Report a Security Issue

WIXAY LTD (trading as Run Baby Run) takes the security of our website and customer data very seriously. We welcome responsible disclosure of security vulnerabilities.

How to Report

If you believe you have discovered a security vulnerability on runbabyrun.co.uk, please email us at welcome@runbabyrun.co.uk with the subject line: Security Disclosure.

Please include:

A description of the vulnerability
Steps to reproduce the issue
Potential impact or severity
Your contact details (optional, but helpful for follow-up)

Our Response

We will acknowledge your report within 72 hours and aim to provide an update on our remediation timeline within 7 days.

Responsible Disclosure

We ask that you do not publicly disclose the vulnerability until we have had a reasonable opportunity to investigate and address it — we request a minimum of 90 days from the date of your initial report before any public disclosure.

We will not take legal action against researchers who act in good faith and follow this disclosure process.

Scope

This policy applies to the runbabyrun.co.uk website and associated services. It does not cover third-party services such as PayPal — please report those issues directly to the relevant provider.