Client Obligations 3.1 The Client shall:
Customer Obligations Customer shall:
Merchant Obligations (1) Merchant shall provide a valid, working administrative email address on enrolment. Any changes to Merchant’s account must be made via the administrative email address provided upon enrolment. The security of Merchant’s account is dependent in part upon Merchant maintaining the security of such administrative email address. Merchant shall be fully and solely responsible for any unauthorized changes to Merchant’s account via this email address. (2) Merchant will be given an ID code and password to allow Merchant to have access to Gateway Services. Merchant shall be fully and solely responsible for the establishment and maintenance of procedures to insure the control and confidentiality of identification codes and passwords and other access procedures (“Codes”). FAILURE TO PROTECT THE CODES MAY ALLOW UNAUTHORIZED PARTIES TO ACCESS THE GATEWAY SERVICES. Merchant is required to put in place internal procedures to limit such risk, including, but not limited to (a) changing the password at least once every 120 calendar days; (b) keeping every identification code under secure conditions; and (c) not keeping, in any form or in any place, any list of passwords. Merchant agrees to comply with any access or identification procedures and security protocols established from time to time by ISO, and if Merchant believes that any Code or security procedures has or may have become known by an unauthorized person (whether employed by Merchant or not), Merchant shall immediately notify ISO by telephone and confirm to ISO in writing such oral notification within 24 hours.
