Argus Parliamentary Intelligence Platform
Home/Legal
07 · Legal

Legal notices.

Last updated · 2026-04-26

Argus is operated by ARGUS HOLDINGS — KLL1 LTD, trading as KL Leung Holdings, a private company limited by shares registered in England & Wales. This page is the entry point to the legal documents that govern arguswatch.org and the Argus platform.

01Company information

Registered name
KLL1 LTD
Trading as
KL Leung Holdings
Brand
ARGUS HOLDINGS
Jurisdiction
England & Wales
Registered office
Available on request via the contact email below.
Companies House no.
Available on request.
Supplier status
UK Ministry of Defence (MoD) JAGGAER One Registered Supplier.

02Contact

General correspondence, legal notices, and access requests: kaluleui@klleungholdings.com.

We accept service of legal process by email at the address above. Please mark the subject line LEGAL · ARGUS / KLL1 LTD and we will acknowledge receipt within five business days.

03Governing documents

The following documents apply to your use of arguswatch.org and the Argus platform:

Doc 01 Terms of Service B2B subscription terms, intellectual property, acceptable use, liability, and governing law. Doc 02 Privacy Policy Data controller status, lawful bases under UK GDPR, sub-processors, retention, and your rights. Doc 03 Acceptable Use Section 6 of the Terms — anti-scraping, anti-reverse-engineering, and prohibited conduct. Doc 04 Vulnerability Disclosure How to report a security issue affecting Argus or arguswatch.org. Coordinated disclosure terms.

04Vulnerability disclosure

We welcome reports from researchers acting in good faith. To report a security issue affecting Argus, the public site at arguswatch.org, or any associated infrastructure, email kaluleui@klleungholdings.com with subject line SECURITY · Argus vulnerability report.

What to include

  • A clear description of the issue, the impact, and the steps required to reproduce it.
  • The affected URL, endpoint, or component, and the date/time you observed the behaviour.
  • Proof-of-concept artefacts where they help — screenshots, request/response captures, minimal scripts.
  • Your preferred name (or pseudonym) and a contact channel if you'd like acknowledgement.

Our commitments

  • We will acknowledge receipt within three business days.
  • We will provide a triage assessment within ten business days and keep you informed of remediation progress.
  • We will not pursue legal action against researchers who follow this policy in good faith, avoid privacy violations or service disruption, and give us reasonable time to remediate before any public disclosure.

Out of scope

  • Denial-of-service or volumetric testing against production infrastructure.
  • Social engineering of staff, customers, or supply-chain partners.
  • Physical attacks against premises or hardware.
  • Findings reachable only via accounts, credentials, or data you obtained without authorisation.

We do not currently operate a paid bug bounty. We may, at our discretion, recognise material contributions in a security acknowledgements page or in a defence supply-chain reference letter.

06Changes to these notices

We may update these notices to reflect changes in the law, our corporate structure, or our security practices. The "Last updated" date above will always reflect the most recent revision. For material changes affecting an active subscription, we will provide written notice in line with the Terms of Service.