sk0ut Group / Legal / Security and reporting a problem

Security and reporting a problem

What we do, and how to tell us if you spot something.

DRAFT. This text is a starting point and has not been checked by a solicitor. Replace the square-bracket items and have it reviewed before the site goes live.

How we protect data

This site is a set of static pages with no accounts, forms or database. Each business describes its own protections on its own security page, and every staff sign-in needs two-step verification.
Access keys are kept out of the website and the code.

Reporting a vulnerability

If you find a security problem, email thomas.michael.rees@gmail.com with the details. Please do not access other people's data, and give us reasonable time to fix it. We will acknowledge within 3 working days. We do not run a paid bounty programme.

Last updated: 15 October 2026.