Report Security Issues

Last updated: September 2026

Gaddy Gear LLC takes the security of gaddygear.com and our customers' data seriously. If you believe you've found a security vulnerability on our Site, we want to hear from you.

Scope

This policy covers gaddygear.com and systems we directly operate. It does not cover third-party services we use (such as our payment processor or shipping carriers) — please report issues with those services directly to the relevant provider.

How to Report

Email contact@gaddygear.com with the subject line "Security Report," and include:

A clear description of the vulnerability
Steps to reproduce it
Any relevant screenshots, logs, or proof-of-concept code
Your contact information, if you'd like a response

Responsible Disclosure Guidelines

Please give us a reasonable opportunity to investigate and address an issue before disclosing it publicly. While researching, please avoid:

Accessing, modifying, or deleting customer or company data that isn't your own
Degrading or disrupting the availability of the Site
Automated scanning that generates excessive traffic
Social engineering our staff or customers

What to Expect

We aim to acknowledge reports within 5 business days and will keep you updated as we investigate and resolve valid issues. We're grateful to researchers who report responsibly and won't pursue legal action against good-faith reports made in line with this policy.