Terms of sale and licence

These terms govern the purchase of MeerLock policy packs and modules. They are deliberately short and deliberately specific: each clause says what actually happens, not what sounds reassuring.

1. Who you are buying from

The seller is [[LEGAL ENTITY NAME]], registered under number [[REGISTRATION NUMBER]] at [[REGISTERED ADDRESS]], trading as MeerLock and reachable at contact@meerlock.com. These terms are governed by the laws of Thailand, and the courts of Thailand have jurisdiction.

2. We sell to organisations only

MeerLock sells to organisations, not to consumers. By ordering you confirm you are buying in the name of a company, partnership, institution or other organisation, for use in its business or operations, and not as an individual for personal, non-trade use.

This is not a formality. Consumer law in the EU and elsewhere gives private buyers a 14-day right to withdraw from a distance purchase, which for downloadable content only lapses if the buyer expressly waives it at the moment of purchase — something our checkout does not ask for, because these documents are not sold to private buyers at all. Selling business-to-business keeps the contract honest: an organisation gets the goodwill refund described in section 5, which is ours to give rather than a right we have quietly taken away.

The same rule shapes the tax terms in section 7. If your organisation has a business tax number (for example a VAT or GST registration number, or the equivalent in your country), please enter it at checkout; in some countries we do not deliver until we have it (see section 7).

3. What you receive

Each pack is a set of documents — policies, their customization guides and the ISMS Toolkit templates — delivered as one archive per product. Delivery is immediate and electronic (except where section 7 says we hold delivery or do not deliver): an email with a sign-in link, and a portal (My Armory) that always serves the current version of every file you have bought.

Each document you download carries an attribution label reading "Licensed to {your company} · order {your order id}" (if you gave no organisation name when ordering, the label shows the name entered at checkout or, failing that, the order's email address instead). That line identifies your licence under section 4 and is part of the licensed material; please leave it in place. Whatever name the label shows, the licensee is the purchasing organisation under section 4. If a file ever cannot be labelled, we send it to you without the label rather than hold up your download, and the licence is the same.

Revisions are free within the current version of a framework: when we correct or improve a document, your portal shows the improved one at no charge. A new edition of a framework (for example a future ISO 27001 revision) is a new product.

The Fix-It Promise. If an auditor or assessor challenges the content of a policy we supplied, tell us what they said and we will amend the document at no charge — for you and for every other customer. It covers our documents; it does not cover your organisation's own implementation, evidence or configuration, which no document can supply.

4. The licence

On payment you receive a perpetual, non-exclusive, non-transferable licence (except as set out under Transfer below) to use the documents, granted to the purchasing organisation and to companies it majority-owns. It does not expire, and it does not depend on any continuing payment.

You may

• Adapt, rename, rebrand and adopt the documents as your organisation's own policies, in whole or in part, in any medium — that is what they are for.
• Use them without limit inside your organisation: any number of people, sites, systems and subsidiaries you majority-own.
• Share them with your auditors, assessors, regulators and advisors acting for you — certification bodies, QSAs, SOC 2 examiners, supervisory authorities, lawyers and consultants engaged by you. A policy set you could not show an auditor would be useless, so this sharing is expressly permitted, not a grey area.
• Keep using everything you have adopted if you later stop buying from us. Nothing is clawed back.

You may not

• Resell, sublicense, publish or redistribute the documents, in original or adapted form, outside your organisation.
• Use them to deliver services to third parties — a consultancy or MSP cannot use a licence under this section bought in its own name, however many it buys, to write another company's policies. Such use needs a different kind of licence, one for providing services to third parties, which MeerLock does not offer yet; if you want to use the documents this way, write to us at contact@meerlock.com.
• Remove or alter the "Licensed to…" line that identifies your licence.

Transfer

The licence transfers with the business: if your organisation is merged into, or acquired by, another, the licence goes with it. Tell us so we can move the order. It cannot be transferred on its own, sold separately, or split between unrelated organisations.

5. Refunds

These are digital documents, delivered immediately, and a downloaded document cannot be returned. So:

• No refund once you have requested a download of any file in the order. "Requested" means that a download link is issued for a file in the order: our system records the moment that happens, which is what we can see and evidence. We use that same record, and nothing else, to answer a refund question.
• A goodwill refund if you ask within 14 days: if you ask for a refund by writing to contact@meerlock.com from the address on the order, within 14 days of purchase, and no download has been requested at all for any file in the order, we will refund it in full, without asking why.
• If a policy is challenged, the Fix-It Promise in section 3 applies: we amend the document. A document that disagrees with your auditor gets fixed rather than refunded, because the fix is what you actually needed.

Whatever this section says, if you are charged twice, an order never reaches you, or anything goes wrong on our side, tell us and we will put it right. An order we hold or do not deliver under section 7 is dealt with under section 7, including the full refund it provides.

6. Prices and payment

Prices are shown in the currency you select. No VAT, GST or sales tax is added at checkout — the amount payable at checkout is the amount shown, in that currency (withholding tax payable on top is dealt with in section 7), and it must be paid in full before delivery. Prices are set independently for each currency and are not conversions of one another, so a price in one currency says nothing about the price in another. If your organisation is based in Thailand (that is, registered or with a place of business in Thailand, including a Thai branch of a foreign company), you must choose Thai baht (THB) at checkout. If such an organisation pays in another currency, we may ask you to pay the Thai baht price instead; once we have received that payment, we will refund your original payment in full, in the currency paid. Payment is handled by Stripe; we never see or hold your card details. If your card or account is in another currency, your bank converts the amount, and any fee it charges for that is between you and your bank. Any refund is made in the currency you paid in, and exchange-rate movements are not deducted from it. A promotion code reduces the price of the products it names and nothing else.

7. Taxes, and withholding

We add no VAT, GST or sales tax to your order. You remain responsible for any tax your own jurisdiction imposes on the purchase, including any self-assessment or reverse charge on a service bought from a foreign supplier. We ask for your business tax number at checkout as evidence for your records and ours; we do not calculate tax on it. In some countries the law treats an order without a business tax number as a sale to a consumer. We currently apply this rule to India, South Korea and the United Arab Emirates: if the billing address you enter at checkout is in one of those countries and you do not enter the number, we hold delivery until we have it, and if you do not have the number or would rather not give it, we refund the order in full. We also do not currently sell to buyers whose billing address is in Brazil or Mexico: such an order is not delivered, and we refund it in full. The countries named in this section may change for future orders under section 11.

Gross-up. Our prices are net amounts. If the law of your country requires you to withhold tax from a payment to a foreign supplier — for example withholding tax in China (around 6%), Vietnam (around 15%) or the Philippines — you must pay that amount on top of the price charged at checkout, so that we receive that price in full, and you must send us the withholding certificate. We have no way to reclaim a tax we cannot evidence, and quietly absorbing it would simply make the price different for different countries.

8. Support

Support is included and is by email at contact@meerlock.com. We read every message and reply personally; we are a small team and we do not promise an instant answer. Questions about which pack fits, how to adapt a document, or what an auditor asked for are all fair game.

9. What we do not promise

The documents are a professional starting point, not certification and not legal advice. No document set can make an organisation compliant: a certification or attestation depends on your implementation, your evidence and your auditor's judgement, none of which we control. We do not warrant that any pack will result in a particular certification or audit outcome.

To the extent the law allows, our total liability for all claims connected with an order, taken together, is limited to the amount you paid for that order, and we are not liable for indirect, consequential or special loss, lost profit, or lost data. Nothing in these terms limits or excludes liability for our fraud or gross negligence, or any liability that cannot lawfully be limited or excluded.

10. Privacy

What we hold, why, for how long and how to have it deleted is set out on the privacy page.

11. Changes

We may update these terms for future orders. Your order is governed by the version you accepted when you ordered, whose version number we record with your order, and the licence in section 4 for an order already placed cannot be narrowed afterwards. The version number and date of these terms are shown below.

12. Language

These terms are made in Thai and in English, and the two versions are one agreement. If the two texts differ in any way — including where one version says something the other does not — the Thai text prevails. The English version is prepared as a complete translation, true to the meaning of the Thai, so that a buyer who cannot read Thai knows clearly what they are agreeing to. Both versions carry the same version number and date, and we will not change either one without changing the other to match.

Whichever language you were reading these terms in when you accepted them, you agreed to the same contract. The language we record with your order shows only which language's page you accepted them on.

Version 1.3 — 25 September 2026. Questions about any clause: contact@meerlock.com.