Security by design
After Gym Club considers security during design, development, provider selection and the organisation of digital and operational processes.
Our aim is to protect information relating to bookings, payments and communications with customers and partners.
Security principles
- Personal data minimisation.
- Access limited by role and operational need.
- Access control for systems and information.
- Secure service configuration.
- Assessment and management of potential incidents.
- Ongoing review and improvement.
Access and confidentiality
Access to data should be limited to people and providers who need it to deliver or manage services.
Permissions should reflect each role's responsibilities and avoid unnecessary access.
Infrastructure and providers
After Gym Club uses specialised technology services, including Vercel for website hosting and deployment, Supabase for database functions, Stripe for payments and Resend for email communications.
The security of these services depends both on the providers' safeguards and on how After Gym Club configures and uses them.
Provider selection and review should take account of security, privacy and applicable contractual safeguards.
Bookings and payments
Data used to manage bookings should be limited to what is necessary to deliver the service.
Electronic payments are handled through specialised providers. Payment and booking information should be processed in line with each provider's role and responsibilities.
Incident management
Potential security incidents should be assessed according to their nature, severity and effects on customers, partners and systems.
Where required, corrective measures and notifications will be undertaken in accordance with applicable law.
No absolute guarantee
No Internet-connected system can be guaranteed to be completely risk-free.
After Gym Club works to apply safeguards proportionate to its activities and progressively improve its security procedures.
Reporting concerns
If you identify a potential vulnerability or security concern relating to our website, you may report it to aftergymclub@aftergymclub.com with sufficient detail for us to review it.
Please avoid accessing third-party information, disrupting services or disclosing personal data while reporting a potential issue.