Security

Protecting this website

We apply common web security measures, including:

• encrypted connections (HTTPS) for all traffic to the site;
• browser security headers such as HSTS, a content security policy and protection against framing;
• limiting the third-party scripts that the site is allowed to load.

Collecting only what we need

Our forms ask only for the details needed to respond to you. Less data means less to protect. See our Privacy Policy for what we collect and why.

Handling form and chatbot data

Form submissions are sent to our team by email. We aim to limit access to this information to people who need it to respond to you, and we ask our service providers to protect it.

Service providers

We use third-party providers for services such as hosting, email delivery, analytics, scheduling and the AI service behind the chatbot. We choose them with care, but their own security practices apply to the data they handle.

Client projects

Security requirements for a client project, such as access controls, environments and data handling, are discussed and agreed in writing for that project.

Reporting a security concern

If you believe you have found a vulnerability or a security problem, email info@hatzs.com with the subject "Security" and enough detail for us to reproduce it. Please give us a reasonable time to investigate before sharing details publicly, and do not access, change or delete data that is not yours.

Incidents

If we become aware of an incident that affects personal information we hold, we will investigate and notify affected people and authorities where the law requires.