Report Security Issues

CollectraSale takes the security of our website, systems, and customer data very seriously. If you have discovered a potential security vulnerability or technical risk, we want to know about it — responsibly and privately, before it is disclosed publicly.

1. Scope

This policy covers security vulnerabilities and issues affecting:

• collectrasale.com and its shopping cart, checkout, and payment flow
• Customer account systems and stored customer data
• Any subdomains, servers, or services operated directly by CollectraSale

It does not cover third-party services we integrate with (such as external payment gateway processors or independent shipping freight carriers) — please report issues with those services directly to the relevant provider.

2. What to Include in Your Report

To help us triage and resolve your report quickly, please include:

• A clear summary of the vulnerability and its potential security impact
• Detailed, step-by-step reproduction instructions
• Any relevant screenshots, server logs, or proof-of-concept demonstrations
• Your contact details if you would like us to follow up with you

3. Responsible Disclosure Guidelines

When testing or reporting vulnerabilities, we ask that you:

• Avoid accessing, modifying, or deleting data that does not belong to you
• Do not perform testing that could degrade Site availability or performance for other users (such as denial-of-service / DDoS testing or high-volume automated scanners)
• Give us a reasonable opportunity to investigate, patch, and address the issue before any public disclosure
• Do not attempt to exploit the vulnerability beyond what is strictly necessary to demonstrate its presence

4. Our Commitment

If you discover and report a vulnerability in good faith following these responsible disclosure guidelines, we will not pursue legal action against you. In turn, we commit to:

• Acknowledge receipt of your vulnerability report within 3 business days
• Promptly investigate, validate, and prioritize the issue
• Keep you reasonably informed of our remediation progress
• Credit you publicly (if you wish) once the issue has been patched and resolved

5. What Not to Report Here

This reporting channel is strictly reserved for technical security vulnerabilities and privacy concerns. For general customer support, order inquiries, shipping questions, or returns, please contact our support team at contact@collectrasale.com or call +1 (581) 907-2894.

6. Contact Information