Acceptable Use Policy

This Acceptable Use Policy sets out the rules for using Lycia Limited's website, Staff Portal, Client Portal, secure verification links and associated digital services. It supplements the Terms & Conditions of Use.

• Access or attempt to access data, systems or areas you are not authorised to access
• Scrape, crawl or use automated tools to extract data without express written permission
• Reverse engineer, decompile or disassemble any Lycia software, system or API
• Introduce or attempt to introduce malware, viruses, ransomware or any malicious code
• Share your account credentials, verification links, access tokens or session details with any other person
• Use the services for any unlawful, fraudulent, harmful or deceptive purpose
• Attempt to bypass security controls, rate limits, access restrictions or authentication mechanisms
• Upload content that infringes the intellectual property, privacy or other rights of any third party
• Interfere with the proper functioning, availability or performance of the services
• Use the services to send unsolicited communications or distribute spam
• Attempt to gain unauthorised access to other users' accounts or data
• Use the services in a manner that could damage, disable or impair Lycia's infrastructure

• Keep your credentials secure and confidential
• Use strong, unique passwords and enable multi-factor authentication where available
• Report any suspected security incident or unauthorised access immediately via our security reporting page
• Ensure that information you provide is accurate and truthful
• Respect the confidentiality of data you access through the services
• Use the services only for the purposes for which access was granted
• Log out after each session, especially on shared or public devices

When uploading files to Lycia's portals or verification links, you must ensure that:

• Files are free of malware and malicious code
• Files are in supported formats and within size limits
• Files do not contain information you are not authorised to share
• Identity documents uploaded belong to the named individual only

Lycia reserves the right to scan uploaded files for malware and to reject or remove files that violate this policy.

Lycia monitors activity on its platforms for security, compliance and operational purposes. Audit logs record significant actions including logins, data access, file uploads and configuration changes. Monitoring is conducted in accordance with applicable law and this policy.

Violations of this policy may result in:

• Suspension or termination of access
• Reporting to relevant authorities where required by law
• Civil or criminal legal action where appropriate
• Disciplinary action for staff members

To report a violation or seek clarification, contact us via our security reporting page.