Legal

Terms & Conditions

These terms govern your use of gratiagroup.co.uk and, together with a signed Statement of Work, your engagement of Gratia Group for services. Gratia Group is the registered trading name of Individual Entrepreneur Gratia Group, identification number 131293036, registered in Georgia (the country). Registered office: Telavi, Kakheti, Georgia, 2200.

What we provide

Gratia Group provides Microsoft 365 security and compliance assessments, managed compliance services, and managed IT services, delivered remotely.

Software licensing

Gratia Group does not sell, resell, or act as a licensing intermediary for Microsoft 365 or any other third-party software. Clients procure and retain ownership of their own Microsoft 365 licensing directly from Microsoft or their existing licensing partner. Gratia Group's fees cover advisory work, assessment, security configuration, and management of the client's own tenant, not the underlying licence cost, which is billed separately by Microsoft.

Hosting

This website and related hosting infrastructure are provided by Verpex, a third-party hosting provider, with servers located in Frankfurt, Germany. Gratia Group does not operate its own hosting infrastructure.

Use of this site

You may browse this site and use the contact and booking forms for genuine business enquiries. You may not scrape, reproduce, or republish site content without permission, or attempt to interfere with the site's operation.

No advice given by the website

Nothing on this site constitutes legal, tax, insurance, or accounting advice, and nothing on this site is a binding quote. Pricing shown is indicative and subject to confirmation after a discovery call.

Scope and professional boundaries

Gratia Group's assessments are a management tool prepared for the client's internal use. They are not an independent audit, certification, or assurance engagement, and confer no certification or conformity status. Gratia Group does not provide legal, tax, or insurance advice, and expresses no opinion on a client's overall legal compliance.

Governing law

These terms, and any dispute arising from them, are governed by the laws of Georgia. Client engagements under a signed Statement of Work may specify a different governing law where agreed in writing.

Liability

The site is provided "as is". Gratia Group is not liable for indirect or consequential loss arising from use of the site, to the extent permitted by law. Liability under a signed client engagement is governed by the liability clause of the Master Services Agreement, not by these website terms.

Privacy Policy

Controller. Gratia Group is the registered trading name of Individual Entrepreneur Gratia Group, identification number 131293036, registered in Georgia (the country). Registered office: Telavi, Kakheti, Georgia, 2200. Contact: info@gratiagroup.co.uk.

What we collect

When you book an assessment, submit a contact form, or email us, we collect your name, email address, phone number, company name and the content of your message. Where you engage us for services, we may also process technical and configuration data within your Microsoft 365 tenant, strictly as needed to deliver the engagement and only with your authorisation. Our website analytics may collect device and usage information. See the Cookie Notice.

Where it's hosted and processed

This website is hosted by Verpex, a third-party hosting provider, on servers located in Frankfurt, Germany. Enquiries you submit through this site are processed there before reaching Gratia Group. Once you engage Gratia Group for services, your data is also processed directly by the founder from Georgia.

International transfers, in plain terms

UK, EU and South African privacy law treats moving personal data to a country without an equivalent legal standard of protection as a "restricted transfer" and requires a specific safeguard to be in place before that happens. Germany is in the EU, so hosting your enquiry there doesn't trigger this. Georgia, where Gratia Group's founder is based, does not currently hold that recognition from the UK or EU, so it does trigger it.

In practice, this means: where a UK or EU client's data reaches Gratia Group's founder in Georgia, we rely on the UK International Data Transfer Agreement and the EU Standard Contractual Clauses as the safeguard, standard, pre-approved contract terms published by the UK and EU regulators for exactly this situation. For South African clients, the equivalent safeguard is provided under section 72 of POPIA.

Why we collect it

To respond to enquiries, schedule assessments, deliver contracted services, and meet our own accounting and legal obligations. We do not sell personal data, and we do not use it for advertising.

Who we share it with

We do not sell or rent personal data to third parties. Limited disclosure may occur to our hosting provider (Verpex), to subcontractors engaged under signed confidentiality and data-processing agreements, to our own professional advisers (accountant, lawyer, insurer) under confidentiality, or where required by law.

Retention

If you make an enquiry and don't go on to sign an agreement with us, we delete your enquiry data within 30 days. If you become a client under a signed agreement, we retain your records for up to 5 years from the end of the engagement, in line with our accounting and contractual obligations.

Your rights

Subject to the law that applies to you, you may have the right to access, correct, delete, or restrict the use of your personal data, and to object to certain processing. Contact info@gratiagroup.co.uk to exercise these rights.

Refund Policy

This policy sets out cancellation and refund terms for Gratia Group's services. It reflects standard practice for professional and managed services, where the primary output is expert time and delivered work rather than a physical product.

Security & Compliance Assessments (one-off engagements)

• Before work begins: full refund of any deposit paid, less any discovery-call time already delivered.
• After work has started, before the report is delivered: a pro-rated refund based on the proportion of the engagement not yet delivered.
• After the scored report and roadmap have been delivered: no refund. The deliverable has been produced and transferred. If you believe the report is materially incomplete or inaccurate against the agreed scope, contact us first, see "Dissatisfaction" below.

Managed IT and Managed Compliance (recurring retainers)

• Month-to-month plans: cancel with 30 days' written notice. You are billed for the notice period; no further charges apply after it ends. No refund is issued for the current billing period once service has commenced for that period.
• 12-month plans, early termination: a client terminating a 12-month agreement early for convenience must give 60 days' written notice and pay an early-termination fee equal to two months' recurring fee, or 25% of the fees remaining on the contract, whichever is lower. This covers onboarding and offboarding costs and does not apply if Gratia Group is in uncured material breach of the agreement, in which case the client may terminate without a fee.

Dissatisfaction with delivered work

If you're not satisfied with work delivered under an active engagement, tell us. Our first commitment is to understand what fell short and correct it at no additional charge, within the scope originally agreed. A refund is considered only where we are unable to remedy a genuine failure to deliver the agreed scope, not simply on the basis of a difference in expectation about findings or recommendations.

What isn't covered

Third-party costs incurred on your behalf (where applicable) are non-refundable once paid to the third party. Refunds are not available where an engagement is cancelled due to your breach of the signed agreement, including non-payment or failure to provide access or information reasonably required to deliver the service.

How to request a refund or cancellation

Email info@gratiagroup.co.uk with your engagement reference. We aim to acknowledge within 2 business days and resolve within 10 business days.

Cookie Notice

This site uses a small number of cookies.

You can change your preference at any time using the cookie banner, or by clearing cookies in your browser settings. If Gratia Group adds new analytics or marketing tools in future, this table will be updated to reflect them before they go live.

Fair Use Policy

This policy applies to clients on a Managed IT or Managed Compliance retainer. It exists so that "unlimited" support commitments stay sustainable for both sides.

What's covered

Retainer plans include help desk support, monitoring response, and the scope described in your Statement of Work, used for normal day-to-day operational needs.

What's outside fair use

• Requests that amount to a new project rather than day-to-day support (these are quoted separately).
• Support for software or hardware outside the agreed environment.
• Volumes of requests significantly and repeatedly above the norm for your user count.

If usage is consistently outside fair use, we'll raise it with you directly and agree an adjusted scope or price before making any change, never as a surprise on an invoice.