1. Our approach
Our website is designed to collect as little personal information as practical. Current safeguards include encrypted HTTPS transport, restrictive browser security headers, protected administrative preview access, request validation and abuse limits on server endpoints, server-side payment keys, dependency security updates, and optional loading of third-party map content.
Security is an ongoing process. No website can promise absolute security, so we review safeguards as the site and threat environment change.
2. Report a vulnerability
If you believe you have found a security issue affecting this website, email info@thandolwami-bushlodge.com with “Security report” in the subject. Please include:
- the affected page or endpoint;
- a clear description of the issue and its likely impact;
- minimal, non-destructive reproduction steps;
- the date and time of testing; and
- a safe way to contact you.
Do not include live passwords, full payment data, or personal information belonging to someone else in the report.
3. Safe research guidelines
Good-faith research must avoid:
- accessing, changing, retaining, or disclosing another person’s data;
- service disruption, denial-of-service, spam, or high-volume automation;
- social engineering, physical intrusion, or attacks on staff and suppliers;
- uploading malware or using a vulnerability beyond minimal verification; and
- public disclosure before we have had a reasonable opportunity to respond.
This page does not create a bug-bounty programme, promise payment, or authorise testing of third-party services linked from the website.
4. What to expect
We aim to acknowledge a credible report within seven days, assess its severity, and keep the reporter informed when practical. Resolution time depends on impact, complexity, and any third-party involvement. We ask for coordinated disclosure until a reasonable fix is available.
5. Personal data or account concerns
If your concern is about your own personal information rather than a technical vulnerability, email info@thandolwami-bushlodge.com with “Privacy request” in the subject. Our handling of personal information and your rights are described in the Privacy Policy.