AI-SPECIFIC ADDENDUM #
(Applicable to All Xdemór Services)
Effective Date: 01 February 2026
Entity: The Xdemór Group Limited
Company No.: 14456444
Registered Office: 86–90 Paul Street, London, EC2A 4NE, United Kingdom
Governing Law: England and Wales
1. Legal Status and Incorporation #
This AI-Specific Addendum (“Addendum”) constitutes binding contractual terms governing the use of artificial intelligence, automated systems, and algorithmic processing within Xdemór services.
This Addendum is incorporated by reference pursuant to Clause 8.10 (Policy Incorporation and Amendment) of the Xdemór Terms of Service and applies prospectively from its Effective Date.
This Addendum applies in conjunction with, and supplements, the following policies (non-exhaustive):
- Terms of Service
- Data Processing Agreement (DPA)
- SEO Management Service Policy
- PPC Management Service Policy
- Visual & Poster Design Product Policy
- Website & Web Development Policy
- Hosting and Infrastructure Policies
- Service Status & Notifications Policy
In the event of conflict, mandatory applicable law shall prevail, followed by the Data Processing Agreement (for data protection matters), the Terms of Service, and then this Addendum.
2. Scope of Application #
This Addendum applies to all services, products, platforms, tools, and environments operated, managed, or delivered under the Xdemór Infrastructure where artificial intelligence or automated systems are used.
This includes, without limitation:
- SEO, PPC, and marketing optimisation services
- Visual, poster, motion, and creative design services
- Website and web development services
- Hosting, infrastructure, and content offload services
- Client monitoring, analytics, reporting, and optimisation
- Internal service improvement and platform optimisation
3. Definition of AI and Automated Systems #
For the purposes of this Addendum, “AI Systems” and “Automated Systems” include any software, model, algorithm, or workflow that performs one or more of the following:
- AI-assisted content generation or enhancement
- AI-assisted design, rendering, animation, or visual production
- Automated analysis, classification, scoring, or clustering
- Behavioural monitoring, trend detection, and analytics
- Predictive modelling or recommendation generation
- Automated internal optimisation of services or infrastructure
AI Systems are used as technical and operational tools and do not operate as autonomous legal decision-makers.
4. Data Protection Roles (UK GDPR) #
Where AI Systems involve the processing of personal data:
- The Client acts as Data Controller within the meaning of Article 4(7) UK GDPR.
- Xdemór acts as Data Processor within the meaning of Article 4(8) UK GDPR.
Xdemór processes personal data solely on documented instructions from the Client and strictly in accordance with the Data Processing Agreement.Independent Controller Processing
Where Xdemór processes anonymised or irreversibly pseudonymised data for its own purposes, including internal analytics, service optimisation, or AI model improvement, such processing does not constitute personal data processing under applicable data protection law.
In such cases, Xdemór may act as an independent Data Controller.
5. Lawful Basis and Client Obligations #
The Client is solely responsible for:
- identifying, documenting, and maintaining a valid lawful basis under Article 6 UK GDPR;
- providing all required privacy notices and disclosures to data subjects;
- obtaining and managing any required consents;
- ensuring downstream compliance for any monitored or analysed data.
Xdemór does not determine, verify, or assume responsibility for the Client’s lawful basis.
6. Categories of Data #
AI Systems may process, where lawfully instructed:
- identifiers such as IP addresses and user/session IDs;
- cookie, pixel, and tracking identifiers;
- behavioural and usage analytics;
- technical metadata (device, browser, environment);
- aggregated or derived insights.
Special Category Data under Article 9 UK GDPR is not processed unless explicitly agreed in writing and supported by an appropriate Data Protection Impact Assessment (DPIA).
7. Automated Decision-Making #
Xdemór does not carry out decisions producing legal or similarly significant effects on individuals solely through automated means within the meaning of Article 22 UK GDPR.
AI outputs are supportive and assistive in nature and are subject to human oversight where legally required.
8. AI Training, Prompts, and Models #
All AI-related elements used by Xdemór, including but not limited to:
- prompts and prompt structures;
- workflows and orchestration logic;
- model configurations and tuning;
- training methodologies and optimisation logic;
- derivative or composite outputs;
constitute Xdemór proprietary technology and know-how.
No rights, licences, or interests are granted to the Client in:
- AI models or weights;
- training data or datasets;
- prompts or internal logic;
- derivative technical methodologies.
Payment for services does not transfer ownership of any AI-related assets.
9. Subprocessors and International Transfers #
Xdemór may engage AI and automation subprocessors and perform international data transfers strictly in accordance with:
- the Data Processing Agreement;
- Chapter V UK GDPR;
- adequacy decisions, Standard Contractual Clauses (SCCs), or the UK IDTA, as applicable.
A current list of authorised subprocessors is maintained in Xdemór’s published subprocessor registers.
10. Prohibited Client Actions #
The Client must not:
- require disclosure of AI models, training data, or internal logic;
- attempt reverse engineering, extraction, or replication of AI systems;
- represent AI-assisted outputs as proprietary technology of the Client;
- introduce personal data into AI systems without a valid lawful basis;
- demand explainability, audit access, or human intervention beyond what is required by mandatory law or expressly agreed in writing.
11. Liability and Risk Allocation #
Xdemór’s liability in relation to AI Systems is limited to its obligations as a Data Processor under applicable data protection law and the Data Processing Agreement.
The Client remains fully liable for:
- unlawful data collection or disclosure;
- absence or invalidity of lawful basis;
- regulatory breaches arising from Client content, instructions, or configurations.
All liability limitations set out in the Terms of Service apply.
12. Regulatory Evolution #
Where future legislation, guidance, or enforcement (including AI-specific regulation) becomes applicable, Xdemór may update this Addendum in accordance with Clause 8.10 of the Terms of Service.
Such updates shall apply prospectively and shall not be deemed a Material Change where made for compliance, security, or risk-control purposes.
13. Governing Law and Jurisdiction #
This Addendum is governed by and construed in accordance with the laws of England and Wales.
The courts of England and Wales shall have exclusive jurisdiction.