Security

We protect this website and the information you send us. This page explains how, how to stay safe from people pretending to be us, and how to tell us about a security problem.

How we protect this website

• Encryption: every page is served over HTTPS, and browsers are told never to use an unencrypted connection.
• Strict browser protections: a content security policy allows only our own scripts, blocks the site from being framed by other sites, and switches off the camera, microphone, location and payment features.
• No trackers: we load no advertising or analytics scripts.
• Forms: protected against cross-site attacks, automated spam and repeated attempts, and every field is checked on our side.
• Files you upload: checked by their content, not their name, stored privately, and never published. Images are re-encoded to remove hidden data such as GPS location.
• Our private dashboard: staff sign in with a strong password and a second step on their phone. Passwords are stored only in a scrambled form we cannot read. Accounts lock after repeated wrong attempts, and every change is logged.
• Backups and retention: content is backed up before every change. Enquiries that do not lead to business are deleted after 24 months.

No system is perfectly secure. If a breach affects your personal information, we will tell you and the Information Regulator as soon as reasonably possible, as section 22 of POPIA requires.

Stay safe from scams

• Buyers never pay Riah. We will never ask a buyer to pay us for goods or for an introduction. You pay the supplier named on your quote.
• Check bank details by phone. If anyone asks you to pay into a new or changed bank account, call the supplier on a number you already know before you pay.
• Our real contact details: email from @riahmedia.co.za only, and WhatsApp +27 67 983 6417.
• We never ask for passwords or one-time codes, by email, phone or WhatsApp.

If you receive a message that claims to be from Riah and something feels wrong, forward it to info@riahmedia.co.za before you act.

Report a security problem

If you find a weakness in this website, please tell us at info@riahmedia.co.za. Include the page, what you did, and what happened, so we can reproduce it. We will acknowledge your report within 5 working days and keep you updated.

While you look, please:

• only test against your own account or information,
• do not access, change or delete other people's data,
• do not slow the site down or take it offline, send spam, or try to trick our staff,
• give us reasonable time to fix the problem before you tell anyone else.

If you act in good faith and follow these rules, we will not take legal action against you for your research. Our contact details for security reports are also published at /.well-known/security.txt.