Terms of Service (Ireland)

A Terms of Service in Ireland sets the service levels, data-handling duties, fees, and liability terms under which the technology or platform is supplied, and takes its legal force from the Electronic Commerce Act 2000. It defines the service scope, SLA, pricing, data-protection duties, and liability allocation between provider and customer.

The Electronic Commerce Act 2000 (ECA 2000) is the primary legislation governing the formation and validity of online contracts in Ireland. It transposed the EU E-Commerce Directive (Directive 2000/31/EC) and established the principle of technological neutrality — that contracts concluded electronically are as legally valid as paper contracts. Section 19 of the ECA 2000 confirms that electronic contracts cannot be denied legal effect solely because they were made electronically. Sections 21 and 22 set out mandatory pre-contractual information requirements and rules for determining when an electronic contract is formed.

For SaaS products, the terms of service govern the entire lifecycle of the B2B relationship: access to and use of the software platform, acceptable use obligations, intellectual property ownership and licensing (governed by the Copyright and Related Rights Act 2000), service levels and availability commitments, data processing obligations under GDPR, payment terms, confidentiality, limitation of liability, and termination.

GDPR (Regulation (EU) 2016/679) and the Data Protection Act 2018 are critically important for any SaaS ToS because SaaS providers typically process personal data on behalf of their business customers as 'data processors'. GDPR Article 28(3) requires that a binding data processing agreement (DPA) — containing specified mandatory terms — governs the processing of personal data by the processor. In practice, many SaaS providers incorporate the DPA as a schedule to their terms of service. The Data Protection Commission (DPC), Ireland's supervisory authority under GDPR, has regulatory oversight of data processing compliance.

The Sale of Goods and Supply of Services Act 1980 implies certain conditions and warranties into contracts for the supply of services — including implied terms that the supplier has the necessary skill, uses proper materials, and that the service will be fit for the purpose. These implied terms can be excluded in B2B contracts by express terms, but only if it is fair and reasonable to do so, having regard to the circumstances known to or contemplated by the parties at the time of contracting.

For SaaS companies that provide services to both Irish and international business customers, the terms of service should address the governing law (Irish law), the jurisdiction for dispute resolution (Irish courts), and the mechanics for international data transfers where applicable.

The Consumer Rights Act 2022, which came into force on 29 November 2022 and transposed the EU Digital Content Directive (Directive (EU) 2019/770) and the Sale of Goods Directive (Directive (EU) 2019/771) into Irish law, introduced important new protections for consumers purchasing digital content and digital services. Where a SaaS provider supplies digital services to consumers (B2C), the Consumer Rights Act 2022 imposes mandatory conformity requirements — the digital service must conform to the contract, be fit for purpose, and be of the quality the consumer can reasonably expect. Consumers have statutory remedies including the right to have the service brought into conformity free of charge, a price reduction, or contract termination. B2B SaaS terms of service are not subject to the Consumer Rights Act 2022, but providers should clearly exclude consumer use in their terms to avoid ambiguity about the applicable regime.

For SaaS companies operating in regulated sectors in Ireland — including financial technology (fintech), healthcare technology (healthtech), and legal technology (legaltech) — additional regulatory obligations may apply beyond the general framework of the ECA 2000, GDPR, and the Sale of Goods and Supply of Services Act 1980. FinTech companies providing payment services are regulated under the European Union (Payment Services) Regulations 2018 (S.I. No. 6 of 2018), which transpose PSD2 (Directive (EU) 2015/2366) and impose specific obligations on payment service providers including strong customer authentication requirements. Companies providing investment or financial advisory services are regulated under MiFID II (Directive 2014/65/EU) and must comply with the Central Bank of Ireland's requirements for investment firms.

Irish SaaS companies that process health data or whose software constitutes a medical device are subject to the EU Medical Device Regulation (Regulation (EU) 2017/745) and must comply with the Health Products Regulatory Authority (HPRA) requirements for software as a medical device. These regulatory requirements have significant implications for terms of service, particularly for limitation of liability and warranty provisions. Solicitors and commercial lawyers advising Irish SaaS companies on their terms of service emphasise the importance of having the terms reviewed by legal counsel familiar with both general Irish contract law and the specific sector regulations applicable to the company's product, to confirm the terms are commercially effective, legally compliant, and provide adequate protection against the company's actual liability exposure in its target markets.

Irish Terms of Service are needed by any Irish company or sole trader that provides access to software, an online platform, a mobile application, a subscription service, an API, or any other digital service to business customers — whether on a paid subscription basis, a freemium model, or a pay-per-use arrangement. The terms of service are the foundational legal document governing the B2B commercial relationship and protecting both the provider and the customer.

You need Terms of Service if your organisation: operates a SaaS platform or web application that business customers access through a browser or API; provides mobile or desktop software under a subscription licence to business users; operates a marketplace, data platform, or analytics service accessed by business customers; provides API access to a database, data feed, or software service; operates a cloud-based communications, collaboration, or productivity tool used by business customers; or delivers professional services, consultancy, or support services through or alongside an online platform.

The terms of service are particularly important for: defining the scope of the licence granted to the customer and the restrictions on use (preventing reverse engineering, unauthorised copying, sublicencing, or use for prohibited purposes); protecting the provider's intellectual property in the software and platform under the Copyright and Related Rights Act 2000; establishing the service level commitments (uptime, response times, maintenance windows) and the remedies available to the customer if those levels are not met; limiting the provider's liability for indirect or consequential losses, data loss, and third-party service outages; governing the collection, processing, and storage of customer data and complying with GDPR Article 28 data processor obligations; and establishing a clear termination and data return procedure so that customers can exit the relationship and retrieve their data.

For start-up SaaS companies seeking investment or enterprise customers, having well-drafted, professionally reviewed terms of service is often a commercial necessity: institutional investors and enterprise procurement teams will scrutinise the terms before contracting, and poorly drafted or legally non-compliant terms can be a material obstacle to closing deals. Irish solicitors with technology and commercial law expertise typically review SaaS terms of service as part of due diligence exercises and commercial contract negotiations.

Organisations that have relied on generic, off-the-shelf terms of service should have them reviewed by an Irish solicitor to confirm they accurately reflect the service offered, comply with the Electronic Commerce Act 2000, GDPR, and the Sale of Goods and Supply of Services Act 1980, and provide adequate protection against the provider's actual liability exposure.

Under the Companies Act 2014, the Companies Registration Office (CRO) maintains the register of Irish companies. Section 343 of the Companies Act 2014 sets annual confirmation obligations. The Competition and Consumer Protection Commission (CCPC) enforces the Consumer Rights Act 2022. The Central Bank of Ireland regulates financial services under the Central Bank Act 1971. The High Court of Ireland has jurisdiction under Section 212 of the Companies Act 2014.

A thorough set of Irish B2B Terms of Service should contain several essential provisions to govern the commercial relationship between the provider and its business customers effectively and to protect both parties' legal rights.

The parties and acceptance clause identifies the service provider (including company registration details and registered office) and specifies how the customer accepts the terms — typically by clicking an 'I agree' button, by countersigning an order form, or by accessing and using the service. The clause should make clear that the terms constitute a binding legal contract under the Electronic Commerce Act 2000, and that they supersede all prior agreements and representations.

The service description and access clause defines the service that the provider is offering (the SaaS platform, software features, API access, or other digital service), the documentation to which the customer is entitled, and the access credentials and security obligations of the customer. The clause should specify whether the service is available 24/7, subject to scheduled maintenance windows, and what notice will be given of planned downtime.

The licence grant clause grants the customer a limited, non-exclusive, non-transferable, revocable licence to access and use the service during the term for the customer's internal business purposes, subject to the number of users or other metrics specified in the order form. The clause should exhaustively list prohibited uses: reverse engineering, decompilation, creating derivative works, sublicencing, or using the service to develop a competing product.

The intellectual property ownership clause confirms that all intellectual property in the service, software, platform, documentation, and associated materials (including all updates and modifications) is and remains the exclusive property of the provider. The customer retains ownership of its data and any content it uploads to the platform.

The data processing agreement (DPA) clause — typically as a schedule to the terms of service — must comply with GDPR Article 28(3) and include all mandatory terms: processing only on documented instructions, confidentiality obligations, security measures, sub-processor obligations, assistance with data subject rights requests, deletion or return of data on termination, and audit rights.

The service levels clause specifies any uptime commitments (for example, 99.5% monthly uptime), the measurement methodology, scheduled maintenance exclusions, and the customer's sole remedies for service level failures (typically a service credit against future fees, not a right to terminate or claim damages).

The fees and payment clause specifies the subscription fees, billing frequency (monthly or annually), payment terms, late payment interest (by reference to the European Communities (Late Payment in Commercial Transactions) Regulations 2012 (S.I. No. 580 of 2012), which implement EU Directive 2011/7/EU and apply the ECB reference rate plus 8 percentage points for late payments in B2B commercial transactions, with interest accruing automatically without the need for a reminder), and rights to increase fees on notice.

The limitation of liability clause caps the provider's aggregate liability at the fees paid in the preceding twelve months, excludes liability for indirect, consequential, incidental, special, or exemplary losses, and expressly carves out liability that cannot be limited under Irish law (death, personal injury from negligence, fraud).

The term and termination clause specifies the initial contract term, renewal terms (automatic or manual), and the grounds for termination by either party — including termination for cause (material breach unremedied after notice), termination for insolvency, and in some cases termination for convenience on notice. The clause must address the data return and deletion obligations that apply on termination. The forms-legal.com Terms of Service (Ireland) template covers the mandatory elements under Companies Act 2014.