Effective Date: 14/02/2025

At Lagualearning Ltd, we take the security and privacy of our users seriously. This Security Policy outlines the measures we implement to protect your personal and payment information, as well as the security of our website and services.

By using our website and services, you agree to the following security practices. We encourage you to read this policy carefully to understand how we safeguard your data.

1. Data Encryption

We use SSL (Secure Socket Layer) encryption to ensure that all sensitive information, including personal data and payment details, is securely transmitted over the internet. SSL encryption protects data by converting it into an unreadable format during transmission.

• Payment Information: Payment details entered on our site are processed through secure, PCI-DSS compliant payment gateways. We do not store your payment information on our servers.

2. Account Security

To protect your account from unauthorized access, we use industry-standard security measures:

• Password Protection: You are responsible for maintaining the confidentiality of your account password. We recommend using strong, unique passwords for your account and changing them regularly.
• Two-Factor Authentication (2FA): For added security, we may offer or require two-factor authentication (2FA) to access certain sections of your account or when making changes to your personal information.
• Account Locking: After multiple failed login attempts, we may temporarily lock your account to prevent unauthorized access. If this happens, you can reset your password via email.

3. User Data Protection

We are committed to safeguarding your personal information. Here’s how we protect your data:

• Access Control: Access to your personal information is restricted to authorized personnel only. Employees or contractors with access to your data are required to follow strict confidentiality agreements and security protocols.
• Data Storage: Personal data is stored in secure, encrypted databases and protected by firewalls and other security measures. We regularly audit and monitor our data storage systems to identify and mitigate any potential vulnerabilities.

4. Firewalls and Security Monitoring

We use firewalls, intrusion detection systems (IDS), and other network security measures to monitor our servers and networks for any suspicious activity. These tools help us identify potential threats and mitigate risks before they affect our systems or user data.

• Regular Security Audits: We conduct regular security audits and vulnerability assessments to ensure that our systems remain secure and up to date with the latest security standards.

5. Third-Party Security

For certain services, such as payment processing, we use third-party service providers. We ensure that these third parties comply with security and privacy standards, including:

• Payment Processors: We work with trusted, PCI-DSS compliant payment processors to handle your payment transactions securely. These processors use encryption and other security measures to protect your financial information.
• Data Sharing: We do not sell, rent, or share your personal information with third parties except for the purposes outlined in our Privacy Policy, such as providing necessary services (e.g., payment processing, lesson delivery).

6. Data Breach Notification

In the unlikely event of a data breach, we are committed to notifying affected users promptly. Our response to a data breach includes:

• Immediate Action: We will take immediate steps to secure any exposed information and prevent further unauthorized access.
• User Notification: We will inform affected users about the breach, providing details about the incident, what data was affected, and how users can protect themselves.
• Cooperation with Authorities: If necessary, we will cooperate with relevant authorities to resolve the issue and ensure compliance with data protection laws.

7. Data Retention and Deletion

We retain your personal information only as long as necessary to provide our services and comply with legal requirements. You can request the deletion of your personal data by contacting us at Info@lagualearning.com, and we will promptly remove it from our systems, subject to legal obligations.

8. Security of Communications

When communicating with us through email or other communication methods, please be aware that while we use encryption to protect sensitive data during transmission, email is not always a secure medium. We recommend avoiding sending sensitive information, such as passwords or payment details, through unsecured communication channels.

9. User Responsibilities

While we implement robust security measures to protect your information, it’s also important for you to take responsibility for your own online security:

• Keep Your Password Confidential: Do not share your account credentials with others. We are not responsible for any unauthorized access resulting from sharing your login details.
• Monitor Your Account: Regularly review your account and lesson schedules for any unauthorized activity. If you notice anything suspicious, contact us immediately.

10. Changes to This Security Policy

We reserve the right to update or modify this Security Policy at any time. Any changes will be posted on this page with an updated « Effective Date. » We encourage you to review this policy periodically to stay informed about our security practices.

11. Contact Information

If you have any questions or concerns about this Security Policy, or if you need to report a security issue, please contact us at:

• Company Name: Lagualearning Ltd
• Address: 24-26, Arcadia Avenue Fin0000, London, United Kingdom, N3 2JU 
• Registration number: 16263922
• Phone Number: +44 7426454137
• Email Address: Info@lagualearning.com

By using our website and services, you acknowledge that you have read, understood, and agreed to this Security Policy.