Report a Security Issue

Last Updated: August 31, 2026

At ORVELLOA, we take the security of our website, customers, and online services seriously. If you believe you have identified a potential security issue affecting orvelloa.online, we encourage you to report it to us responsibly.

How to Report a Security Issue

Please send security-related reports to:

Email: contact@orvelloa.online

When possible, use a clear subject line such as:

Security Issue Report – ORVELLOA

Information to Include

To help us review the issue efficiently, please include as much relevant information as possible, such as:

A clear description of the issue.
The page, URL, feature, or service affected.
Steps that may reproduce the issue.
The approximate date and time the issue was observed.
Screenshots or other supporting information where appropriate.
Your contact information if you would like us to follow up.

Responsible Security Research

If you are reporting a potential vulnerability, please act responsibly and avoid activities that could harm ORVELLOA, our customers, our service providers, or other users.

Please avoid:

Accessing, copying, changing, or deleting data that does not belong to you.
Attempting to obtain customer passwords, payment information, or other sensitive information.
Disrupting website availability or normal store operations.
Using denial-of-service or similar disruptive techniques.
Introducing malware, malicious code, or harmful files.
Attempting social engineering, phishing, or impersonation.
Testing third-party systems without appropriate authorization.
Publicly disclosing a potential issue before ORVELLOA has had a reasonable opportunity to review it.

Customer Account Security

Customers should take reasonable steps to protect their own accounts, devices, and communications.

We recommend:

Using strong and unique passwords where account passwords are available.
Keeping devices and browsers updated.
Avoiding suspicious links or unexpected attachments.
Not sharing passwords or sensitive payment information by email.
Reviewing order confirmations and account activity for anything unusual.

Suspicious Emails or Messages

If you receive an email, text message, website link, or other communication that appears to impersonate ORVELLOA or requests sensitive information unexpectedly, please contact us before taking action.

Customers should never send complete payment card numbers, passwords, or other sensitive financial credentials to ORVELLOA by email.

Third-Party Services

ORVELLOA may rely on third-party providers for ecommerce hosting, payments, shipping, analytics, communications, or other services.

Security issues involving an independent third-party service may also be subject to that provider's own security reporting procedures.

Where appropriate, we may coordinate with the relevant service provider to review reported issues.

What Happens After You Submit a Report?

After receiving a security report, we may review the information provided and determine whether additional investigation or action is appropriate.

Depending on the issue, we may:

Request additional information.
Review relevant website or service behavior.
Coordinate with third-party service providers.
Take reasonable technical or operational measures where appropriate.

We cannot guarantee a specific response time or resolution timeline for every report.

No Bug Bounty Program

Unless ORVELLOA expressly states otherwise in writing, submitting a security report does not create an entitlement to payment, reward, compensation, reimbursement, or other benefit.

ORVELLOA does not currently make any general promise of a bug bounty or vulnerability reward through this page.

Legal and Ethical Conduct

Nothing on this page authorizes unlawful access, unauthorized testing, disruption, privacy violations, intellectual property infringement, or other conduct prohibited by applicable law.

Security research should be conducted carefully, proportionately, and only within systems or information you are lawfully authorized to access.

Privacy

Information submitted as part of a security report may be used to investigate, respond to, document, and help resolve the reported issue.

Personal information will be handled in accordance with our Privacy Policy and applicable requirements.

General Security Questions

For customer account concerns, suspicious communications, unauthorized order concerns, or other security-related questions, you may also contact our customer support team.