Responsible Disclosure Policy / Reporting Security Issues
Our philosophy
At Babel B.V. we recognize that your data is a direct reflection of the trust you place in us. In 2026, your digital safety is our highest priority. We take a proactive, multi-layered approach to ensure your personal information remains secure. Help us stay secure. If you spot a security issue, we would like to hear from you so we can collaborate on a prompt and effective solution. We invite you to do so using the procedure below.
The scope
This policy applies to the following systems and domains of Babel B.V.:
- The main website (www.babel.nl)
- Our learning environment MyBabel (my.babel.nl)
- The domain names: toetsnederlands.nl, cursusengels.nl, cursusengels.net
- All other systems that are directly managed by us and run on a babel.nl domain.
The following are outside the scope:
- Attacks on our third-party systems (such as HubSpot or Zoom).
- Social engineering (e.g. phishing of employees).
- Distributed Denial-of-Service (DDoS) attacks.
- Attacks on the physical security of our office.
Rules
We ask you to adhere to the following rules:
- Do not exploit the issue you have found. In other words, please do not download, modify or delete any data.
- Do not publish the issue or share it with others until it has been resolved.
- Do not place a backdoor in a system.
- Give us a reasonable amount of time to resolve the issue.
How to report a security issue ?
- Send your findings by email to: it@babel.nl. Please make your report as clear and complete as possible.
- Include the following in your report:
- A clear description of the issue .
- The steps required to reproduce the issue .
- The IP addresses you used during your investigation.
- Your contact details (name, email address) so that we can contact you.
Our promise
If you adhere to the above rules, we promise the following:
- We will respond to your report within three working days.
- We will treat your report confidentially and will not share your personal details with third parties without your consent.
- We will not take legal action against you in relation to your report.
- We will keep you informed of the progress of resolving the issue.
- If desired, and in consultation with you, we may give you an honourable mention on our website after the security issue has been resolved.
Version: 17-10-2025

