Free level test

Responsible Disclosure Policy / Reporting Security Issues

Version: 17-10-2025

Our philosophy

At Babel B.V. we recognize that your data is a direct reflection of the trust you place in us. In 2026, your digital safety is our highest priority. We take a proactive, multi-layered approach to ensure your personal information remains secure. Help us stay secure. If you spot a security issue, we would like to hear from you so we can collaborate on a prompt and effective solution. We invite you to do so using the procedure below.

The scope

This policy applies to the following systems and domains of Babel B.V.:

  • The main website (www.babel.nl)
  • Our learning environment MyBabel (my.babel.nl)
  • The domain names: toetsnederlands.nl, cursusengels.nl, cursusengels.net
  • All other systems that are directly managed by us and run on a babel.nl domain.

The following are outside the scope:

  • Attacks on our third-party systems (such as HubSpot or Zoom).
  • Social engineering (e.g. phishing of employees).
  • Distributed Denial-of-Service (DDoS) attacks.
  • Attacks on the physical security of our office.

Rules

We ask you to adhere to the following rules:

  • Do not exploit the issue you have found. In other words, please do not download, modify or delete any data.
  • Do not publish the issue or share it with others until it has been resolved.
  • Do not place a backdoor in a system.
  • Give us a reasonable amount of time to resolve the issue.

How to report a security issue ?

  • Send your findings by email to: it@babel.nl. Please make your report as clear and complete as possible.
  • Include the following in your report:
    • A clear description of the issue .
    • The steps required to reproduce the issue .
    • The IP addresses you used during your investigation.
    • Your contact details (name, email address) so that we can contact you.

Our promise

If you adhere to the above rules, we promise the following:

  • We will respond to your report within three working days.
  • We will treat your report confidentially and will not share your personal details with third parties without your consent.
  • We will not take legal action against you in relation to your report.
  • We will keep you informed of the progress of resolving the issue.
    If desired, and in consultation with you, we may give you an honourable mention on our website after the security issue has been resolved.