Data Safety

1. Security by Design

We follow secure development practices, code reviews, dependency monitoring, and environment separation to reduce risk and keep student and teacher data protected.

2. Encryption

• Transport: All traffic uses HTTPS/TLS.
• Storage: Sensitive data is stored with provider-managed encryption at rest.
• Secrets: Keys and tokens are stored in secured env configs, not in code.

3. Access Control

Role-based access ensures only authorized users see the data they should. Administrative access is limited to trained personnel and protected by strong authentication.

4. Data Storage & Retention

Data is stored with reputable cloud providers. We retain data only as long as needed for learning services, operations, and compliance, after which it is deleted or anonymized.

5. Backups & Recovery

Regular backups and disaster-recovery procedures help protect against data loss. We periodically review restore readiness to minimize downtime.

6. Incident Response

We monitor for anomalies and have processes to investigate, contain, and remediate security events. Affected users are notified when required by law or best practice.

7. Third-Party Processors

We work with vetted providers (hosting, analytics, messaging, payments) bound by data protection agreements and restricted to the minimum necessary data.

8. Your Controls

• Update your profile information within your account.
• Reach out for access, correction, or deletion requests where applicable.
• Manage device/browser security, including password managers and MFA where available.

9. Contact

For security or data safety questions, contact nclex.globaleducare@gmail.com.