Terms of Service

1. About These Terms

These Terms of Service govern access to https://oosecgh.com/ and the purchase or use of services and products offered by DoubleOsec Ltd, also referred to as “DoubleOsec”, “OOSEC”, “we”, “us” or “our”. DoubleOsec Ltd is a company registered in Ghana under company registration number 1943226.

By using this website, submitting an order, accepting a quotation, signing an agreement or paying for a service or product, you confirm that you have read and accepted these Terms. If you act for an organisation, you confirm that you have authority to bind that organisation.

Specific services may also be governed by a proposal, quotation, order form, statement of work, service level agreement, software licence, professional engagement agreement or other written contract. If there is a conflict, the signed or expressly accepted contract for that service will take priority over these website Terms.

2. Our Services and Products

DoubleOsec provides cybersecurity services, training, managed security services, advisory services and security technology. These may include vulnerability assessment, penetration testing, cloud and network security, incident response, digital forensics, threat intelligence, security awareness, red teaming, security operations and access to DoubleOsec platforms.

The features, scope, delivery method, service period and deliverables for each purchase will be described in the applicable quotation, invoice, product page, order form or contract.

3. Eligibility and Authority

You must be at least 18 years old and legally capable of entering into a contract to purchase directly from this website. A person purchasing for an organisation must have authority to do so.

Cybersecurity testing and investigative services require appropriate legal authority. You must not ask us to access or test any system, network, account, application, device, data or facility unless you own it or have obtained the necessary permission from the owner and any other relevant party.

4. Orders and Acceptance

A website enquiry, request for quotation or submitted order does not by itself require DoubleOsec to accept an engagement. An engagement is accepted when we issue written confirmation, both parties accept the applicable agreement, or we begin delivery after the agreed requirements have been met.

We may decline an engagement where the request is unlawful, outside our licensing or competence, presents an unacceptable safety or conflict risk, lacks adequate authorisation, or cannot be delivered within the requested period.

5. Client Responsibilities

You agree to:

  • provide complete and accurate information required for delivery;

  • identify authorised contacts and decision-makers;

  • obtain all permissions required for the agreed work;

  • identify critical systems, restricted activities and operational constraints;

  • maintain appropriate backups and recovery arrangements;

  • provide safe and timely access where access is required;

  • review deliverables and raise questions within the stated review period; and

  • use our reports, tools and services lawfully and only for their intended purpose.

We are not responsible for delay, incomplete delivery or increased risk caused by inaccurate information, unavailable client personnel, missing authorisation, delayed access or another matter outside our reasonable control.

6. Special Terms for Security Assessments

Penetration testing, vulnerability assessment, red teaming, social engineering, wireless testing and similar activities will be conducted only within the written scope and authorisation agreed with the client.

Unless expressly included in writing, the scope does not include denial-of-service testing, destructive testing, physical intrusion, testing of third-party systems, persistent access, unauthorised collection of personal data or any activity prohibited by law.

Although we use reasonable professional care, authorised security testing can affect system performance or expose an existing weakness. The client must disclose fragile or critical systems and maintain suitable backups and recovery arrangements. We will follow agreed escalation procedures if a material operational issue is observed.

7. Fees, Taxes and Payment

Fees are stated in the applicable quotation, invoice, order form, checkout page or agreement. Unless stated otherwise, applicable taxes, third-party charges and approved expenses may be added to the price.

Payment must be made by the due date and according to the stated milestones. We may require full or partial payment before reserving resources, commencing work, issuing a licence or providing access to a product.

Online payments may be processed by Paystack or another approved payment provider. Payment providers process payment credentials under their own terms and privacy policies. DoubleOsec does not receive or store full payment-card details.

If payment is overdue, we may pause delivery, withhold access or deliverables, suspend a subscription or terminate the affected service after giving appropriate notice. The client remains responsible for amounts already due.

8. Delivery and Timelines

Estimated start and completion dates depend on timely payment, authorisation, access and client inputs. A delay caused by the client or a third party may require the schedule to be revised.

Reports and other electronic deliverables will be sent to the approved contact or made available through an agreed secure method. Product access is delivered through account activation, licence issuance or another method stated at purchase.

9. Changes to Scope

Work outside the agreed scope requires written approval. We may issue a revised quotation, change request, delivery date or statement of work before performing additional work.

10. Cancellation and Refunds

Cancellation and refund requests are handled under our Refund and Cancellation Policy and any specific terms in the applicable quotation, order form or contract.

In general, refunds may be reduced by work already performed, resources reserved, licences activated, non-recoverable third-party costs, approved expenses and other commitments made for the engagement. Statutory rights that cannot lawfully be excluded remain unaffected.

11. Acceptable and Prohibited Use

You must not use this website, our products, reports or services to:

  • gain unauthorised access to systems, accounts or data;

  • harm, disrupt, defraud, threaten or monitor another person unlawfully;

  • develop or deploy malware or other harmful capabilities outside a lawful, authorised security purpose;

  • evade legal, regulatory or contractual restrictions;

  • copy, resell, reverse engineer or misuse our intellectual property except where expressly permitted; or

  • misrepresent your relationship with DoubleOsec.

We may suspend access or refuse service where we reasonably believe there is unlawful, fraudulent, abusive or unsafe use.

12. Confidentiality

Each party must protect confidential information received from the other and use it only for the relevant engagement. Confidential information may be shared with personnel, subcontractors and professional advisers who need it for the engagement and who are bound by appropriate confidentiality obligations.

Confidentiality obligations do not apply to information that is already public through no breach, was lawfully known before disclosure, is received lawfully from another source, is independently developed, or must be disclosed by law. Where lawful and practical, the receiving party will notify the other before a legally required disclosure.

13. Data Protection

Each party must comply with applicable data-protection obligations. Our processing of website, contact and customer information is described in our Privacy Policy.

Where DoubleOsec processes personal data on behalf of a client during an engagement, the client remains responsible for establishing a lawful basis, providing required notices and giving lawful instructions. The parties may enter into a separate data-processing agreement where appropriate.

14. Intellectual Property

Each party retains ownership of intellectual property it owned or developed independently before the engagement.

Unless a contract states otherwise, DoubleOsec retains ownership of its platforms, software, methodologies, templates, tools, research, know-how and reusable materials. After full payment, the client may use the final report and client-specific deliverables internally for the purpose for which they were provided.

The client retains ownership of its systems, data, trademarks and materials. The client gives DoubleOsec a limited right to use those materials only as required to deliver the agreed work.

We will not publicly identify a client, publish a testimonial or use a client logo without permission.

15. Third-Party Services

Our services may interact with hosting providers, cloud platforms, payment providers, open-source software or other third-party services. Those services may be governed by separate terms. We are not responsible for a third party’s service, outage, change or conduct where it is outside our reasonable control, but we will take reasonable care when selecting and using providers for an engagement.

16. Professional Standard and No Absolute Security Guarantee

We will perform agreed services with reasonable care and skill consistent with the applicable scope. Cybersecurity risk changes continuously, and an assessment reflects the systems, information, access and conditions available during the agreed period.

No assessment, product or managed service can identify every weakness or guarantee that an organisation will never experience a cyber incident. Unless expressly stated in a written agreement, services and website content are not a substitute for legal, regulatory, financial or insurance advice.

17. Limitation of Liability

To the extent permitted by Ghanaian law, neither party will be liable to the other for indirect, incidental, special or consequential loss, or for loss of profit, revenue, opportunity or goodwill, arising from the affected service.

Subject to any liability that cannot legally be limited, DoubleOsec’s total liability arising from a particular service will not exceed the amount paid or payable for that affected service. Any different liability arrangement stated in a signed contract will take priority.

18. Suspension and Termination

Either party may terminate an engagement as allowed by the applicable contract. We may suspend or terminate access where payment is overdue, required authorisation is withdrawn, continued delivery would be unlawful or unsafe, the client materially breaches the agreement, or our service is being misused.

Termination does not remove payment obligations, confidentiality duties, intellectual-property rights or other terms intended to continue after termination.

19. Events Outside Reasonable Control

Neither party will be responsible for failure or delay caused by an event outside its reasonable control, including widespread service outages, natural disasters, civil disruption, government action or failure of essential third-party infrastructure. The affected party must notify the other and take reasonable steps to reduce the impact.

20. Governing Law and Disputes

These Terms are governed by the laws of the Republic of Ghana. The parties will first try in good faith to resolve a dispute through direct discussion. If the dispute is not resolved, either party may refer it to a court of competent jurisdiction in Ghana, unless another dispute-resolution process is stated in the applicable contract.

21. Changes to These Terms

We may update these Terms to reflect changes to our services, operations or legal obligations. The revised version will be posted on this page with a new effective date. Changes will not retroactively alter a signed engagement unless agreed by the parties or required by law.

22. Contact

DoubleOsec Ltd
Company registration number: 1943226
BO59 Mendskrom, opposite Jayee University, Accra, Ghana
GhanaPost GPS: [insert confirmed digital address]
Email: info@oosecgh.com
Phone: (+233) 30 285 2909