1. Our Commitment
Water Industry Hub is committed to protecting the security of your personal data and the integrity of our platform. We take a layered approach to security — combining technical, organisational and legal measures to protect both your data and our proprietary content.
2. Technical Security Measures
Website Security
- HTTPS everywhere — all data transmitted between your browser and our site is encrypted using TLS
- Security headers — HTTP security headers including X-Content-Type-Options, X-Frame-Options and Content Security Policy are implemented across the platform
- Bot and scraper blocking — server-level rules block known malicious bots, scrapers and AI training crawlers from accessing our platform
- Hotlink protection — our files and assets cannot be directly linked from third-party sites
- Honeypot traps — automated access attempts are detected and logged
- Directory protection — sensitive directories are not browsable
Payment Security
- All payments are processed by Stripe, a PCI DSS Level 1 certified payment processor
- We never store credit or debit card details on our systems
- Payment data is transmitted directly between your browser and Stripe's secure servers
Email Security
- SPF, DKIM and DMARC records are configured for our domain, preventing email spoofing and ensuring our emails are authenticated
- We will never ask you to share passwords or payment details via email
Hosting
- Our website is hosted by Hostinger, a GDPR-compliant hosting provider with ISO 27001 certification
- UK/EU data centre locations are used where possible
3. Content Protection
Our supplier directory, contract intelligence data, tender information and intelligence articles are proprietary assets. We protect them through:
- Blurred and locked content for non-members on sensitive pages
- Automated access detection and blocking
- robots.txt instructions to all major crawlers and AI training bots
- Zero-width character watermarking — copied text carries an invisible fingerprint identifying it as originating from Water Industry Hub
- Legal protections under UK copyright law — see our Terms & Conditions
4. Organisational Measures
- Access to member data is restricted to authorised personnel only
- We review our security practices regularly
- Third-party service providers are contractually required to maintain appropriate security standards
5. Data Breach Procedure
In the unlikely event of a personal data breach, we will:
- Assess the risk to individuals within 24 hours of becoming aware
- Notify the ICO within 72 hours if the breach is likely to result in a risk to individuals' rights and freedoms
- Notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms
6. Reporting a Security Concern
If you believe you have found a security vulnerability on our platform, or if you have concerns about data security, please contact us immediately at info@waterindustryhub.com. We take all security reports seriously and will respond within 2 working days.