Terms of service
General terms
Quotes and agreements
Projects are carried out on the basis of a written quote. Work begins once the quote is accepted. Changes to scope are agreed in writing before they are implemented.
Fixed-price services
Prices in the price list are starting prices and cover the work described for each service. Fixed-price services are paid when ordered. If a job turns out larger than described, we tell you and agree any additional work and its price before continuing. We never bill extra work without your approval.
Start and timeline
Fixed-price work starts the same business day when the order is paid and the required access is provided by 14:00 Finnish time, Monday to Friday. Later orders start the next business day. Starting is not the same as finishing: completion time depends on the scope and on when we receive the information we need.
Access and credentials
Credentials (for example WordPress, hosting, SSH/SFTP and database) are provided only through encrypted fields in the OMA client portal. We do not accept credentials by email, phone, instant message or contact form, and we delete any we receive that way. The client confirms they are entitled to give us access to the environment. We use credentials only for the agreed work and recommend changing them once the work is complete.
Client responsibilities
The client is responsible for the accuracy of the information, content and materials they provide, and for ensuring their use does not infringe third-party rights. The client is responsible for agreements and fees with their own providers, such as hosting, domains and plugins.
Backups
We take a backup before making changes whenever the environment allows it. If a backup cannot be taken, we tell you before starting. This does not replace the client's own backups.
Repair warranty
If the same fault returns within 14 days of completion and is caused by our work, we fix it free of charge. The warranty does not cover faults caused by changes, updates or services of the client or third parties, or by new attacks.
Consumer clients
If the client is a consumer, they have a 14-day right of withdrawal under the Finnish Consumer Protection Act. By ordering, the consumer requests that work begins during the withdrawal period. Once the service has been fully performed, the right of withdrawal no longer applies. If the consumer withdraws during the work, they pay a proportionate share for work already done.
Payment
Fixed-price services are paid when ordered. Other invoices are payable within 14 days unless otherwise agreed. VAT is added at the applicable rate. Late payments accrue interest under the Finnish Interest Act.
Copyright
The right to use the work transfers to the client once the invoice is paid, unless otherwise agreed. Third-party plugins, themes, fonts, images and software are subject to their own licences. We may present the work as a reference unless the client forbids it in writing.
Limitation of liability
We carry out the work with care and professional skill. Our liability is limited to the price of the order in question. We are not liable for indirect damages, such as lost profit, business interruption or data loss, or for outages or changes in third-party services. This limitation does not apply to damage caused intentionally or through gross negligence.
Force majeure
We are not liable for delays caused by circumstances beyond our control, such as widespread network disruption, provider outages, actions by authorities or natural events.
Personal data
If the work involves personal data held by the client, we act as a processor and sign a data processing agreement when needed. The client is the controller and is responsible, for example, for notifying authorities of personal data breaches.
Managed care, disputes and governing law
Managed care is agreed separately. Disputes are first resolved through negotiation. Finnish law applies. Consumers may also take the matter to the Finnish Consumer Disputes Board. Maximum Effort Ay, Järvenpää, Finland.
Service-specific addenda
These addenda apply to the service groups in the price list. They supplement the general terms.
Emergency help
The emergency price covers diagnosis and recovery up to two hours of work. Larger work is agreed separately before we continue.
Urgent jobs get priority, but we do not guarantee a recovery time, because it depends on the cause and on third parties such as the hosting provider.
If the fault lies with a hosting or domain provider, we help investigate, but we are not responsible for that provider's service.
Hacked site recovery and incident report
Cleanup and restoration are based on what the investigation finds. We remove the malicious code found and fix the identified entry point, but we cannot guarantee the site will never be attacked again.
If the backups are also infected, we restore the latest state verified as clean or clean the current installation. Changes made after that point may be lost.
The client must change all site, hosting, database and email passwords after the work. If the same entry point reopens within 30 days, we check it free of charge.
The incident report is a technical description of events and actions. It is not legal advice and does not guarantee an insurance payout. As controller, the client remains responsible for any personal data breach notification to the supervisory authority within 72 hours.
WordPress and WooCommerce
Fixed-price fixes cover one defined fault or the scope described for the service. A quick fix covers up to one hour of work.
Licences and fees for third-party plugins, themes and payment services belong to the client. We are not responsible for their future updates or compatibility.
For speed optimisation we measure before and after. We do not guarantee a specific score, because the result also depends on the server, the content and external scripts.
Security hardening significantly reduces risk, but no measure removes it entirely.
For migrations, DNS changes can take up to a day to propagate. Email migration is not included unless agreed. Maintenance of custom code is a separate service.
Web and infrastructure
Work is done in the environment the client has chosen and under that provider's terms. We are not responsible for the provider's outages, limits or prices.
Administrator-level access is granted only for the duration of the work. The client is responsible for access to the environment afterwards.
Monitoring alerts are informational. Response times to alerts are agreed in a separate care agreement.
Backup retention and storage costs follow the agreed setup and the client's storage service.
Automation and AI
Usage fees for third-party services, such as language models, APIs and automation platforms, belong to the client.
AI-generated content can be wrong. The client is responsible for how outputs are used, and a person making decisions reviews them.
If an automation processes personal data, we sign a data processing agreement before it goes live.
Changes to external APIs may require updates. Their maintenance is agreed separately.
Brand, search and marketing
We do not guarantee specific search rankings, traffic or sales, because they depend on search engines, competition and the market.
Advertising spend is not included in the price. The ad platform bills it directly to the client.
The client approves content before it is published and is responsible for ensuring the material they provide does not infringe the rights of others.
Rights to the logo and identity transfer to the client after payment. Trademark searches and registration are not included.