Last reviewed: 16 July 2026
1. Reporting
Email info@clearshieldcyber.co.uk with the subject “Website Security Report”. Describe the affected URL, observed behaviour, date/time and safe reproduction steps.
2. Safe research boundaries
Do not access or alter other people’s data, disrupt availability, use destructive payloads, upload malware, attempt persistence, perform denial-of-service testing, send bulk requests or use social engineering.
3. Data handling
Stop immediately if personal or confidential information is encountered. Do not copy, retain or publish it. Include only the minimum evidence needed.
4. No automatic reward or safe-harbour promise
This page does not create a bug-bounty programme, contract, payment promise or legal immunity. Good-faith reports within these boundaries will be reviewed, but formal safe harbour can only be granted explicitly in writing.
5. Response
A report will be acknowledged when reasonably possible. Remediation timing depends on severity, reproducibility, hosting control and third-party dependencies.
Reference framework
- ICO UK GDPR guidance
- ICO privacy notices and cookies guidance
- Data Protection Act 2018
- Data (Use and Access) Act 2025
- Privacy and Electronic Communications Regulations 2003
- Electronic Commerce Regulations 2002
Legal review: these pages are a carefully structured starting point, not a substitute for a solicitor or data-protection professional reviewing the final business model, address, providers and processing activities.