At A Glance:
We have applied the latest PHP security updates through our host, Krystal. The site remains protected by WordFence Premium, automatic updates and monthly Police CyberAlarm scans. No action is needed from you.
How We Keep Your Information Safe: Our Response to Recent PHP Updates
You may have seen recent news about security updates for PHP, the software that runs many websites, including ours. We want to set out clearly what has happened, what our host has done, and the steps we take every day to protect the information you share with us.
Table of contents
Our websites are hosted with Krystal. On Wednesday 21st October, when the news about the PHP issues was starting to hit the news, they applied recommended temporary protection across their platform and then rolled out the permanent security patches. According to their status page, PHP security patching has been completed across all Web Hosting, Reseller Hosting, Business Hosting, Managed VPS and Managed WordPress sites. They are continuing to monitor things following the rollout, and no action is required from us or you.
What we already do to protect your data
We do not rely on the host alone. Every WordPress site we run uses WordFence Premium, a leading security plugin that monitors for threats, blocks suspicious activity, and keeps the site itself up to date. WordPress core, themes, and plugins update automatically. This reduces the window in which any new issue could be exploited.
In addition, our sites have also been linked to the Police CyberAlarm system. This free national service scans our websites and external addresses each month for known vulnerabilities. Any recommendations that come back are reviewed and put in place as soon as possible. This combination of host-level protection, WordFence, automatic updates, and monthly external scanning gives several independent layers of defence.
Brief website maintenance on 5 November
Krystal will be carrying out some planned work on the servers that run our website early on 5 November. Our website may be briefly unavailable for a few minutes while the work is done. Email will not be affected, and the site should return to normal straight afterwards. Your information will be entirely secure during this time.
Nothing for you or us to do
No changes are required from you or us. Your booking details, contact information, and any other data you have shared with us remain protected by the measures above. If you have any questions about how we look after your information, or if you notice anything unexpected on the site after 5 November, please get in touch and we will check it for you.
We treat the security of the data you entrust to us as part of the same practical standard we apply to our training. That means clear steps, regular checks, and the confidence that the details you share with us stay protected. We are registered with the Information Commissioner’s Office and are working towards Cyber Essentials certification. Card payments are handled by PCI-DSS compliant third-party providers; we do not store full card details. You can read more in our Privacy and Cookie Policy.