Report a Security Issue

Davison’s Nursery Inc takes the security of our website and our customers’ information seriously. If you believe you have discovered a security vulnerability or issue affecting our website, checkout, or customer data, we want to hear from you.

1. What to Report

Please report any of the following:

• A vulnerability that could expose customer personal or payment information;
• A way to bypass account login, checkout, or payment security;
• Cross-site scripting (XSS), SQL injection, or similar website vulnerabilities;
• Evidence of a data breach, unauthorized access, or compromised account; or
• A phishing site, fraudulent email, or fake store impersonating Davison’s Nursery Inc.

2. How to Report

Please contact us directly using one of the methods below, rather than posting details publicly:

3. What to Include

To help us investigate quickly, please include as much of the following as you can:

• A clear description of the issue and where you found it (page URL, feature, or process);
• Steps to reproduce the issue;
• Any screenshots, error messages, or supporting evidence; and
• Your contact information, so we can follow up with questions or updates.

4. What We Ask You Not to Do

• Do not access, modify, download, or delete customer or business data beyond what is necessary to demonstrate the issue;
• Do not publicly disclose the issue until we have had a reasonable opportunity to investigate and address it;
• Do not use automated scanning tools that could disrupt our website or degrade service for other customers; and
• Do not attempt to access accounts, orders, or data that are not your own.

5. Our Response

We aim to acknowledge security reports within 3 business days and will keep you informed as we investigate and work toward a resolution. Response and remediation times may vary depending on the complexity and severity of the issue reported.

6. Good-Faith Reports

We appreciate the effort security researchers and customers put into helping us keep our website safe. If you report an issue in good faith, following the guidance above, we will not pursue legal action against you for that report.

7. Other Concerns

If you believe your personal or payment information may have already been compromised (for example, you notice unauthorized charges), please contact your bank or card issuer immediately in addition to notifying us.