UK and EU consumer rights
If you are a consumer in the United Kingdom or the European Union, this page collects what applies to you in one place. Nothing here takes away a right you have by law; where these pages and the law disagree, the law wins.
Who you are buying from
The report is sold through Link, by Stripe, the merchant of record. Stripe is the seller for the transaction: it takes the payment, registers for and remits VAT where it is due, issues your invoice, and handles disputes. Media Yard LLC supplies the report itself. A purchase appears on your statement and your receipt as sold through Link.
The pre-publish check and the data licence are sold the same way, and everything on this page applies to them as it does to the report.
VAT
The price shown includes any VAT due, so it is the whole amount you pay — a price that quietly grew at the last step would be exactly the sort of number this site was built to object to. Stripe calculates, collects, files and remits it in the countries it covers, and issues a tax invoice where one is required. If you need a VAT invoice, ask through the receipt Link sent you.
Withdrawal, and our refund
Distance selling law gives a consumer 14 days to withdraw from a contract. Digital content supplied immediately can be an exception to that where the buyer has expressly agreed to immediate supply, and the report is supplied immediately.
We do not rely on the exception. Our refund window is 14 days, which is the same length, and the Terms say how to ask. Whichever route you use, you are not asked to give anything up to get it.
If the report is not what it should be
UK and EU law entitles a consumer to digital content that matches its description and is of satisfactory quality. What the report contains is described before you pay, and the preview on the report page lists exactly which of your servers it will cover. If what arrives does not match that, it is a refund, not a favour.
What the report cannot be, and never claims to be, is a security audit. It reports what a manifest declares. That limit is stated before purchase, on the report page and in the Terms.
Your data
The Privacy Notice names the controller, the lawful basis for each thing collected and how long it is kept. The data processing statement explains why the index itself receives nothing of yours at all. You may complain to your own supervisory authority — in the UK the Information Commissioner's Office, in the EU your national data protection authority — and you do not need to come to us first.
Complaints
Write to support@leashkit.com about the index, a listing or a report. Write to Link about a payment. If a complaint is about the sale itself and you are not satisfied, your statutory routes are unaffected by anything on this site.