Thanks I will contact them. I've lost count of how many organisations I've contacted. This lies with Cloudflare really to bat it back and say this isn't right.