Security begins with a clear scope.
This website is designed to share information without asking visitors to open accounts or enter payment card details on our pages. Project-specific access and security responsibilities must be agreed separately.
What this website does not do
This website does not ask visitors to create accounts or submit passwords. Payments are made on Stripe's own secure checkout page, so card details are never entered on or stored by this website. Please never send credentials or sensitive customer data through the contact form or an introductory email.
Business systems and client projects
Before a project starts, we discuss the accounts, devices, and information involved, who authorizes access, and which controls or specialist reviews may be required. Sensitive personal, health, donor or financial information is handled only when it has been agreed in writing, with the right safeguards and, where required, specialist review.
Report a concern
If you believe you have found a security issue related to the Clovvi website, email clovvisystems@gmail.com with a brief description and steps to reproduce, without including private data. We cannot authorize intrusive testing against our systems.
An honest approach to risk
HTTPS and good security controls reduce risk, but no system can be made completely risk-free. We are open about known limits instead of promising perfect security, and we agree on how issues will be reported and handled.