CoreGrowth / Legal

Consulting terms of sale

Draft business-to-business terms for the four-week CorePilot configuration and implementation programme, to be incorporated into an agreed statement of work.

Draft for review · Updated 8 October 2026

These draft documents require legal review before being relied upon. The contracting entity, registered details and privacy arrangements must be confirmed. They do not replace a signed statement of work, non-disclosure agreement or data processing agreement.

1. Contract formation and order of precedence

These proposed terms apply to business clients only when expressly incorporated into a statement of work accepted by both parties. Browsing this page or submitting an enquiry does not buy services. The proposal identifies CorePilot Ltd as supplier; its registered company details and authority to contract must be confirmed in the signed agreement.

The contract comprises the signed statement of work, agreed changes, these terms and any separate licence, NDA or data processing agreement. The statement of work prevails on scope, timing and commercial items; a data processing agreement prevails on personal-data processing and an expressly overriding signed NDA on confidentiality. Software licensing is governed by the applicable separate agreement. Proposals are valid for 30 days from their issue date unless otherwise agreed.

2. Current programme and deliverables

The current offer is a four-week consulting configuration and implementation programme from a confirmed start date. Week 1 covers business discovery and HubSpot assessment, producing a business context brief, readiness assessment and remediation log. Week 2 covers strategy, KPIs and executive persona design, producing an approved strategy profile, KPI dictionary and persona catalogue.

Week 3 covers installation, OAuth scope verification, synchronisation, reconciliation, executive experience configuration and controlled write-back testing, producing a connected environment and validated reporting packs. Week 4 covers validation, administrator and user training, formal sign-off, an acceptance record, handover pack and 30-day adoption plan.

Included workstreams are business discovery, HubSpot data readiness, strategy and measures, executive agents and personas, intelligence experience, an approved competitor watchlist, technical implementation, and enablement and handover. Detailed deliverables, volumes, integrations and success criteria must be agreed in the statement of work.

3. Fees, payment and expenses

The current implementation fee is £15,000 plus VAT, in pounds sterling (GBP): 50% (£7,500 plus applicable VAT) upon contract execution and 50% (£7,500 plus applicable VAT) upon completion. Invoice due dates and any purchase-order requirements must be stated in the signed statement of work; this draft does not add a different payment period.

Standard remote delivery is included. Travel must be approved in advance and is charged at cost. Software subscriptions, third-party licences, ongoing managed services and work beyond the agreed scope are not included unless expressly listed in the statement of work. Statutory late-payment interest and compensation may apply where legally available; suspension for non-payment requires written notice and a reasonable opportunity to resolve it.

4. Client responsibilities and timetable

The client appoints an executive sponsor, programme lead, HubSpot administrator and metric owners; provides authorised access, accurate information, available workshop participants and timely decisions; and validates strategy, KPI definitions, targets and persona mandates. The client remains responsible for the legality, quality and completeness of its data and for its own business decisions.

Four weeks is the planned delivery period, not an unconditional deadline where dependencies are unmet. Client delays, material data issues or third-party outages must be documented and discussed promptly. Any revised timetable or additional charges require written agreement rather than unilateral scope expansion.

5. Changes, validation and acceptance

Any additional integration, data remediation, custom development, training or change in deliverables must be described in a written change request showing cost and timing effects, and approved by both parties before work proceeds.

Acceptance is measured against agreed validation and sign-off criteria in the statement of work. The client reviews deliverables, identifies material non-conformities with supporting details, and allows a reasonable opportunity to remedy and retest them. Review windows and the definition of completion for final invoicing must be agreed in writing; this draft does not impose acceptance merely through silence.

6. Professional standards and AI governance

Services will be provided with reasonable skill and care. The programme configures an intelligence and decision-support environment; it does not guarantee revenue, profit, valuation, investment or exit outcomes. Recommendations depend on available evidence, assumptions and third-party services and may need correction or independent validation.

Human executives retain responsibility for reviewing outputs and authorising actions. No live write-back is permitted without the client’s agreed permissions and approval controls. The client must not treat AI outputs as regulated investment, legal or tax advice.

7. Confidentiality and personal data

When incorporated into the signed contract, each party must protect the other’s non-public business, strategic, technical and client information; use it only for the engagement; and disclose it only to authorised personnel and advisers with equivalent duties. The usual exceptions apply for public information, prior lawful knowledge, independent development and lawful third-party receipt. Required legal disclosure is limited to what is necessary, with notice where lawful. Confidentiality continues for three years from disclosure; trade secrets remain protected while they qualify as such, subject to any overriding signed NDA.

Before personal data is accessed, the parties must agree controller and processor roles and a compliant data processing agreement covering instructions, access permissions, security, approved subprocessors, international transfers, rights requests, breaches, retention and deletion. Client data must remain tenant-isolated and must not be used to train general-purpose models. A website visit does not authorise processing.

8. Intellectual property and licences

The client retains ownership of its data and materials. The supplier retains pre-existing software, models, methods, templates and reusable know-how. Subject to full payment, the proposed position is that the client receives a non-exclusive right to use the bespoke engagement deliverables internally for its business purposes. Any transfer of ownership or wider licence must be expressly agreed.

Access to CorePilot or CoreSuite HS software, third-party systems and ongoing AI services requires the applicable licences and subscriptions; ownership or perpetual access is not implied by paying the implementation fee. Neither party may publish the other’s name, logo or confidential case study without prior written consent.

9. Cancellation, suspension and termination

Either party may terminate for a material breach not remedied within a reasonable period specified in written notice, or where continuation is unlawful. Convenience cancellation, rescheduling and any notice periods must be agreed in the statement of work.

On cancellation, the parties should reconcile work properly performed and unavoidable third-party commitments approved by the client against payments already made, and return any unearned balance. This draft does not make the initial payment automatically non-refundable or accelerate the entire unpaid fee. Handover, access revocation and data return or deletion follow the agreed contract and processing arrangements.

10. Liability, disputes and governing law

Any liability cap, excluded loss categories and insurance requirements must be expressly agreed in the signed statement of work following legal review; this draft does not introduce an unapproved monetary cap. Nothing excludes fraud, fraudulent misrepresentation, death or personal injury caused by negligence, or liabilities that cannot lawfully be excluded. Data protection and confidentiality liabilities must be considered explicitly.

The parties should first escalate a dispute to their programme leads and executive sponsors and consider mediation before proceedings, without preventing urgent remedies. The proposed governing law is England and Wales and jurisdiction is its courts, subject to applicable mandatory law and confirmation in the signed agreement.

Questions about these documents? Contact CoreGrowth.