HALOPASS TERMS AND CONDITIONS Last updated: 26 June 2026 Website: halopass.bluestoneintegrations.uk Platform: HaloPass Provider: Bluestone Integrations Limited Technology Partner: Dalas Technologies 1. Introduction These Terms and Conditions govern access to and use of HaloPass, a digital staff verification platform made available by Bluestone Integrations Limited. HaloPass is designed to help businesses create digital staff profiles, manage authorised employees, contractors or representatives, provide QR-based or link-based verification pages, and allow customers or third parties to check whether a person appears as an authorised representative of the relevant business before granting access to homes, offices, managed properties, customer sites or other locations. HaloPass is a product of Bluestone Integrations Limited, developed in association with Dalas Technologies. By submitting a trial request, creating an account, accessing the platform, uploading staff information, subscribing to a plan, upgrading a plan, using a QR code, using a verification link, or otherwise using any HaloPass service, you agree to these Terms and Conditions. If you are using HaloPass on behalf of a company, organisation, partnership, charity, public body or other legal entity, you confirm that you have authority to accept these Terms on behalf of that organisation. 2. Definitions In these Terms: “Bluestone”, “we”, “us” or “our” means Bluestone Integrations Limited. “HaloPass” means the digital staff verification platform, landing page, client portal, dashboard, QR verification tools, verification links, staff profile management tools, subscription tools, APIs, related services and associated software or functionality provided under the HaloPass brand. “Customer”, “you” or “your” means the business, company, organisation or legal entity that submits a trial request, creates an account, subscribes to a plan or uses HaloPass. “Client Portal” means the secure online portal through which a Customer may manage its HaloPass account, staff profiles, verification settings, billing access, plan usage and related functions. “Staff Member” means any employee, contractor, agent, representative, worker, technician, cleaner, carer, driver, security worker, maintenance worker, field worker, visitor or other person whose information is uploaded, displayed or managed through HaloPass by or on behalf of the Customer. “Staff Data” means any data uploaded, submitted, stored or processed in relation to Staff Members, including names, roles, staff identifiers, company association, photographs, authorisation status, branch or location information, expiry dates, QR codes, verification links and related records. “Verification Page” means the page or screen shown when a QR code, verification link or other HaloPass verification method is accessed. “Subscription Plan” means the paid or trial plan selected by the Customer, including any staff limit, feature limit, usage limit, support level, upload method or API access level attached to that plan. “Technology Partner” means Dalas Technologies or any related technical provider involved in developing, hosting, maintaining or supporting the technical infrastructure of HaloPass. “Third-Party Services” means any external service used in connection with HaloPass, including Stripe, Zoho, hosting providers, email providers, automation tools, analytics tools, support tools and other integrated services. 3. Business Use Only HaloPass is intended for business and organisational use only. By submitting a registration form, requesting a trial, creating an account or using HaloPass, you confirm that you are acting for business, professional, commercial, organisational or institutional purposes, and not as a private consumer. If you are not authorised to act on behalf of a business or organisation, you must not submit the registration form or create a HaloPass account. 4. What HaloPass Provides HaloPass may provide tools that allow a Customer to: request a 14-day trial; create or activate a company account; create and manage digital staff profiles; assign QR codes or verification links to authorised Staff Members; allow customers or third parties to view selected verification information; manage staff status, roles and authorisation details; upload staff manually or, where available, by endpoint/API integration; access verification records, account information and plan information; manage subscription-related access, upgrades and plan limits; receive transactional emails and system notifications. HaloPass is a verification support tool. It does not replace the Customer’s own legal, employment, recruitment, identity checking, safeguarding, compliance, health and safety, insurance, access control or operational procedures. 5. What HaloPass Does Not Provide HaloPass does not guarantee that: a person is free from risk; a person has passed background checks; a Staff Member is legally entitled to work; a Staff Member has the qualifications, licences or permissions required for a role; a Staff Member is safe to enter any property; a QR code or verification link will prevent all fraud, impersonation, misuse, unauthorised access or identity abuse; all customers, residents, occupiers, property managers or third parties will rely on or accept a verification page; all security incidents, disputes or operational issues will be prevented. HaloPass is not a law enforcement tool, emergency service, background-checking service, biometric identity verification system, government identity service, regulated financial identity verification service, employment screening service, safeguarding service or substitute for legal, professional or compliance advice. Customers remain responsible for their own staff vetting, employment checks, right-to-work checks, training, supervision, safeguarding, site access controls, insurance and legal compliance. 6. Plans and Pricing HaloPass offers clear monthly plans based on the number of active field staff, contractors or authorised representatives the Customer needs to verify. Starter is for organisations with up to 10 active field staff and is £39 per month after the trial. Growth is for organisations with up to 50 active field staff and is £89 per month after the trial. Business is for organisations with up to 250 active field staff and is £199 per month after the trial. Enterprise / API is for organisations with 251+ active field staff, high-volume onboarding needs or custom system integration requirements. Enterprise / API pricing is quoted separately. No payment details or credit card are required to request or start the standard 14-day trial. The Customer will only provide payment details if the Customer chooses to continue after the trial and actively authorises a paid monthly subscription through Stripe or another approved payment provider. HaloPass will not charge the Customer automatically at the end of the standard trial unless the Customer has separately provided payment details and authorised a paid subscription. HaloPass standard plans are designed with clear monthly pricing and no hidden HaloPass platform fees or surprise HaloPass charges. Any optional custom work, endpoint/API integration, enterprise onboarding, bespoke configuration, applicable taxes or separately agreed third-party costs will be communicated and agreed before they are charged. Payment gateway, card processing, Stripe, bank, currency conversion or transaction fees may be applied by the relevant payment provider or financial institution. These fees are outside Bluestone’s direct control and may depend on the payment method, country, currency or provider terms. 7. Trial, Payment and Continuation Each HaloPass plan may include a 14-day free trial. No payment details are required to request or start the standard trial. At the end of the trial, the Customer may choose whether to continue using HaloPass by selecting a paid monthly Subscription Plan. HaloPass will not charge the Customer automatically at the end of the standard trial unless the Customer has separately provided payment details and authorised a paid subscription through Stripe or another approved payment provider. If the Customer does not select a paid monthly Subscription Plan after the trial, access to HaloPass may expire, pause or be restricted. Unless otherwise stated, each standard monthly Subscription Plan is charged as a flat monthly fee for the applicable plan benefits and active field staff capacity. The Customer must select a plan that matches its number of active field staff, contractors or authorised representatives. If the Customer exceeds the staff capacity included in its current plan, the Customer may be required to upgrade to the appropriate plan before additional staff profiles, verification capacity or related features are made available. Any optional custom work, endpoint/API integration, enterprise onboarding, bespoke configuration, applicable taxes or separately agreed third-party costs will be communicated and agreed before they are charged. The Customer may cancel an active paid subscription at any time. Unless otherwise stated, cancellation will take effect at the end of the current billing period and will stop future renewals. 7A. Trial Activation and Business Verification HaloPass trial access may be activated shortly after the Customer submits the trial request form, so the Customer can begin the onboarding process without unnecessary delay. However, immediate trial activation does not mean that the Customer has been finally approved or fully verified by Bluestone. After account creation, Bluestone may review the Customer’s business details, including company name, business email domain, Companies House registration number, website, sector, expected staff capacity, use case and any other information reasonably required to validate the Customer’s business or organisational status. If, following this review, Bluestone reasonably determines that the Customer is not a registered, legitimate or verifiable business or organisation, or that the Customer has provided inaccurate, misleading, incomplete, unverifiable or inconsistent information, Bluestone may suspend, restrict or deactivate the HaloPass account. Bluestone may also suspend, restrict or deactivate the account if the Customer’s intended use appears unsuitable, unlawful, fraudulent, abusive, misleading, inconsistent with the purpose of HaloPass, or likely to create legal, operational, reputational, security, data protection or compliance risk. HaloPass is intended for legitimate business and organisational use only. It is not intended for anonymous, personal, informal or unverifiable use. Bluestone may request additional information or evidence before allowing continued use of HaloPass. If the Customer does not provide the requested information within a reasonable time, Bluestone may pause onboarding, restrict access or deactivate the account. 8. Refund Policy HaloPass is provided for business and organisational use only. Unless required by law or expressly agreed by Bluestone in writing, monthly subscription fees are non-refundable once the relevant billing period has started. Customers may cancel their subscription at any time. Cancellation will stop future renewals, but it will not automatically refund fees already paid for the current billing period. Bluestone may consider a refund, credit or account adjustment at its discretion where: 1. a duplicate payment was taken; 2. an incorrect amount was charged due to a billing error; 3. the Customer was charged after properly cancelling before renewal; 4. the service was materially unavailable due to an issue within Bluestone’s reasonable control; 5. Bluestone determines that a refund, credit or adjustment is appropriate in the circumstances. No refund will normally be provided where: 1. the Customer has already used the service during the paid billing period; 2. the Customer changed its mind after payment; 3. the Customer selected the wrong plan; 4. the Customer failed to cancel before renewal; 5. access was restricted or suspended due to failed payment, misuse, breach of Terms or inaccurate Customer information; 6. the issue was caused by a third-party service outside Bluestone’s reasonable control; 7. the Customer did not use the service after subscribing. Where Bluestone approves a refund, the refund may be returned to the original payment method through Stripe or the applicable payment provider. Processing times may depend on the payment provider and the Customer’s bank. This Refund Policy does not affect any rights that cannot be excluded by law. 9. Referral Programme HaloPass may offer a referral programme for eligible customers. Once a Customer’s HaloPass account has been created, the Customer may be able to view a referral code inside the HaloPass client portal. The Customer may share that referral code with contacts, business partners or referred organisations. A referred organisation may enter the referral code when registering for HaloPass. The referral benefit will only become eligible after the referred organisation has registered for HaloPass, selected a paid monthly plan and successfully completed its first monthly payment. Once eligible, the referring Customer may receive 20% off its own selected monthly plan for the next 3 paid months, subject to valid code use, account eligibility and the HaloPass Referral Programme terms. The referral discount applies to the referring Customer’s own HaloPass monthly plan. It is not automatically applied during the referred organisation’s free trial. Referral discounts are not cash rewards and are not transferable. Referral discounts may not be combined with other promotions, credits or discounts unless Bluestone agrees otherwise. Bluestone may refuse, remove or reverse a referral discount where it reasonably believes that the referral code was misused, self-referred, duplicated, used fraudulently, applied to an ineligible account, or used in breach of these Terms. Bluestone may amend, pause or withdraw the referral programme at any time, provided this does not affect any referral discount already validly applied to an active paid account unless misuse, fraud or breach is identified. 10. Data Protection and Use of Data HaloPass is designed to support responsible staff verification workflows in accordance with applicable UK data protection requirements, including the UK GDPR and the Data Protection Act 2018. The information collected through the HaloPass trial registration form may be used to: 1. review and process the Customer’s trial request; 2. create or update the Customer’s company, contact and opportunity records in Zoho CRM; 3. contact the Customer about account setup, onboarding, trial access, product use and service administration; 4. assess the Customer’s expected field staff capacity and preferred monthly plan; 5. manage trial status, onboarding status, account status and subscription readiness; 6. record Terms and Conditions acceptance, Privacy Notice acknowledgement and optional marketing consent; 7. manage referral code eligibility where a referral code is provided; 8. support fraud prevention, misuse prevention, security, audit records and legal compliance. Once a Customer account is created inside the HaloPass client portal, HaloPass may process information necessary to provide the service, including company account details, authorised user details, staff or contractor profile information, authorisation status, scheduled visit information, verification activity, route history, audit records, QR code or secure verification code data, and customer-facing verification records. HaloPass will use this information only for legitimate business and service-related purposes, including account administration, staff verification, visit authorisation, customer-facing verification, operational visibility, support, billing readiness, subscription management, security, fraud prevention, service improvement and compliance with applicable legal obligations. HaloPass will not sell Customer data, staff data or verification data. HaloPass will not use Customer staff data for unrelated advertising purposes. HaloPass will not ask Customers to upload staff information that is unnecessary for the verification purpose. The Customer must ensure that any staff, contractor, representative, visitor, site or customer information uploaded to HaloPass is accurate, lawful, necessary, proportionate and provided with the appropriate lawful basis, internal authorisation or consent where required. The Customer remains responsible for informing its staff, contractors and authorised representatives that their information may be used for HaloPass verification, including profile details, authorisation status, visit-related records, verification records and staff photographs where applicable. Where staff photographs are used, they are intended to support visual profile verification only and should not be treated as biometric identity verification unless expressly agreed in writing. Personal data may be shared with trusted service providers where necessary to operate HaloPass, including CRM, hosting, payment, email, support, security, analytics or technical infrastructure providers. This may include Zoho CRM, Stripe or another approved payment provider, the HaloPass client portal, and technology partners such as Dalas Technologies where required for service delivery, support, maintenance or development. Where Bluestone processes personal data on behalf of the Customer, Bluestone will process such data in accordance with the Customer’s documented instructions, the HaloPass Terms and Conditions, the Privacy Notice and any applicable data processing agreement or equivalent contractual terms. HaloPass will take reasonable organisational and technical measures to protect personal data processed through the service, including appropriate access controls, account security measures and internal handling practices. The Customer is responsible for keeping company information, staff profiles, authorisation status, scheduled visit information and verification records accurate and up to date. Personal data will be retained only for as long as reasonably necessary for the purposes described in these Terms, the Privacy Notice, account administration, service delivery, audit records, legal compliance, dispute handling, billing records or legitimate business requirements. Marketing communications will only be sent where permitted by law and, where required, based on the Customer’s separate optional marketing consent. The Customer may unsubscribe from marketing communications where applicable. Further information about how personal data is collected, used, shared, protected and retained will be set out in the HaloPass Privacy Notice. 11. Staff Upload Methods HaloPass may allow staff onboarding through different methods depending on the Subscription Plan and available functionality. These methods may include: manual staff creation inside the HaloPass Client Portal; endpoint/API integration for high-volume staff onboarding. Smaller and mid-sized teams may manage staff directly inside the Client Portal. Larger organisations with high-volume staff records, especially companies with 251+ active field staff, may require endpoint/API integration to connect their internal system with HaloPass. The Customer is responsible for checking the accuracy, lawfulness and completeness of all staff uploads before making profiles active. 12. Payments, Subscriptions and Stripe Paid subscriptions, upgrades, renewals, invoices and related billing may be processed through Stripe or another approved payment provider. The HaloPass Client Portal may direct the Customer to a Stripe-powered checkout, subscription, billing or customer portal interface. Stripe may process payment methods, subscription payments, invoices, upgrades, downgrades, cancellations, failed payment events and subscription status changes. The Customer authorises the applicable payment provider to charge the fees associated with the selected Subscription Plan. Unless otherwise stated: subscriptions are charged monthly; fees are payable in advance; fees are non-refundable once a billing period has started, unless required by law or expressly agreed by Bluestone; failed payments may result in account restriction, suspension or cancellation; plan upgrades may take effect only after payment confirmation or subscription update confirmation; the Customer is responsible for keeping payment details accurate and up to date. Stripe is the source of truth for payment status. The HaloPass control panel is the source of truth for platform access, plan permissions, staff limits and account status. Zoho CRM is used for commercial records, customer management, internal visibility and account history. 13. Upgrades, Downgrades and Plan Changes The Customer may be able to upgrade or change its Subscription Plan through the HaloPass Client Portal. When the Customer requests an upgrade, the Client Portal may generate the appropriate Stripe checkout, subscription update or billing flow. After Stripe confirms the relevant payment or subscription update, the HaloPass control panel may update the Customer’s plan permissions, staff limits and access level. Downgrades may take effect at the end of the current billing period unless otherwise agreed. If a downgrade would cause the Customer to exceed the lower plan’s staff limit, the Customer may be required to deactivate or remove staff profiles before the downgrade can take effect. Bluestone is not responsible for any loss, delay, access restriction or operational issue caused by the Customer selecting an unsuitable plan or failing to upgrade when staff limits are exceeded. 14. Failed Payments, Suspension and Reactivation If a monthly payment fails, Stripe or the payment provider may notify the HaloPass control panel. The HaloPass control panel may then: notify the Customer; mark the account as payment issue, past due, unpaid, restricted or suspended; restrict upgrades or new staff creation; restrict access to verification functions; suspend or limit the account after any applicable grace period; update internal records and Zoho CRM; reactivate the account after successful payment. Bluestone is not responsible for loss caused by account restriction or suspension resulting from failed payment, expired payment details, chargebacks, payment disputes, customer error or failure to maintain an active subscription. 15. Account Creation and Access Submitting a trial request form does not automatically guarantee account approval, immediate access or continued access. Bluestone may review company details before activating a trial or account. The Customer must provide accurate, complete and current information. Bluestone may refuse, delay, suspend or close an account if it reasonably believes the information provided is false, misleading, incomplete, unauthorised, unlawful, fraudulent or otherwise inappropriate. The Customer is responsible for all activity carried out through its account, administrator users and authorised users. The Customer must keep login details secure and promptly remove access for users who no longer require it. 16. Customer Responsibilities The Customer is responsible for all information submitted through the registration form, Client Portal, staff upload process, API integration or any other HaloPass channel. The Customer must ensure that: company information is accurate and up to date; Staff Data is accurate, lawful, relevant and not misleading; Staff Members are informed about how their data will be used; the Customer has a lawful basis and all required permissions to upload, display and process Staff Data; staff profiles are updated when someone leaves, changes role, becomes suspended or is no longer authorised; only necessary information is uploaded; the platform is not used unlawfully, fraudulently, abusively or misleadingly. The Customer must not upload false, misleading, unlawful, discriminatory, excessive, defamatory, abusive, exploitative or irrelevant information. 17. Staff Data and Privacy The Customer is responsible for the Staff Data it uploads, imports, stores or manages through HaloPass. Staff Data may include names, roles, company association, staff identifiers, photographs, authorisation status, branch or location information, QR codes, verification links and related records. The Customer must provide any required privacy notices to its Staff Members and must ensure it has a lawful basis for processing and displaying Staff Data through HaloPass. Unless expressly agreed in writing, the Customer must not upload highly sensitive information, including: medical records; criminal offence data; passport scans; immigration documents; national insurance numbers; bank details; children’s data; safeguarding records; biometric data; health information; special category data. Bluestone may process Staff Data for the purpose of providing, maintaining, securing, supporting and improving HaloPass. A separate Privacy Notice and, where required, Data Processing Agreement may apply. 18. Data Protection Roles For business account information, billing information, CRM records, support correspondence, marketing communications and general commercial records, Bluestone may act as an independent controller. For Staff Data uploaded by the Customer for the purpose of providing staff verification functionality, the Customer will generally act as controller and Bluestone will generally act as processor, unless otherwise agreed in writing. The Customer is responsible for ensuring that it has a lawful basis to collect, upload, display and use Staff Data through HaloPass. Bluestone will process Staff Data for the purposes of providing, maintaining, securing and supporting HaloPass, or as otherwise permitted by law or agreed with the Customer. Where required, the parties may enter into a separate Data Processing Agreement. 19. Staff Photographs Where staff photographs are used, the Customer is responsible for ensuring that it has the right and lawful basis to upload, display and manage those photographs. HaloPass does not provide biometric identity verification unless expressly agreed in writing. Staff photographs are intended for profile display and visual verification support only. The Customer must not represent HaloPass as a biometric, forensic, law enforcement, government identity or background-checking system unless Bluestone has expressly confirmed this in writing. 20. QR Codes and Verification Links HaloPass may generate QR codes, verification links or similar methods to display verification information. The Customer is responsible for distributing, storing, printing, sharing and using QR codes and verification links appropriately. The Customer must not: allow unauthorised persons to use another person’s profile, QR code or verification link; continue using QR codes for inactive, suspended or unauthorised staff; copy, modify, clone, tamper with or misrepresent verification assets; use HaloPass in a way that deceives customers, residents, occupiers, property managers or third parties. If misuse is suspected, the Customer must deactivate the relevant profile or notify Bluestone promptly. 21. Emails and Notifications HaloPass may send transactional emails or system notifications, including: welcome emails; email validation messages; account confirmation; password recovery; plan upgrade confirmation; payment status notifications; invoices, billing notices and subscription administration messages; failed payment notices; account suspension or reactivation notices; onboarding messages; service availability, security, technical, support and system incident notices; service-related notifications. By submitting a trial request and accepting these Terms, the Customer acknowledges and agrees that Bluestone may use the business contact details provided to send non-marketing service, transactional and account administration communications relating to HaloPass. These may include account setup instructions, onboarding updates, invoices, payment notices, subscription changes, service availability notices, security or system incident notices, support messages, technical updates and other communications reasonably necessary to provide, administer, secure, maintain or improve HaloPass. These essential service, account, billing, security and support communications are separate from optional marketing communications and may be required for Bluestone to provide the HaloPass service. Marketing communications, promotional offers and non-essential product update emails will only be sent where permitted by law and, where required, based on the Customer’s separate optional marketing consent. The Customer may unsubscribe from marketing communications where applicable. The Customer is responsible for ensuring that its contact information is accurate and monitored. 22. Zoho CRM and Commercial Records Bluestone may use Zoho CRM or another CRM system to manage commercial records, trial requests, customer contacts, plan history, onboarding status, payment visibility, subscription status and account notes. Information recorded in Zoho CRM is for commercial management, account support, internal visibility and customer relationship management. Zoho CRM does not control platform permissions, staff limits or payment status. The HaloPass control panel controls operational access and staff limits. Stripe controls payment status and subscription billing events. 23. Third-Party Services HaloPass may rely on Third-Party Services, including Stripe, Zoho, hosting providers, email providers, automation tools, analytics tools, support tools and technical infrastructure providers. The Customer acknowledges that Third-Party Services may be subject to their own terms, availability, security practices and privacy policies. Bluestone is not responsible for failures, delays, data loss, payment issues, service interruptions or other problems caused by Third-Party Services outside Bluestone’s reasonable control. 24. Technology Partner HaloPass is developed in association with Dalas Technologies. Dalas Technologies or related technical providers may support, maintain, host or operate parts of the technical product infrastructure. Bluestone remains the commercial point of contact for HaloPass unless otherwise stated. The Customer must not attempt to bypass Bluestone’s commercial arrangements in relation to HaloPass services provided by Bluestone. 25. Acceptable Use The Customer must not use HaloPass: unlawfully; fraudulently; to impersonate another person or business; to mislead customers or third parties; to upload false staff information; to harass, discriminate against, exploit or endanger individuals; to interfere with platform security; to attempt unauthorised access; to copy, reverse engineer, scrape or misuse the platform; to process unnecessary sensitive data; to damage Bluestone, Dalas Technologies, other customers, Staff Members or third parties. Bluestone may suspend or terminate access if it reasonably believes the Customer has breached this section. 26. Service Availability Bluestone will use reasonable efforts to keep HaloPass available and operational. However, Bluestone does not guarantee uninterrupted, error-free or continuous availability. Access may be interrupted due to maintenance, updates, hosting issues, security events, third-party service failures, payment provider issues, internet outages or events outside Bluestone’s reasonable control. Bluestone may modify, suspend, replace or discontinue features where reasonably necessary for security, compliance, maintenance, product improvement or operational reasons. 27. Intellectual Property Bluestone and its licensors retain all rights in HaloPass, including software, branding, design, workflows, documentation, platform structure, graphics, text, code, database structure, business logic and related intellectual property. The Customer receives a limited, non-exclusive, non-transferable right to use HaloPass during the active trial or subscription period and in accordance with these Terms. The Customer must not copy, resell, sublicense, reverse engineer, modify, scrape, reproduce or create derivative works from HaloPass unless expressly permitted in writing. The Customer retains ownership of its own business data and Staff Data, subject to Bluestone’s right to process such data to provide the service. 27A. Customer Logo and Branding The Customer may be able to upload its company logo or brand assets inside the HaloPass client portal, where this feature is available. The Customer confirms that it owns, controls or has the necessary rights and permissions to upload and use any logo, trade mark, brand name, image or brand asset provided to HaloPass. The Customer grants Bluestone a limited, non-exclusive, royalty-free licence to display, store, resize, format and use the Customer’s logo and brand assets solely for the purpose of providing the HaloPass service, including client portal display, customer-facing verification pages, staff verification profiles, account setup, service administration and related operational use. Uploading a Customer logo does not transfer ownership of the logo or brand assets to Bluestone. Bluestone may remove, disable or refuse to display any logo or brand asset that it reasonably considers inappropriate, misleading, unlawful, infringing, low quality, incompatible with the service, or likely to create legal, reputational, security or operational risk. Unless otherwise agreed in writing, HaloPass verification pages may include both the Customer’s branding and HaloPass branding, including wording such as “Verified by HaloPass” or equivalent service identification. Full white-label branding, custom branding or removal of HaloPass service identification may require a separate Enterprise / API or custom agreement. The Customer is responsible for keeping its logo, brand assets and company information accurate and up to date. 28. Confidentiality Each party may receive confidential information from the other. The receiving party must not disclose confidential information except where required to provide the service, to professional advisers, to authorised service providers, as required by law, or with the disclosing party’s consent. This section does not apply to information that is public, already known, independently developed or lawfully received from another source. 29. Limitation of Liability Nothing in these Terms limits or excludes liability where it would be unlawful to do so, including liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation. Subject to the above, Bluestone will not be liable for: loss of profits; loss of revenue; loss of business; loss of goodwill; loss of anticipated savings; loss of contracts; indirect or consequential loss; loss caused by inaccurate Customer data; loss caused by Staff Member misconduct; loss caused by Customer failure to update staff status; loss caused by third-party services; loss caused by failed payment or account suspension; loss caused by unauthorised access resulting from Customer security failures; loss caused by misuse of QR codes or verification links; loss caused by the Customer using HaloPass as a substitute for its own compliance, safeguarding or identity-checking procedures. Subject to the above, Bluestone’s total aggregate liability arising out of or in connection with HaloPass will not exceed the total fees paid by the Customer to Bluestone for HaloPass during the three months immediately preceding the event giving rise to the claim. If the Customer is using a free trial or unpaid plan, Bluestone’s total liability will be limited to £100. 30. Indemnity The Customer agrees to indemnify Bluestone, its directors, employees, contractors, suppliers and technology partners against claims, losses, damages, liabilities, costs and expenses arising from: Customer breach of these Terms; unlawful, inaccurate or misleading Staff Data; failure to obtain required permissions or provide privacy notices; misuse of QR codes or verification links; Staff Member claims arising from Customer-uploaded data; Customer breach of data protection law; Customer breach of employment, safeguarding, equality, privacy or access-related obligations; Customer breach of third-party rights; Customer misuse of HaloPass. 31. Suspension and Termination Bluestone may suspend or terminate access if: the Customer fails to pay fees; the Customer breaches these Terms; the Customer uploads unlawful or inappropriate content; the Customer misuses the platform; continued access creates legal, security, reputational, technical or operational risk; required by law, regulator, court order or competent authority. Termination does not affect accrued rights, unpaid fees, confidentiality obligations, intellectual property rights, data protection obligations, liability limitations or any provision intended to survive termination. 32. Cancellation The Customer may cancel its subscription according to the cancellation method made available by Bluestone, HaloPass, Stripe or the relevant payment provider. Unless otherwise stated, cancellation takes effect at the end of the current paid billing period. The Customer remains responsible for all fees incurred before cancellation. After cancellation, access to the Client Portal, Staff Data, QR codes, verification links and verification records may be limited, suspended, archived or deleted according to Bluestone’s retention practices and legal obligations. 33. Changes to the Service or Terms Bluestone may update, improve, modify or remove features from HaloPass. Bluestone may also update these Terms from time to time. Updated Terms may be posted on the website, sent by email or made available through the Client Portal. Continued use of HaloPass after updated Terms become effective constitutes acceptance of the updated Terms. 34. Force Majeure Bluestone will not be liable for delay or failure caused by events outside its reasonable control, including internet failures, hosting outages, cyber incidents, strikes, labour disputes, natural disasters, war, terrorism, civil unrest, government action, regulatory changes, supplier failures, power failures or payment processor outages. 35. Entire Agreement These Terms, together with any applicable order form, pricing page, Privacy Notice, Data Processing Agreement, subscription terms and written addenda, form the entire agreement between Bluestone and the Customer in relation to HaloPass. 36. Governing Law and Jurisdiction These Terms are governed by the laws of England and Wales. The courts of England and Wales will have exclusive jurisdiction over any dispute arising out of or in connection with these Terms, except where mandatory law provides otherwise. 37. Contact For questions about these Terms or HaloPass, contact: Bluestone Integrations Limited Email: [insert email address] Website: [insert corporate website] Registered office: [insert registered office] Company number: [insert company number]