscription and on each renewal date. We use a third-party payment processor; by providing payment details you authorise recurring billing.
3.4 If payment fails, we may suspend access to the Platform after reasonable notice. You remain liable for all amounts accrued.
3.5 All fees are non-refundable except as expressly stated in clause 11 (Termination) or as required by applicable law.
3.6 We may increase fees on not less than 30 days' written notice prior to the start of a new billing period.
4.1 Subject to payment and compliance with these Terms, we grant the Customer a non-exclusive, non-transferable, revocable licence to access and use the Platform solely for the Customer's internal business compliance purposes during the Subscription term.
4.2 The number of Authorised Users is determined by the Subscription tier. The Customer must not share login credentials between individuals.
4.3 The Customer may use Compliance Outputs internally for the purpose of managing their regulatory obligations under CLP, REACH, COMAH, DSEAR, and related UK/EU legislation.
The Customer must not, and must ensure Authorised Users do not:
6.1 The Customer retains all ownership and intellectual property rights in Customer Data. By uploading Customer Data, the Customer grants us a limited licence to process, store, and analyse that data solely to provide the Platform and improve our services.
6.2 The Customer represents and warrants that it has all necessary rights and permissions to upload the SDS documents and other data it provides, and that such data does not infringe any third-party rights.
6.3 We retain all intellectual property rights in the Platform, including its underlying technology, algorithms, regulatory rule logic, compliance engine, software, and documentation. Nothing in these Terms transfers any such rights to the Customer.
6.4 We may use anonymised and aggregated data derived from Customer Data to improve the Platform, provided such data cannot be used to identify the Customer or any individual.
7.3 Compliance Outputs must NOT be relied upon as a substitute for: professional legal advice from a qualified solicitor; qualified HSE, EHS, or chemical regulatory consultancy; official guidance from the Health and Safety Executive (HSE); official guidance from the Environment Agency (EA) or SEPA; or any other competent regulatory authority.
7.4 The Customer is solely responsible for verifying all Compliance Outputs against current legislation; ensuring their site operations meet all applicable legal obligations; and engaging qualified professionals before making compliance decisions.
7.5 Regulatory requirements change. AutoCOSHH makes reasonable efforts to keep its compliance engine current but makes no warranty that it reflects the latest law. See the full Regulatory Disclaimer below.
8.1 We warrant that we will provide the Platform with reasonable skill and care and that the Platform will materially conform to its published documentation during the Subscription term.
8.2 We do not warrant that the Platform will be uninterrupted, error-free, or free from latency. We will use commercially reasonable efforts to maintain 99% uptime, excluding scheduled maintenance.
8.3 To the maximum extent permitted by applicable law, all other warranties, conditions, or terms (whether express, implied, or statutory) — including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement — are hereby excluded.
8.4 The Customer warrants that it has obtained all necessary consents to upload the SDS documents and data provided to the Platform, and that using the Platform will not breach any applicable law or third-party agreement.
9.1 Nothing in these Terms excludes or limits either party's liability for: (a) death or personal injury caused by negligence; (b) fraud or fraudulent misrepresentation; or (c) any other liability that cannot lawfully be excluded or limited.
9.2 Subject to clause 9.1, in no event shall AutoCOSHH be liable for:
9.3 Subject to clause 9.1, AutoCOSHH's total aggregate liability to the Customer under or in connection with these Terms shall not exceed the greater of: (a) the total fees paid by the Customer in the 12 months immediately preceding the event giving rise to the claim; or (b) £500.
9.4 The parties acknowledge that the limitations in this clause reflect a reasonable allocation of risk and that AutoCOSHH would not have entered into these Terms otherwise.
10.1 Each party agrees to keep the other's Confidential Information strictly confidential and not to disclose it to any third party without the disclosing party's prior written consent, except as required by law or regulatory authority.
10.2 Each party may disclose Confidential Information only to those employees, contractors, or advisors who need to know it for the purposes of these Terms and who are bound by equivalent confidentiality obligations.
10.3 These obligations do not apply to information that: (a) is or becomes publicly available without breach; (b) the receiving party already knew; (c) is independently developed; or (d) must be disclosed by law.
11.1 These Terms commence on the date the Customer registers for the Platform and continue until the Subscription is terminated.
11.2 Either party may terminate by providing written notice prior to the end of the current billing period. Termination takes effect at the end of the paid period.
11.3 We may terminate or suspend the Customer's access immediately on written notice if: (a) the Customer materially breaches these Terms and fails to remedy the breach within 14 days of notice; (b) the Customer becomes insolvent; or (c) the Customer engages in fraudulent or unlawful conduct.
11.4 On termination: (a) all licences granted under these Terms cease; (b) the Customer must stop using the Platform; (c) we will make Customer Data available for export for 30 days following termination, after which it will be securely deleted.
11.5 Clauses 6, 7, 8, 9, 10, 12, and 13 survive termination.
12.1 We may update these Terms from time to time. We will provide not less than 30 days' notice of material changes via email or in-platform notification.
12.2 Your continued use of the Platform after the effective date of changes constitutes acceptance of the updated Terms. If you do not accept the changes, you may terminate your Subscription prior to the effective date.
13.1 These Terms and any dispute or claim arising out of or in connection with them shall be governed by and construed in accordance with the laws of England and Wales.
13.2 Each party irrevocably agrees that the courts of England and Wales shall have exclusive jurisdiction to settle any dispute or claim arising out of or in connection with these Terms.
13.3 Before commencing legal proceedings, both parties agree to attempt to resolve any dispute through good faith negotiation for a period of 30 days.
AutoCOSHH is a business operating from Bedford, England, United Kingdom. For any questions about this Privacy Policy or how we handle your personal data, contact privacy@autocoshh.com.
Account & Identity: full name and job title, business email, company name and address, optional phone number.
Payment: billing name and address. Card numbers are processed and stored by our payment provider — we do not store them.
Usage & Technical: IP address, device and browser, pages viewed, features used, error logs.
Customer Content: SDS documents and uploaded files may contain personal data (e.g. supplier or employee names). The Customer is the data controller for this content; AutoCOSHH acts as a data processor. A DPA is available on request.
| Purpose | Lawful basis (UK GDPR) | Retention |
|---|---|---|
| Provide and manage the Platform | Contract (Art. 6(1)(b)) | Subscription + 30 days |
| Process payments | Contract (Art. 6(1)(b)) | 7 years (legal/tax) |
| Service notifications | Contract (Art. 6(1)(b)) | Subscription duration |
| Marketing emails | Consent (Art. 6(1)(a)) | Until consent withdrawn |
| Legal obligations | Legal obligation (Art. 6(1)(c)) | 6–7 years |
| Usage analysis | Legitimate interests (Art. 6(1)(f)) | Aggregated; 2 years |
| Support requests | Legitimate interests (Art. 6(1)(f)) | 3 years |
| Fraud prevention & security | Legitimate interests (Art. 6(1)(f)) | 3 years |
We do not sell personal data. We share data only with:
We store and process data within the UK and/or the EEA. If we need to transfer data outside the UK/EEA, we will ensure adequate safeguards are in place (UK IDTAs or EU SCCs).
In the event of a personal data breach that poses a risk to individuals, we will notify the ICO within 72 hours and affected individuals without undue delay.
You have the rights of access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent. To exercise any of these, contact privacy@autocoshh.com. We will respond within one calendar month.
You may also lodge a complaint with the Information Commissioner's Office at ico.org.uk or 0303 123 1113.
The Platform is not directed at individuals under 18. We do not knowingly collect personal data from children.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-platform notice with at least 14 days' advance notice.
Cookies are small text files placed on your device when you visit a website or use a web application. They allow us to recognise your device and store certain information about your preferences or actions.
| Category | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Authentication, security, core functionality. Cannot be disabled. | Session |
| Functional / Preferences | Remember your settings and preferences. | 1 year |
| Analytics | Understand how users interact with the Platform. No personal data shared externally. | 2 years / 24h |
| Marketing | We do not currently use marketing or advertising cookies. | N/A |
Strictly necessary cookies do not require consent. All other cookies require your prior consent. Use the cookie banner to accept all, reject non-essential, or customise by category. You can change preferences at any time via the cookie settings link in the footer.
Where we use third-party analytics tools, those providers may set their own cookies. We do not permit third-party advertising cookies on the Platform.
AutoCOSHH is designed to assist qualified HSE and compliance professionals in managing their SDS libraries and understanding the regulatory implications of the chemical substances they handle. It is not a substitute for professional judgement.
Compliance Outputs are intended to be reviewed and interpreted by qualified HSE managers, registered chemical or process safety engineers, certified environmental health officers, qualified regulatory affairs professionals, and solicitors or barristers specialising in environmental or H&S law. They should NOT be used by unqualified individuals to make final compliance determinations, submit regulatory notifications, or certify legal compliance.
AutoCOSHH does not warrant, represent, or guarantee that:
AutoCOSHH's liability for reliance on Compliance Outputs is limited as set out in Clause 9 of the Terms of Use. By using the Platform, you accept that AutoCOSHH cannot be held liable for regulatory enforcement, prosecution, fines, or penalties arising from your compliance decisions.
Report any error in a Compliance Output to support@autocoshh.com. We investigate confirmed errors promptly.
AutoCOSHH may be used only for lawful business compliance purposes — managing SDS libraries and chemical compliance obligations within your organisation.
Report misuse of the Platform to legal@autocoshh.com.
Breach of this AUP may result in immediate suspension or termination, withholding of refunds, and reporting to relevant authorities where unlawful conduct is involved.