Security Vulnerability Disclosure Policy

Last updated: 2026

At Jefferson Menswear, we take the security of our website and customer data very seriously. If you believe you have discovered a security vulnerability on our website, we encourage you to report it responsibly so we can investigate and fix the issue.

1. Purpose of This Policy

This policy explains how security researchers and users can report potential vulnerabilities in a safe and responsible way. We welcome good-faith reports that help improve our security.

2. Reporting Principles

If you follow these rules, we will not take legal action against you:

  • Give us time to fix the issue before public disclosure
  • Do not access private customer data
  • Do not modify or delete data
  • Do not attempt unauthorized access
  • Do not disrupt website services
  • Do not use phishing, malware, or social engineering
  • Comply with applicable laws

3. How to Report a Vulnerability

Please email us with full details:

Email: support@jeffersonmenswear.com

Include:

  • Affected page or URL
  • Description of the issue
  • Steps to reproduce
  • Proof (screenshots if possible)
  • Impact explanation

4. What You Can Expect

We will review your report, attempt to reproduce the issue, and take appropriate action if needed. Response time depends on severity and complexity.

5. Scope

This policy applies to:

  • Jefferson Menswear website
  • Checkout and customer account system
  • Order and payment-related security features

6. Out of Scope

  • Theoretical issues with no real impact
  • Automated scanner reports without proof
  • Spam or social engineering attacks
  • Denial of service testing
  • Issues on third-party services

7. No Bug Bounty

We do not offer guaranteed rewards or bug bounty payments. Any recognition is optional and at our discretion.

8. Public Disclosure

Do not publicly disclose vulnerabilities without written permission from Jefferson Menswear.

9. Confidentiality

All reports must be treated as confidential and must not include customer data or sensitive information.

10. Contact

Jefferson Menswear
7A Pillory St, Nantwich CW5 5BZ, United Kingdom
Email: support@jeffersonmenswear.com
Phone: +44 1270 625831