Report a Security Issue

Our Commitment to Security

We are committed to maintaining a safe and trustworthy shopping environment for every customer who visits Flamezy.shop. We take appropriate technical and organisational measures to protect our website, your personal data, and your payment information.

We recognise that no system is entirely immune to vulnerabilities. That is why we welcome responsible disclosure from security researchers, customers, and members of the public who identify potential issues with our website or services. Your contribution helps us keep Flamezy.shop safe for everyone.

What to Report

We are interested in hearing about any security concern that could affect the safety of our website, customer data, or payment systems. The following are examples of issues that fall within the scope of this policy:

In Scope — Please Report These

Out of Scope — Please Do Not Report These

How to Report a Security Issue

If you have identified a security vulnerability or concern, please report it to us as soon as possible by following the steps below. We ask that you do not publicly disclose the issue until we have had a reasonable opportunity to investigate and address it.

What to Include in Your Report

To help us investigate and resolve your report as efficiently as possible, please include the following information where available:

• Type of vulnerability — e.g. XSS, SQL injection, data exposure, authentication flaw
• Location of the issue — the specific URL, page, or feature on our website where the vulnerability exists
• Steps to reproduce — a clear, step-by-step description of how to trigger or observe the issue
• Potential impact — your assessment of what an attacker could achieve by exploiting this vulnerability
• Supporting evidence — screenshots, screen recordings, proof-of-concept code, or HTTP request/response logs where relevant
• Your contact details — name and email address for follow-up correspondence

Our Response Timeline

We take all security reports seriously and aim to respond and resolve issues as promptly as possible. Below is our target response timeline for security reports:

For complex or critical vulnerabilities, resolution may take longer. We will always communicate openly with you throughout the process and provide regular updates.

Responsible Disclosure Guidelines

We ask that anyone reporting a security issue to Flamezy.shop acts in good faith and follows the responsible disclosure principles below.

Reporting Suspicious Activity as a Customer

If you are a customer and have noticed something suspicious — such as an unexpected charge, an email claiming to be from Flamezy.shop that looks fraudulent, or any other activity that concerns you — please contact us immediately. You do not need to be a security professional to raise a concern.

• Unexpected or unauthorised charges on your card after ordering from us
• Phishing emails pretending to be from Flamezy.shop asking for personal or payment details
• Fake websites impersonating Flamezy.shop to deceive customers
• Account compromise — if you believe your Flamezy.shop account has been accessed without your permission
• Any other suspicious communication involving our store name, logo, or branding

Confidentiality & Privacy

We understand that individuals reporting security issues may have concerns about their privacy. We are committed to handling all security reports with the utmost confidentiality.

• Your identity will not be disclosed to any third party without your explicit consent
• Your contact details will be used solely for the purpose of following up on your security report
• We will not share the details of your report beyond the individuals directly involved in investigating and resolving the issue
• Anonymous reports are accepted — however, please note that anonymous reports may limit our ability to follow up or seek further information

Any personal data you provide as part of your security report will be handled in accordance with our Privacy Policy and UK GDPR obligations.

Changes to This Policy

We may update this Security Reporting Policy from time to time to reflect improvements in our security practices or changes in legal requirements. Any updates will be published on this page with a revised “Last Updated” date.

We encourage all customers and security researchers to review this page periodically. If you have any questions about our security practices, please do not hesitate to reach out.