Security Policy

Last updated: March 17, 2026

Our Security Commitment

At OxCam Education (www.oxcam.net), we take the security of your information very seriously. We employ industry-standard security measures to protect your personal information and data against unauthorised access, use, or disclosure.

Data Security Measures

1. Technical Security

• SSL/TLS Encryption: We use SSL/TLS encryption to protect data in transit, ensuring your information remains secure during transmission
• Firewall Protection: We employ advanced firewall systems to prevent unauthorised access
• Data Encryption: Sensitive data is encrypted at rest
• Regular Security Audits: We conduct regular security assessments and vulnerability scans
• Security Updates: We promptly update systems and software to patch security vulnerabilities

2. Access Control

• Permission Management: Strict access control ensures only authorised personnel can access sensitive information
• Multi-Factor Authentication: Critical systems require multi-factor authentication
• Access Logging: All data access activities are recorded and monitored
• Regular Reviews: Access permissions are regularly reviewed and updated

3. Staff Training and Management

• Confidentiality Agreements: All employees sign confidentiality agreements
• Security Training: Regular information security training is provided
• Least Privilege Principle: Employees can only access the minimum information necessary to perform their duties
• Offboarding Procedures: All access is revoked immediately upon employee departure

Data Storage and Protection

We take the following measures to protect your data:

• Secure Storage: Data is stored in secure server environments
• Regular Backups: Data is regularly backed up to prevent data loss
• Data Isolation: Different users' data is logically separated
• Physical Security: Server facilities have strict physical access controls

Third-Party Services

We may use trusted third-party service providers to help us operate our website and deliver services. We require all third-party service providers to:

• Comply with strict data protection and security standards
• Use your information only for the purpose of providing services
• Implement appropriate technical and organisational measures to protect data
• Sign data processing agreements

Security Incident Response

Although we take comprehensive security measures, no system is completely secure. In the event of a data breach or security incident, we will:

• Take immediate action to contain and resolve the issue
• Assess the scope of the incident
• Notify affected users within the legally required timeframe
• Cooperate with relevant regulatory authorities
• Take steps to prevent similar incidents from recurring

Your Responsibilities

To help protect the security of your information, we recommend that you:

• Use strong passwords and change them regularly
• Do not share your account information with others
• Log out of your account after using public computers
• Keep your devices and software up to date
• Be wary of suspicious emails and links
• Notify us immediately if you notice any unusual activity

Compliance

We are committed to complying with all applicable data protection laws and regulations, including but not limited to:

• EU General Data Protection Regulation (GDPR)
• UK Data Protection Act
• China Personal Information Protection Law (PIPL)

Security Policy Updates

We may update our security measures and policies from time to time to address new security threats and technological developments. We recommend that you review this page regularly for the latest information.

Reporting Security Issues

If you discover any security vulnerabilities on our website or have security concerns, please contact us immediately using the following methods:

We are committed to taking all security reports seriously and acting appropriately as soon as possible.