01
Please do
- Email or write to GND Estate Limited (company number 15919540), 157 City Road, Birmingham, England, B16 0NW, marked “Security”. Describe the issue, the URL, and the steps to reproduce it.
- Give us a reasonable time to investigate before you publish.
- Limit testing to what you need to demonstrate the issue.
02
Please do not
- Access, change or delete other people’s data.
- Run ransomware, denial-of-service, or physical attacks.
- Spam our forms or staff inboxes as a “test”.
- Demand payment before you tell us the details. We do not run a public bug-bounty programme at present.
03
Scope
This invitation covers gndestate.co.uk and the forms on it. It does not cover third-party image hosts, browsers, or services we do not control. Out-of-scope reports may receive no reply.
04
What happens next
We will try to acknowledge a clearly described report. We may ask for more detail. We will not take legal action against a researcher who reports in good faith and stays within this page — but we do not authorise any offence under the Computer Misuse Act 1990.