Security & Breach Response Policy
This public summary explains the process VIOFIT follows when personal data may have been exposed, altered, lost or accessed without authority.
Detect and contain
Security alerts and reports are triaged, unauthorised access is stopped, credentials or keys are rotated where necessary and affected systems are isolated without destroying evidence.
Investigate
VIOFIT records the timeline, affected systems, categories of data, users and gym workspaces, likely impact, containment steps and responsible incident owner.
Notify
Management is informed immediately for serious incidents. Affected users, gyms, processors and authorities are notified when and within the period required by applicable law, using clear facts and protective actions.
Recover and improve
Recovery is verified from trusted systems and backups. Corrective actions, permission changes and follow-up tests are recorded before the incident is closed.
Report a concern
Report suspected privacy or security issues to [email protected]. Do not include passwords, OTPs or unnecessary member data in the initial message.
Contact us
For privacy requests, grievances or concerns, contact: [email protected]