1. Secure connections
The website is served over HTTPS. Security headers, including a content security policy, restrict which external resources the site may load.
2. Payment security
Payments are processed by Stripe, a PCI DSS Level 1 certified provider. Card details are entered into components hosted by Stripe and are never received, processed or stored by this business. Secret API keys are held only on the server and are never exposed in website code.
3. Server-side validation
Prices and package details used at checkout are read from a server-side catalogue rather than from the browser, so amounts cannot be altered by a visitor.
4. Webhook verification
Payment notifications received from Stripe are verified using a signing secret before being accepted.
5. Data minimisation
Only the information needed to answer an enquiry or deliver a project is collected, and it is retained for the periods set out in the Privacy Policy.
6. Reporting a vulnerability
If you believe you have found a security issue, email hello@brightreachmarketing.co.uk with details. Please do not disclose it publicly until it has been addressed.
Contact
BrightReach Marketing Support
Sujana Shahi Thakuri
82-84 Plumstead High Street
Greenwich
London
SE18 1SL
United Kingdom
Email: hello@brightreachmarketing.co.uk
Phone: +44 7405 154002
BrightReach Marketing Support is independently owned and operated by Sujana Shahi Thakuri as a sole trader in the United Kingdom.