Terms of service

Last updated: 29 October 2026.

1. Who we are

SpoofGuard is a trading name of Lloyd Byatt, a sole trader based in Biggleswade, Bedfordshire, United Kingdom (Lloyd Byatt, trading as SpoofGuard, Biggleswade, Bedfordshire). Contact: hello@spoofguard.co.uk. We are not VAT registered, so no VAT is charged.

2. The service

For a fixed fee of £59 we will, for one domain:

• review the SPF, DKIM and DMARC records your domain publishes before any change;
• agree with you the list of services that genuinely send email as your domain;
• create or correct SPF, DKIM (where your email provider supports it) and DMARC records, starting DMARC in monitoring mode (p=none) with reporting switched on;
• review the DMARC reports and, once they show your genuine senders pass, move DMARC to an enforcing policy (quarantine or reject) with your agreement;
• send you a written before-and-after report.

Not included: fixing email that is already failing for reasons unrelated to these records, changes to your website, email hosting, migrations, or ongoing monitoring beyond the follow-up described above. We will quote separately before doing any extra work.

3. Before you pay

We check your domain's public records first and tell you what is needed. If your domain is already correctly configured we will say so and you do not need to buy anything.

4. Payment

The £59 fee is paid in advance. Payments are processed by Stripe. Your card statement and the Stripe checkout page may show "RouteServe", which is another trading name of Lloyd Byatt. The fee covers one domain. Additional domains are £59 each unless we agree otherwise in writing.

5. Your responsibilities

• You confirm you own the domain or are authorised by its owner to request these changes.
• You either give us delegated access to your DNS provider (for example by adding us as a user) or add the records we send you yourself. We do not ask for, and you should not send, your email password.
• You tell us about every service that sends email as your domain (for example invoicing, newsletter, booking or website contact forms). If a service is not disclosed, its email may be affected once DMARC is enforced.
• You remove our access when the work is complete. We will remind you.

6. Timescales

We aim to publish the initial records within 2 working days of receiving access, and to carry out the enforcement step within 2 to 6 weeks, depending on how much email your domain sends. These are targets, not guarantees.

7. Cancellations and refunds

If you are a consumer, you may have a 14-day right to cancel under the Consumer Contracts Regulations. By asking us to start work within that period you agree that, if you cancel, we may deduct a proportionate amount for work already done. Business customers: if we have not started work you can cancel for a full refund. If we cannot complete the setup because of a limitation of your email or DNS provider, we will refund the fee in full.

8. Liability

We take reasonable care and skill and record every change we make, so it can be reversed. These records reduce the risk of others sending email as your domain; they do not stop all spam or phishing and cannot guarantee delivery of your email. Nothing in these terms limits liability that cannot legally be limited (including for death or personal injury caused by negligence, or fraud). Otherwise, our total liability to you is limited to the fee you paid, and we are not liable for indirect or consequential loss, or for loss of profit or business.

9. Your data

See our privacy notice.

10. Law

These terms are governed by the law of England and Wales, and the courts of England and Wales have jurisdiction.