Information Security Policy

Digital Leo

1. Purpose

The purpose of this Information Security Policy is to ensure that information assets handled by Digital Leo are protected against unauthorized access, disclosure, alteration, and destruction. This policy establishes guidelines for safeguarding company systems, client data, and operational processes in order to maintain confidentiality, integrity, and availability of information.

2. Scope

This policy applies to all employees, contractors, and third parties who have access to Digital Leo systems, data, and services. It covers all digital platforms, communication channels, and operational tools used to support client services.

3. Information Security Principles

Digital Leo is committed to maintaining the following security principles:

Confidentiality – Ensuring that sensitive information is accessible only to authorized individuals.
Integrity – Protecting information from unauthorized modification or tampering.
Availability – Ensuring systems and data remain accessible for authorized business operations.

4. Access Control

Access to systems and client data is restricted to authorized personnel only and is granted based on business requirements. Appropriate authentication methods such as passwords and account permissions are used to control access.

5. Data Protection

Digital Leo takes reasonable measures to protect client and business data by:

Using secure communication channels and trusted service platforms
Limiting data access to authorized personnel
Avoiding unnecessary storage of sensitive information
Following applicable data protection and privacy requirements

Client interactions and messaging data related to marketing campaigns may be processed through third-party platforms such as LINE Official Account services, which maintain their own enterprise-level security controls.

6. Third-Party Services

Digital Leo may rely on reputable third-party platforms and service providers to deliver certain services. These providers are selected based on reliability, security capabilities, and compliance with applicable standards.

7. Risk Management

Digital Leo periodically reviews operational processes to identify potential risks related to information security. Appropriate mitigation measures are implemented where necessary to reduce potential security risks.

8. Incident Management

If a security incident or data breach is suspected, the issue will be investigated promptly. Appropriate corrective actions will be taken to contain the incident and prevent recurrence.

9. Policy Review

This policy will be reviewed periodically and updated as necessary to reflect changes in business operations, technology, and regulatory requirements.