1. Reporting
Email info@eatwelltechsolutions.co.uk with the subject “ClassControl security report”. Include affected URLs, reproduction steps, impact and supporting evidence.
2. Safe-harbour expectations
- Do not access, alter or retain data belonging to others.
- Do not disrupt service, use denial-of-service techniques or automated high-volume scanning.
- Do not publicly disclose before a reasonable remediation period.
- Stop testing and report immediately if sensitive data is encountered.
3. Our response
We aim to acknowledge legitimate reports, investigate them and communicate material progress. Response time depends on severity and report quality. This policy does not create a bug-bounty entitlement.
Document status:
This document is provided as an operational draft for ClassControl.
Commercial terms, supplier arrangements and legal obligations should
be reviewed by a qualified UK solicitor before contractual reliance.