Report Security Issues

Report Security Issues

Last updated: 4 October 2026

Report Security Issues to GOLAVON LIMITED if you identify a suspicious message, account or order concern, fake website, or potential vulnerability affecting golavon.com. This page explains how customers and security researchers can report concerns responsibly, what information to include, and what to expect from us after a report is submitted.

How to Report Security Issues to Golavon

If you believe there is a security problem affecting golavon.com, email contact@golavon.com with the subject line Security Report. Please include enough information for us to understand and investigate the issue without exposing personal data or creating unnecessary risk.

1. Report Security Issues as a Customer

Please contact us as soon as possible if you notice:

  • a suspicious or phishing email that appears to come from GOLAVON LIMITED;
  • unexpected or unauthorised activity relating to an order you placed;
  • a fake or copycat website impersonating golavon.com;
  • a message asking for sensitive information while claiming to represent Golavon; or
  • another security concern involving your interaction with our Website.

Email contact@golavon.com or call +44 798 859 8701. Where possible, include your order number, the sender's email address, the suspicious URL and relevant screenshots.

Please do not send passwords, full payment-card numbers, one-time passcodes or other highly sensitive credentials.

GOLAVON LIMITED will not ask you to send your full card number, account password or one-time passcode by email. If you receive a message requesting this information while claiming to be from us, report it before taking further action.

2. Report Security Issues as a Security Researcher

We welcome good-faith reports of genuine security vulnerabilities affecting golavon.com. Examples may include cross-site scripting, SQL injection, authentication or authorisation weaknesses, exposed sensitive information, or security misconfigurations that directly affect systems operated by GOLAVON LIMITED.

What Is in Scope

  • the golavon.com Website;
  • the Golavon checkout flow where it is directly operated by us; and
  • subdomains operated directly by GOLAVON LIMITED.

What Is Out of Scope

  • third-party payment processors, email providers, hosting providers or services that we do not operate directly;
  • denial-of-service or distributed denial-of-service testing;
  • social engineering of our staff, customers or service providers;
  • spam, mass automated form submissions or excessive automated scanning;
  • accessing, modifying, downloading or deleting data that does not belong to you; and
  • testing that requires access to an account, device or system you do not own or have permission to use.

If an issue relates to a third-party service, please report it directly to the relevant provider through its official security-reporting channel.

Information to Include When You Report Security Issues

To help us investigate efficiently, please include:

  1. a clear description of the issue and its potential impact;
  2. the affected URL or feature;
  3. reasonable step-by-step instructions that allow us to reproduce the issue safely;
  4. relevant screenshots, request details or a limited proof of concept where necessary; and
  5. your contact details if you would like us to follow up with you.

Please minimise the collection or disclosure of personal information. A proof of concept should demonstrate the issue without accessing more data than is reasonably necessary to establish that the vulnerability exists.

Responsible Disclosure

When you report a security issue, we ask that you act in good faith, avoid disrupting the Website or other customers, and give us a reasonable opportunity to investigate and address a confirmed issue before publishing technical details.

Do not use a vulnerability report as permission to access data, interfere with service availability, perform destructive testing or exceed the minimum steps needed to demonstrate the issue.

For general guidance on vulnerability disclosure, you can also review the UK National Cyber Security Centre vulnerability reporting guidance.

What Happens After You Report Security Issues

We aim to acknowledge genuine security reports within 3 business days. We will review the information provided, determine whether the issue affects systems within our control and, where appropriate, provide an update about the investigation or next steps.

Timelines for remediation depend on the nature, severity and complexity of the issue. We do not promise a fixed resolution period for every vulnerability, but we aim to handle credible reports responsibly and proportionately.

We do not intend to take legal action against security researchers who act in good faith, remain within the scope described on this page and avoid harm, disruption, privacy violations or unauthorised access.

Security, Privacy and Customer Support

For information about how we handle personal information, see our Privacy Policy.

For ordinary order, activation, billing or delivery questions that are not security issues, please use our Contact Us page.

Reporting a security issue through this page is not the same as requesting a refund, replacement or cancellation. Those matters are covered by our separate customer policies.

Contact Golavon Limited

Business Name: GOLAVON LIMITED
Company Number: 17164826
Registered Office: Unit 13 Freeland Park, Wareham Road, Lytchett Matravers, Poole, England, BH16 6FA, United Kingdom
Email: contact@golavon.com
Phone: +44 798 859 8701

Business Hours
Monday–Friday: 9:00 AM–6:00 PM
Saturday: 10:00 AM–4:00 PM
Sunday: Closed

Use this Report Security Issues page whenever you need to alert GOLAVON LIMITED to a genuine security concern affecting our Website or customers.