Responsible Disclosure
This loyalty program has been developed by Touch Incentive. When we refer to “we” or “us” in this text, it applies to both the client and Touch Incentive. We highly value the security of our systems. Despite our continuous efforts and care to secure our systems, vulnerabilities may still occur. If you discover a vulnerability in one of our systems, we would appreciate it if you could inform us so we can take measures as quickly as possible. We aim to work with you to better protect our customers and systems. Therefore, we kindly ask you to:
We will respond to your report within 3 days with our assessment and an expected resolution date and will keep you informed of the progress.
If the above conditions are met, no legal action will be taken concerning the report.
We treat all reports confidentially and will not share personal data with third parties without your consent unless required by law (reporting under a pseudonym is possible). In any communication about the reported issue, we will, if desired, credit you as the discoverer.
As a thank you for your help, we offer a €25 reward for each report of a previously unknown security issue that we assess as having a high enough risk to warrant resolving the vulnerability.
We strive to resolve any issues as quickly as possible and would appreciate being involved in any publication about the issue after it has been resolved.