Security & responsible disclosure

If you believe you have found a security issue, select Support in our enquiry form. Include a description and the affected page, without sending passwords or personal records.
Avoid accessing other people’s data or disrupting services. Please allow the team to investigate before publishing sensitive details.
This site serves local assets and uses a restrictive content security policy. The enquiry endpoint validates submissions, checks request origin and limits request volume. HTTPS must be enabled by the production hosting provider.