Information Security Policy

Simones Tutoring FZE — Information Security Policy

Last Updated: May 10, 2026

This Information Security Policy (“Security Policy”) explains the administrative, technical, organizational, and operational measures used by Simones Tutoring FZE (“Simones Tutoring,” “we,” “our,” or “us”) to help protect the confidentiality, integrity, availability, and security of information processed through our educational platform, tutoring services, websites, applications, communication systems, and related Services (“Services”).

This Security Policy is intended to provide transparency regarding Simones Tutoring’s approach to protecting educational, operational, and business information.

This Policy applies to:

• Students and learners;

• Parents and guardians;

• Tutors and educators;

• Schools and institutional partners;

• Vendors and contractors;

• Enterprise or organizational clients;

• Platform users.

1. Security Commitment

Simones Tutoring is committed to maintaining reasonable security measures intended to:

• Protect personal and educational information;

• Reduce unauthorized access risks;

• Maintain platform integrity and reliability;

• Support safe online learning environments;

• Detect and respond to security threats;

• Support operational continuity.

Security measures are reviewed and updated periodically based on operational, technical, legal, and business considerations.

2. Administrative Security Measures

Simones Tutoring may implement administrative safeguards including:

• Internal security policies and procedures;

• Access authorization processes;

• Personnel confidentiality obligations;

• Security awareness and operational training;

• Incident reporting procedures;

• Vendor and third-party reviews;

• Role-based operational controls.

Access to information is generally limited to authorized personnel with legitimate operational or business needs.

3. Access Controls

Simones Tutoring uses reasonable access management measures intended to restrict unauthorized access to systems and information.

Access control measures may include:

• Account authentication requirements;

• Password protections;

• Role-based permissions;

• Administrative access restrictions;

• Session management controls;

• Multi-factor authentication where implemented;

• Access monitoring and review procedures.

Users remain responsible for:

• Protecting account credentials;

• Maintaining secure passwords;

• Reporting suspicious activity promptly.

4. Encryption and Secure Transmission

Simones Tutoring may use encryption technologies and secure communication methods intended to help protect information during transmission and storage.

Security measures may include:

• Encrypted website connections;

• Secure payment processing integrations;

• Protected communication channels;

• Encryption of sensitive information where appropriate.

No transmission or storage system can be guaranteed completely secure.

5. Network and Infrastructure Security

Simones Tutoring may use technical safeguards designed to support platform and infrastructure security, including:

• Firewalls and network protections;

• Monitoring and logging systems;

• Security configuration controls;

• Malware and threat protections;

• Platform availability protections;

• Infrastructure access restrictions.

Security configurations may evolve as technologies and operational requirements change.

6. Monitoring and Threat Detection

Simones Tutoring may monitor platform systems and activity for purposes including:

• Security analysis;

• Fraud prevention;

• Abuse detection;

• Performance monitoring;

• Incident investigation;

• Operational reliability.

Monitoring activities may involve:

• Technical logs;

• Account activity records;

• Access attempts;

• Automated threat detection tools;

• Security alerts.

Monitoring practices are conducted in accordance with applicable laws and operational requirements.

7. Backup and Disaster Recovery

Simones Tutoring may maintain backup and recovery procedures intended to support:

• Business continuity;

• Platform restoration;

• Operational resilience;

• Disaster recovery;

• Data recovery efforts.

Backups may:

• Be encrypted where appropriate;

• Be stored in multiple environments;

• Be retained according to operational schedules.

Recovery times and restoration outcomes cannot be guaranteed in all situations.

8. Vendor and Third-Party Security

Simones Tutoring may work with third-party providers supporting:

• Hosting infrastructure;

• Video conferencing systems;

• Payment processing;

• Analytics;

• Educational technologies;

• Communication systems;

• Cloud services.

Where reasonably appropriate, Simones Tutoring may review vendor security practices, contractual protections, or operational safeguards.

However, Simones Tutoring does not control the independent security practices of third-party providers.

9. Incident Response and Security Events

Simones Tutoring maintains procedures intended to support identification, investigation, and response to security incidents or unauthorized activities.

Incident response activities may include:

• Internal investigation;

• Access restriction or suspension;

• Technical remediation efforts;

• Security reviews;

• User notifications where appropriate or legally required;

• Coordination with external providers or authorities.

Response measures may vary depending on:

• Severity of the incident;

• Operational impact;

• Legal obligations;

• Available information.

10. Educational and Learner Data Protection

Because Simones Tutoring provides educational Services involving minors and educational institutions, we take additional steps intended to support:

• Learner privacy;

• Educational record protection;

• Controlled access to student information;

• Safe online learning environments.

Additional information is available in our:

• Privacy Policy;

• Learner Privacy Guide;

• Children’s Privacy and COPPA Policy;

• Additional Privacy Disclosures.

11. User Security Responsibilities

Users are responsible for:

• Protecting account credentials;

• Using secure internet connections;

• Maintaining updated devices and browsers;

• Avoiding phishing or suspicious communications;

• Reporting unauthorized activity promptly.

Users may not:

• Attempt unauthorized access;

• Circumvent security measures;

• Upload malicious software;

• Abuse platform infrastructure.

Violations may result in suspension or termination of Services.

12. International Operations and Data Storage

Because Simones Tutoring may operate internationally, systems, backups, or information may be processed or stored outside the United Arab Emirates.

We take reasonable measures intended to support secure handling of information during international operations and transfers where applicable.

13. No Absolute Security Guarantee

While Simones Tutoring uses reasonable safeguards intended to protect information and systems, no security program, platform, or online environment can guarantee complete security.

Users acknowledge that:

• Cybersecurity risks evolve continuously;

• Internet-based systems involve inherent risks;

• Third-party systems may be involved in service delivery.

14. Changes to This Security Policy

Simones Tutoring reserves the right to update or modify this Information Security Policy periodically.

Updated versions become effective upon posting unless otherwise stated.

Continued use of the Services after updates constitutes acceptance of the revised Policy.

15. Contact Information

If you have questions regarding security practices, security incidents, or enterprise security matters, please contact:

Simones Tutoring FZE

Dubai, United Arab Emirates
Email: info@simonesutoring.com
Website: https://www.simonesutoring.com

Important Notice

This document is provided for informational and operational purposes only and does not constitute legal, cybersecurity, or compliance advice.

Simones Tutoring should consult qualified cybersecurity and legal professionals regarding:

• UAE cybersecurity requirements;

• Educational data protection obligations;

• Enterprise security standards;

• Incident response procedures;

• Vendor security management;

• International information security compliance.