Version 1.0, effective [to confirm: launch date]
This policy sets out what you may and may not do when using the Coffee Cyber service, including our control panel and the CrowdStrike Falcon platform we supply. It forms part of our Terms of Service. Coffee Cyber is a trading name of Coffee Cup Solutions Ltd.
1. Who this policy applies to
This policy applies to your business and to everyone you allow to use the service, including your staff and any IT provider or other third party you invite to your control panel or Falcon console. You are responsible for making sure they follow it.
2. Only protect systems you are allowed to
You must only install the Falcon agent on, and use the service in relation to, devices and systems that your business owns or has clear authority to manage. You must not use the service to monitor, scan, test or interfere with systems belonging to anyone else without their permission.
3. No tampering or reverse-engineering
You must not, and must not try to:
- tamper with, disable, bypass or modify the Falcon sensor, except by the normal uninstall and configuration methods provided;
- copy, decompile, disassemble or reverse-engineer the Falcon sensor, the Falcon platform or our control panel;
- get around any security, licensing or usage controls in the Falcon platform or our control panel; or
- access any part of our platform, or any other customer's data or console, that you are not authorised to access.
4. No load testing or scanning of our platform
You must not carry out load testing, stress testing, vulnerability scanning, penetration testing or automated crawling of our control panel, website or other systems without our prior written agreement. If you think you have found a security issue in our platform, please tell us through the support section of your control panel and do not try to exploit it.
5. Lawful use only
You must not use the service:
- to store, process or share unlawful content;
- for any purpose that breaks the law, including data protection and computer misuse laws; or
- to monitor individuals in a way that you do not have a lawful basis for, or have not told them about where the law requires it.
6. Keep sign-ins personal
Each person who uses the control panel must have their own sign-in. You must not share sign-in links, passkeys or accounts between people. Remove access promptly when someone leaves your business or no longer needs it, and tell us straight away if you think someone has gained access without permission.
7. No reselling
The service is for your own business use. You must not resell, sublicense or supply the service, or Falcon licences obtained through us, to anyone else unless we have agreed it in writing.
8. Follow CrowdStrike's terms
You must comply with CrowdStrike's end user terms for the Falcon platform, which you accept at sign-up. If anything in those terms is stricter than this policy, the stricter rule applies.
9. IT providers and other invited users
You may invite your IT provider or other third parties to your control panel or Falcon console to help you. They act on your behalf. You are responsible for choosing them, for the access you give them and for everything they do, as if you had done it yourself.
10. What happens if this policy is broken
If we reasonably believe this policy has been broken, we may:
- contact you and ask you to stop or put things right;
- remove or restrict access for particular users;
- suspend all or part of the service, in line with our Terms of Service;
- end the contract if the breach is serious or repeated; and
- report the matter to CrowdStrike, Pax8, the police or other authorities where appropriate.
Where we can, we will give you notice and a chance to put things right first. In urgent cases, such as a security risk, we may act straight away and tell you as soon as we can.
11. Changes to this policy
We may update this policy from time to time. The version number and effective date at the top of this page show when it last changed. We will tell you about significant changes through the control panel or by email.
12. Questions
If you are not sure whether something is allowed, ask us first through the support section of your control panel. Formal notices should be sent by post to Coffee Cup Solutions Ltd, Unit 3, Millars Brook, Wokingham, Berkshire, RG41 2AD.