ACCEPTABLE USE POLICY

1. INTRODUCTION

This Acceptable Use Policy (“Policy”) sets out the rules governing lawful and acceptable use of WEBOVO's online resources and Services.

This Policy applies to use of:

• the website available at https://webovo.net/ (the “Website”);
• Website contact and Consultation-request forms;
• the WEBOVO Client Portal, where applicable;
• accounts or credentials issued for access to WEBOVO online functionality;
• electronic communications made through WEBOVO systems or in connection with WEBOVO Services;
• online functionality made available by WEBOVO; and
• WEBOVO reports, recommendations, guidance and other consulting outputs where relevant to acceptable use.

This Policy is intended to form a dedicated part of the WEBOVO Terms and Conditions and should be read together with those Terms.

For the purposes of this Policy, “WEBOVO”, “we”, “us” and “our” refer to WEBOVO S.L., a company established in Spain under NIF number B13922646 operating under the WEBOVO brand. “User”, “you” and “your” refer to any person or organisation accessing or using resources covered by this Policy.

2. PURPOSE OF THIS POLICY

WEBOVO provides professional consulting services primarily in the areas of:

• Workplace Safety Consulting;
• Online Security Consulting; and
• AI & Business Consulting.

Some WEBOVO Services involve discussion of security risks, organisational weaknesses, technology, automation or AI.

Such Services are provided for legitimate advisory, defensive, risk-management and business purposes.

Nothing made available by WEBOVO constitutes authorisation to:

• access a system without permission;
• circumvent security controls;
• conduct unauthorised security testing;
• exploit vulnerabilities unlawfully;
• interfere with third-party systems; or
• engage in any unlawful activity.

Users are responsible for ensuring that their use of WEBOVO resources and consulting outputs is lawful and appropriately authorised.

3. GENERAL ACCEPTABLE-USE REQUIREMENT

You may use the Website, Client Portal and other WEBOVO resources only:

• for lawful purposes;
• in accordance with this Policy and the Terms and Conditions;
• within the scope of any access or permission granted to you;
• without materially interfering with other Users or WEBOVO systems;
• without infringing the rights of WEBOVO or third parties; and
• in a manner consistent with any applicable Engagement Agreement.

You must not use WEBOVO resources to facilitate conduct that would itself violate this Policy if carried out directly.

4. UNLAWFUL USE

You must not use the Website, Client Portal, Services, communications functionality or WEBOVO Materials:

• in violation of applicable law;
• to facilitate criminal or fraudulent activity;
• to obtain unlawful access to information, systems or accounts;
• to evade lawful restrictions or controls;
• to assist another person in unlawful activity;
• to conceal or facilitate fraud;
• to unlawfully interfere with another person's rights; or
• for another purpose that WEBOVO reasonably determines would expose WEBOVO, its Clients or Users to unlawful activity.

The fact that a particular activity is technically possible does not mean that it is authorised.

5. FRAUD, IMPERSONATION AND MISREPRESENTATION

You must not:

• impersonate another individual or organisation without authority;
• falsely claim to represent a company, Client or other person;
• misrepresent your identity, authority or affiliation;
• use another person's details to obtain unauthorised access;
• submit deliberately fraudulent Consultation requests;
• knowingly provide materially false or misleading information for an improper purpose;
• falsely claim that WEBOVO has approved, certified or endorsed conduct where it has not done so; or
• use WEBOVO branding, communications or materials to deceive another person.

Information supplied through Website forms should be accurate to the best of your knowledge where accuracy is relevant to the request.

6. CLIENT PORTAL AND ACCOUNT USE

Where access to the Client Portal or another restricted WEBOVO area is provided, you may access it only within the permissions granted to you.

You must not:

• access another Client's account without authorisation;
• access another User's account without permission;
• share credentials with unauthorised persons;
• permit another person to impersonate you;
• knowingly use credentials that you are not authorised to use;
• attempt to obtain another User's password or authentication information;
• access information outside the scope of your authorisation;
• circumvent account restrictions;
• manipulate permissions to obtain greater access; or
• continue using credentials after your authority to use them has ended.

Where credentials are issued to you, you must take reasonable steps to keep them confidential and secure.

You should notify WEBOVO promptly at info@webovo.net if you become aware of or reasonably suspect unauthorised access to your account or credentials.

7. UNAUTHORISED ACCESS

You must not attempt to gain unauthorised access to:

• the Website;
• Client Portal;
• WEBOVO accounts;
• servers;
• networks;
• databases;
• administrative interfaces;
• authentication systems;
• non-public files or resources;
• another Client's information; or
• systems connected to WEBOVO infrastructure.

Prohibited activities include attempting to bypass:

• passwords;
• authentication controls;
• access permissions;
• session controls;
• rate limits;
• technical restrictions;
• security controls; or
• other mechanisms designed to restrict access.

8. CREDENTIAL AND PASSWORD ATTACKS

You must not conduct or facilitate:

• brute-force attacks;
• password spraying;
• credential stuffing;
• automated login attacks;
• attempts to guess passwords;
• attempts to reuse stolen or compromised credentials;
• interception of authentication information;
• unauthorised token or session theft; or
• other activity intended to compromise accounts or authentication mechanisms.

No access to WEBOVO's Online Security Consulting creates or implies permission to test WEBOVO authentication systems.

9. SECURITY TESTING, SCANNING AND VULNERABILITY EXPLOITATION

Unless WEBOVO has provided prior written authorisation defining the permitted scope, you must not:

• conduct vulnerability scanning against WEBOVO systems;
• conduct penetration testing;
• perform automated security testing;
• probe ports, services or interfaces;
• test authentication mechanisms;
• test access controls;
• attempt to exploit a suspected vulnerability;
• intentionally trigger security weaknesses;
• attempt privilege escalation;
• evade security protections; or
• otherwise test WEBOVO infrastructure for security weaknesses.

The same requirement applies to third-party systems discussed during a WEBOVO engagement.

A WEBOVO recommendation, report, security discussion or Consultation does not constitute permission to test or access a third party's systems.

Any security-related activity must be conducted only where the person conducting it has the necessary lawful authority.

10. MALWARE AND HARMFUL CODE

You must not use WEBOVO systems or communications to create, upload, introduce, transmit, distribute or facilitate:

• viruses;
• worms;
• Trojan horses;
• ransomware;
• spyware;
• credential stealers;
• destructive code;
• malicious scripts;
• unauthorised remote-access software;
• unauthorised cryptomining software;
• logic bombs; or
• other code intended to compromise, disrupt, damage or unlawfully access systems, devices or information.

You must not intentionally submit files or content that you know contain malicious code.

11. DENIAL-OF-SERVICE AND INFRASTRUCTURE INTERFERENCE

You must not:

• conduct or facilitate denial-of-service attacks;
• conduct or facilitate distributed denial-of-service attacks;
• intentionally overload WEBOVO infrastructure;
• deliberately generate excessive requests for the purpose of disruption;
• interfere with normal Website or Client Portal operation;
• disrupt networks or servers;
• defeat technical measures intended to protect availability;
• deliberately exhaust system resources; or
• materially impair access for legitimate Users.

Reasonable ordinary use of the Website is not prohibited merely because it generates network traffic.

12. SCRAPING, AUTOMATION AND DATA EXTRACTION

You must not use automated tools in a manner that unlawfully accesses, extracts, copies or interferes with WEBOVO resources.

Without appropriate authorisation or another lawful basis, you must not:

• scrape non-public information;
• systematically extract protected Website content for unauthorised commercial use;
• conduct automated extraction that materially burdens WEBOVO systems;
• bypass technical restrictions on automated access;
• operate bots in a manner that disrupts Website functionality;
• harvest contact information or personal data;
• compile personal information for unsolicited communications; or
• use automated methods to gain access to restricted content.

This section is not intended to prohibit legitimate activity that cannot lawfully be restricted, including lawful indexing or other uses protected by applicable law.

13. PHISHING AND SOCIAL ENGINEERING

You must not use WEBOVO resources, branding, communications or Services to conduct or facilitate:

• phishing;
• spear phishing;
• credential harvesting;
• deceptive login pages;
• fraudulent account-recovery requests;
• impersonation-based attacks;
• malicious social engineering; or
• other attempts to obtain information through deception.

You must not falsely represent communications as originating from WEBOVO.

14. SPAM AND UNSOLICITED ABUSE

You must not use WEBOVO Website functionality, contact forms, accounts or systems to:

• distribute spam;
• send repetitive abusive submissions;
• send bulk unsolicited communications through WEBOVO systems;
• flood enquiry forms;
• distribute malicious links;
• send deceptive marketing communications;
• interfere with WEBOVO's ability to respond to legitimate Clients; or
• otherwise misuse communications functionality.

This provision does not prevent legitimate enquiries, complaints or other good-faith communications.

15. CONTACT AND CONSULTATION FORMS

The Website's contact and Consultation-request forms are intended for genuine business enquiries and communications with WEBOVO.

You must not knowingly use them to:

• submit fraudulent requests;
• impersonate another person;
• transmit malware;
• harass WEBOVO personnel;
• conduct phishing;
• transmit unlawful content;
• repeatedly submit automated requests designed to disrupt operations; or
• obtain information through deception.

Users should avoid sending unnecessary sensitive or confidential information through a general Website form.

Unless WEBOVO specifically provides an approved method for doing so, Users should not submit through a general contact form:

• passwords;
• authentication credentials;
• private cryptographic keys;
• access tokens;
• highly sensitive personal information;
• trade secrets;
• confidential vulnerability information capable of creating an immediate security risk; or
• other information unnecessary for the initial enquiry.

WEBOVO does not request passwords or private keys through its general Website enquiry form.

16. PERSONAL DATA AND INFORMATION HARVESTING

You must not use WEBOVO resources to unlawfully:

• collect personal data;
• harvest contact information;
• identify Users who have no reasonable expectation of such processing;
• obtain personal information through unauthorised account access;
• compile personal information for unlawful profiling;
• disclose personal information without appropriate authority; or
• violate applicable privacy or data-protection rights.

Any personal data you submit to WEBOVO must be provided lawfully.

Where you provide information about another person, you remain responsible for having an appropriate basis or authority to do so where required by applicable law.

17. CONFIDENTIAL INFORMATION

You must not:

• attempt to access another Client's confidential information;
• attempt to obtain non-public WEBOVO information without authority;
• use compromised credentials to access confidential information;
• intentionally circumvent restrictions designed to separate Client information;
• knowingly disclose information obtained through unauthorised access; or
• use the Client Portal to distribute confidential information to persons who are not authorised to receive it.

Where you receive confidential information legitimately through an engagement, your use of that information may also be subject to:

• an Engagement Agreement;
• confidentiality provisions;
• a non-disclosure agreement; or
• other applicable contractual obligations.

18. INTELLECTUAL PROPERTY AND BRAND MISUSE

You must not use the Website or WEBOVO Materials in a manner that knowingly infringes intellectual-property rights.

Without appropriate permission or another lawful basis, you must not:

• reproduce protected WEBOVO Materials for unauthorised commercial exploitation;
• distribute protected reports or consultation materials beyond permitted use;
• falsely represent WEBOVO Materials as your own work;
• remove ownership or attribution notices for deceptive purposes;
• copy WEBOVO branding in order to impersonate WEBOVO;
• create a false impression of sponsorship, certification or endorsement by WEBOVO; or
• upload or distribute third-party material where you know you lack the necessary rights.

Client Materials remain subject to the intellectual-property provisions of the Terms and any relevant Engagement Agreement.

19. HARASSMENT, THREATS AND ABUSIVE COMMUNICATIONS

You must not use WEBOVO resources to engage in unlawful harassment, threats or abusive conduct.

Prohibited conduct may include:

• credible threats of unlawful violence;
• targeted unlawful harassment;
• deliberately abusive repeated communications intended to disrupt operations;
• unlawful discriminatory abuse; or
• communications prohibited by applicable law.

Nothing in this Policy prevents a User from:

• making a legitimate complaint;
• disputing a charge;
• criticising WEBOVO;
• raising a legal concern;
• reporting a problem; or
• communicating firmly in connection with a genuine business dispute.

20. ILLEGAL OR HARMFUL CONTENT

You must not knowingly transmit through WEBOVO systems content that:

• is unlawful;
• facilitates fraud;
• contains malicious code;
• unlawfully infringes intellectual-property rights;
• unlawfully violates privacy or confidentiality rights;
• facilitates unauthorised access to systems;
• constitutes unlawful threats or harassment; or
• is otherwise prohibited from transmission under applicable law.

WEBOVO does not assume an obligation under this Policy to proactively monitor every communication or submission.

21. USE OF ONLINE SECURITY CONSULTING OUTPUTS

WEBOVO's Online Security Consulting is intended to support legitimate defensive security, organisational resilience and risk management.

You must not knowingly use WEBOVO security-related recommendations, explanations, reports or other outputs to:

• unlawfully access systems;
• compromise third-party accounts;
• exploit vulnerabilities without authorisation;
• deploy malware;
• steal credentials;
• facilitate ransomware;
• evade lawful security controls for an unlawful purpose;
• conduct fraudulent cyber activity; or
• otherwise facilitate unlawful interference with digital systems.

Where a recommendation could be used for legitimate security testing, you are responsible for ensuring that any testing is conducted only within the scope of lawful and documented authority.

22. USE OF AI & BUSINESS CONSULTING OUTPUTS

WEBOVO's AI & Business Consulting is intended to support legitimate business analysis, responsible technology adoption and process improvement.

You must not knowingly use WEBOVO consulting outputs to facilitate:

• unlawful discrimination;
• fraud;
• impersonation;
• unlawful surveillance;
• unlawful processing of personal data;
• intellectual-property infringement;
• malicious automation;
• unauthorised access to information or systems; or
• another unlawful activity.

Clients remain responsible for independently reviewing proposed AI or automation implementations and ensuring that their use complies with applicable law, internal policies and contractual requirements.

23. USE OF WORKPLACE SAFETY CONSULTING OUTPUTS

WEBOVO Workplace Safety Consulting is intended to assist organisations in identifying and managing workplace risks.

Users must not knowingly:

• falsify WEBOVO recommendations;
• misrepresent advisory material as a regulatory certificate or statutory approval;
• alter WEBOVO materials in a misleading manner;
• falsely claim that WEBOVO has certified a workplace as legally compliant; or
• use WEBOVO Materials to conceal known safety risks or mislead employees, regulators or other persons.

WEBOVO's advisory work does not itself transfer statutory workplace obligations away from the relevant employer or organisation.

24. MISREPRESENTATION OF WEBOVO SERVICES OR OUTPUTS

You must not knowingly represent that WEBOVO:

• guarantees absolute cybersecurity;
• guarantees an accident-free workplace;
• guarantees regulatory compliance;
• guarantees business results;
• guarantees AI accuracy;
• has issued a licence or certification that WEBOVO did not issue;
• acts as a governmental authority;
• has approved conduct that WEBOVO did not approve; or
• has entered into a relationship with you that does not exist.

You must not materially alter a WEBOVO report or recommendation and then present the altered content as an unmodified WEBOVO document.

25. THIRD-PARTY SYSTEMS

Nothing in your relationship with WEBOVO gives you authority to access or test a third party's systems.

Where WEBOVO discusses third-party:

• platforms;
• software;
• infrastructure;
• AI tools;
• security controls;
• accounts; or
• technologies,

you remain responsible for obtaining any permission legally required before accessing, testing, modifying or interacting with those systems.

WEBOVO does not grant permissions on behalf of independent third parties.

26. SECURITY RESEARCH AND RESPONSIBLE REPORTING

Discovery of a suspected vulnerability in the Website or Client Portal does not authorise further exploitation.

Unless WEBOVO has expressly authorised testing, you should not:

• access data beyond what is necessary to recognise the potential issue;
• modify or delete data;
• download confidential information;
• establish persistence;
• attempt privilege escalation;
• disrupt systems;
• test other Users' accounts; or
• publicly disclose information in a manner that unnecessarily creates a security risk.

Suspected security issues relating to WEBOVO systems may be reported to:

info@webovo.net

Submitting a security report does not create a professional relationship, contractual entitlement, reward entitlement or authorisation for additional testing unless WEBOVO expressly agrees otherwise.

27. CIRCUMVENTION OF TECHNICAL CONTROLS

You must not deliberately circumvent reasonable technical controls applied to:

• authentication;
• access;
• account permissions;
• rate limiting;
• Client separation;
• Website availability;
• security;
• restricted resources; or
• other protected functionality.

The absence of a technical barrier does not necessarily mean that access is authorised.

28. INTERFERENCE WITH OTHER USERS

You must not intentionally interfere with another User's legitimate access to or use of WEBOVO resources.

This includes:

• disrupting another User's account;
• attempting to lock another User out of an account;
• manipulating another User's session;
• interfering with a legitimate Consultation request;
• attempting to gain control over another Client's access; or
• deliberately preventing normal use of Website functionality.

29. CLIENT RESPONSIBILITY FOR AUTHORISED USERS

Where a Client authorises employees, contractors or other personnel to use a Client Portal account or other WEBOVO functionality, the Client should take reasonable steps to ensure that such Users:

• have appropriate authority;
• protect their credentials;
• comply with applicable access restrictions;
• use information appropriately; and
• cease access when authorisation ends.

Nothing in this section makes a Client responsible for conduct that applicable law does not permit WEBOVO to attribute to the Client.

30. NO IMPLIED AUTHORISATION

No information appearing on the Website, and no access to WEBOVO's Online Security Consulting, creates implied permission to:

• test WEBOVO infrastructure;
• test a Client's infrastructure;
• test a third-party platform;
• exploit vulnerabilities;
• access restricted information;
• circumvent security controls; or
• perform any act that otherwise requires authorisation.

Authorisation for security-related testing must be sufficiently clear and must come from a person with authority to grant it.

Where testing is part of a separate engagement, the authorised scope should be determined by the relevant written agreement.

31. ENFORCEMENT

Where WEBOVO reasonably believes that this Policy has been breached, WEBOVO may take proportionate action depending on the nature and seriousness of the circumstances.

Subject to applicable law and relevant Engagement Agreements, action may include:

• warning the User;
• requesting that prohibited conduct cease;
• requesting additional information;
• rejecting an enquiry;
• restricting access;
• temporarily suspending access;
• terminating Client Portal access;
• blocking or limiting abusive traffic;
• protecting affected accounts;
• investigating apparent misuse;
• preserving relevant evidence where legally permissible;
• exercising contractual rights;
• pursuing available legal remedies; and
• reporting suspected unlawful activity where required or reasonably appropriate.

WEBOVO may take immediate protective measures where reasonably necessary to address an urgent security risk, unlawful access, malicious activity or significant threat to WEBOVO systems, Clients or Users.

Where WEBOVO restricts, suspends, or terminates your access to the Client Portal on the ground that your conduct is unlawful or breaches this Policy, WEBOVO will, where your contact details are known, provide a statement of reasons including:

• the facts and circumstances relied on;
• the specific provision of this Policy or applicable law relied on;
• whether the decision involved automated means;
• and the redress options available to you, including WEBOVO's internal complaint process at info@webovo.net.

32. INVESTIGATION OF SUSPECTED MISUSE

Where reasonably necessary, WEBOVO may investigate apparent breaches of this Policy.

Any investigation will be limited to measures WEBOVO considers reasonably appropriate and legally permissible in the circumstances.

WEBOVO does not represent that it:

• continuously monitors every User;
• reviews every communication;
• detects every violation;
• prevents every attack; or
• conducts surveillance beyond what is legally and operationally appropriate.

Failure to identify or act immediately upon a breach does not constitute approval of the conduct.

33. PRESERVATION OF INFORMATION

Where reasonably necessary and permitted by applicable law, WEBOVO may preserve relevant records relating to suspected misuse for purposes such as:

• investigating a security incident;
• preventing further abuse;
• protecting affected Users or Clients;
• establishing, exercising or defending legal rights;
• complying with a legal obligation; or
• responding to a lawful request from a competent authority.

Personal data associated with such records will be handled in accordance with the WEBOVO Privacy Policy and applicable law.

34. REPORTING TO AUTHORITIES

WEBOVO may report suspected unlawful conduct to competent authorities where:

• required by applicable law;
• required by a valid legal process;
• reasonably appropriate in response to serious suspected unlawful activity; or
• reasonably necessary to protect legal rights or safety where the law permits such disclosure.

Nothing in this Policy means that WEBOVO is required to report every suspected breach of these Terms to law enforcement.

WEBOVO will determine the appropriate response according to the circumstances and applicable legal requirements.

35. SUSPENSION AND TERMINATION

WEBOVO may suspend or terminate access to affected online resources where reasonably necessary because of:

• material breach of this Policy;
• suspected account compromise;
• unauthorised access;
• fraud;
• malicious activity;
• significant security risk;
• repeated abuse;
• unlawful use; or
• a legal requirement.

Where appropriate and legally permissible, WEBOVO may provide notice or an opportunity to remedy a breach.

Immediate suspension may be appropriate where delay could create a material security, legal or operational risk.

Termination of an underlying consulting engagement will additionally be governed by the applicable Engagement Agreement and the WEBOVO Terms and Conditions.

36. CONSEQUENCES OF BREACH

A breach of this Policy may also constitute a breach of:

• the WEBOVO Terms and Conditions;
• an Engagement Agreement;
• Client Portal access conditions;
• confidentiality obligations;
• intellectual-property rights; or
• applicable law.

WEBOVO's response to one breach does not prevent WEBOVO from exercising other contractual or legal rights.

37. REPORTING MISUSE

If you believe WEBOVO's Website, Client Portal, branding or Services are being misused, you may report the issue to:

Email: info@webovo.net

Where possible, reports should contain sufficient information to allow WEBOVO to understand the issue without requiring the reporter to perform additional unauthorised testing or obtain unnecessary confidential information.

38. RELATIONSHIP WITH THE TERMS AND CONDITIONS

This Acceptable Use Policy forms part of the WEBOVO Terms and Conditions.

Defined terms used but not separately defined in this Policy have the meanings given to them in the Terms and Conditions.

This Policy does not replace:

• the Terms and Conditions;
• the Privacy Policy;
• the Cookie Policy;
• an applicable Engagement Agreement;
• confidentiality obligations;
• data-processing terms; or
• other written conditions governing a particular engagement.

If an Engagement Agreement expressly authorises activity that would otherwise be restricted by this Policy, that authorisation applies only:

• to the extent expressly stated;
• for the authorised purpose;
• during the authorised period; and
• within the authorised scope.

No Engagement Agreement should be interpreted as permitting unlawful conduct.

39. MANDATORY LEGAL RIGHTS

Nothing in this Policy is intended to prohibit activity that WEBOVO cannot lawfully restrict.

Nothing in this Policy:

• excludes mandatory statutory rights;
• authorises WEBOVO to exercise remedies prohibited by law;
• excludes liability that cannot lawfully be excluded; or
• restricts lawful activity protected under mandatory applicable law.

If a provision of this Policy conflicts with mandatory applicable law, the mandatory law will prevail to the extent of that conflict.

40. CHANGES TO THIS POLICY

WEBOVO may update this Policy from time to time to reflect changes in:

• Website functionality;
• Client Portal functionality;
• Services;
• security risks;
• operational practices;
• applicable legal requirements; or
• WEBOVO's methods for addressing misuse.

The current version will be published on the Website with an updated “Last Updated” date.

Changes to this general Policy will not retrospectively expand the authorised scope of a specific engagement or security-testing permission.

41. CONTACT INFORMATION

Questions concerning this Acceptable Use Policy may be directed to:

WEBOVO
Legal Entity: WEBOVO S.L.
NIF: B13922646
Registered Address: Calle de Zurbano 45, 1ª planta, 28010 Madrid, Spain
Country: SPAIN
Website: https://webovo.net/
Email: info@webovo.net

© 2026 WEBOVO. All rights reserved.