Service safeguards
Administrator actions require an authenticated, explicitly authorised owner account. Student records are separated by authenticated user identity. The service uses encrypted HTTPS connections, prepared database statements, server-side validation, restricted file types and sizes, request rate limits, security headers and administrator audit records.
Payments
Online payment processing is not currently active. When payments are introduced, card details should be collected by a PCI DSS-compliant hosted payment provider rather than stored by this website.
Report a concern
Email gec.limited@outlook.com with the subject “Security report”. Include the affected page, a clear description and safe reproduction steps. Do not access another person’s information, disrupt the service, use automated denial-of-service testing or publish personal information.
What happens next
We will acknowledge legitimate reports when possible, investigate proportionately and take steps to contain and correct confirmed issues. This page does not authorise security testing.