Responsible Disclosure Policy / Reporting Security Issues

Our philosophy

At Babel B.V. we recognize that your data is a direct reflection of the trust you place in us. In 2026, your digital safety is our highest priority. We take a proactive, multi-layered approach to ensure your personal information remains secure. Help us stay secure. If you spot a security issue, we would like to hear from you so we can collaborate on a prompt and effective solution. We invite you to do so using the procedure below.

The scope

This policy applies to the following systems and domains of Babel B.V.:

  • The main website (www.babel.nl)
  • Our learning environment MyBabel (my.babel.nl)
  • The domain names: toetsnederlands.nl, cursusengels.nl, cursusengels.net
  • All other systems that are directly managed by us and run on a babel.nl domain.
The following are outside the scope:
  • Attacks on our third-party systems (such as HubSpot or Zoom).
  • Social engineering (e.g. phishing of employees).
  • Distributed Denial-of-Service (DDoS) attacks.
  • Attacks on the physical security of our office.

Rules

We ask you to adhere to the following rules:

  • Do not exploit the issue you have found. In other words, please do not download, modify or delete any data.
  • Do not publish the issue or share it with others until it has been resolved.
  • Do not place a backdoor in a system.
  • Give us a reasonable amount of time to resolve the issue.

How to report a security issue ?

  • Send your findings by email to: it@babel.nl. Please make your report as clear and complete as possible.
  • Include the following in your report:
    • A clear description of the issue .
    • The steps required to reproduce the issue .
    • The IP addresses you used during your investigation.
    • Your contact details (name, email address) so that we can contact you.

Our promise

If you adhere to the above rules, we promise the following:

  • We will respond to your report within three working days.
  • We will treat your report confidentially and will not share your personal details with third parties without your consent.
  • We will not take legal action against you in relation to your report.
  • We will keep you informed of the progress of resolving the issue.
  • If desired, and in consultation with you, we may give you an honourable mention on our website after the security issue has been resolved.

Version: 17-10-2025

This site is registered on wpml.org as a development site. Switch to a production site key to remove this banner.