JARAWEB POLICIES

Acceptable Use and Security Policy

This policy sets the basic rules for using JaraWeb websites, hosting and email, and explains how security concerns and reports of misuse may be handled.

Provider: TMR Concept, operating JaraWeb · Novare Central, Wuse Zone 5, Abuja, Nigeria Effective from the date this policy is published on jaraweb.com.ng.

TMR Concept is fully responsible for fulfilling JaraWeb customer orders and service obligations. JaraWeb is powered by E15 Technologies Limited and TMR Concept.

1. Who and what this policy covers

This policy applies to customers using JaraWeb websites, hosting, email and related services, and to anyone using an account or access provided through those services.

You are responsible for activity carried out using your account and for ensuring that people you authorize follow these rules. This policy should be read with your accepted order, the JaraWeb Terms of Service and any applicable service-specific agreement.

2. Prohibited use

You must not use a JaraWeb website or email account, or permit another person to use it, for any of the following:

DO NOT

Unlawful activity or fraud

Use the service to carry out unlawful activity, deceive others or commit fraud.

DO NOT

Infringe rights

Publish, store or distribute material that infringes another person’s intellectual-property, privacy or other legal rights.

DO NOT

Distribute malware

Upload, transmit, host or distribute malware or other harmful code.

DO NOT

Send unsolicited bulk messages

Use website or email services to send unsolicited bulk messages or to facilitate spam.

DO NOT

Access systems without authority

Attempt unauthorized access to an account, website, server, network or other system.

DO NOT

Run security tests without permission

Conduct vulnerability scans, penetration tests or other security testing without prior permission from the relevant system owner and TMR Concept where JaraWeb services are involved.

DO NOT

Interfere with others

Disrupt, overload or interfere with another customer, a service, network or system.

If you are unsure whether an activity is permitted, ask TMR Concept before proceeding.

3. Protecting accounts and access

Keep account login details confidential, use secure credentials and limit access to people who need it. Do not share credentials with unauthorized persons.

Tell TMR Concept promptly if you suspect that an account, website or email address has been accessed or used without permission. Include the affected website or account and a description of what you observed.

You are responsible for maintaining the accuracy of the contact information associated with your service so that TMR Concept can reach you about security and service issues.

4. Security testing and responsible reporting

Security testing of JaraWeb-managed websites, hosting or related systems requires prior permission. Contact TMR Concept before testing and wait for written approval that identifies the permitted target and scope.

If you discover a suspected vulnerability or security issue, report it to TMR Concept through the JaraWeb Contact page. Do not exploit the issue, access data that is not yours, disrupt a service, or publicly disclose information that could expose customers or systems while it is being reviewed.

5. Reports, investigation and action

TMR Concept may investigate credible reports of misuse or security concerns and take proportionate steps to protect customers, systems, data or legal rights. Steps may include requesting information, restricting access or suspending a website, hosting, email or support service where needed.

Where practicable, TMR Concept will tell you the reason for an action and how you may challenge it or remedy the issue. Urgent action may be taken where necessary to protect customers, systems, data or legal rights.

Suspension or other action does not cancel amounts already due under your order or the JaraWeb Terms of Service.

6. Security responsibilities and service limits

TMR Concept and E15 Technologies Limited use appropriate technical and organisational safeguards and maintain an incident response process. They make notifications required by applicable law.

No online service can guarantee absolute security or uninterrupted availability. Website security may also depend on customer choices, account access, website content, plugins, themes, third-party services and timely updates.

Customers must protect their login credentials and report suspected unauthorized access promptly. Backup, restoration, support and service availability details are stated in the customer’s order or any applicable service-level agreement.

7. Questions or security reports

Use the JaraWeb Contact page to report suspected misuse, unauthorized access or a security concern. Include the affected website or account, what happened and when you noticed it. Do not send passwords or other secret credentials in your message.

For privacy or personal-data concerns, include “Privacy Request” in your message so the request can be routed for review.

Report a security or misuse concern

Contact TMR Concept through JaraWeb and provide the affected website or account and a clear description of the issue.