Data Protection & Security Policy

    Last updated: September 24, 2025

    Our Commitment to Your Data Security

    Recovery prioritizes data security. This policy complements our Privacy Policy.

    6.1 Encryption

    Data Encryption Standards

    • All data transmissions use SSL/TLS encryption.
    • Sensitive health data stored encrypted.

    6.2 Compliance Standards

    Regulatory Compliance

    • PCI-DSS for payment processing.
    • Compliance with PDPA 2023 and PECA 2016.
    • Regular security audits.

    6.3 Access Controls

    Security Access Management

    • Role-based access for staff.
    • Multi-factor authentication.

    6.4 Breach Notification

    Data Breach Response

    • If a breach occurs, we notify affected users within 72 hours, as per PDPA 2023.
    • Steps taken: Investigation, mitigation, reporting to authorities.

    6.5 User Responsibilities

    Your Security Role

    • Use strong passwords; report suspicious activity.

    Contact Information

    For security concerns or data protection inquiries:
    Email: security@therecovery.io
    Privacy: privacy@therecovery.io
    Support: support@therecovery.io
    Response time: Within 24 hours for security incidents