We deploy access control mechanisms to ensure that only authorized personnel have access to
personal data, while controlling the number of authorized personnel and performing hierarchical
authority management of authorized personnel according to service needs and personnel levels.
Access to personal data is recorded and audited regularly by an administrator.
We strictly select service partners and service providers, sign standard data publishing
agreements with partners, and implement personal data protection requirements in audit,
assessment and other activities of both parties.
We will organize security and privacy protection training courses, tests and publicity activities to
enhance staff's awareness of the importance of protecting personal data.
In general, Leapin will do its best to protect your personal data. However, no measure can be
foolproof, and no product or service, Site, data transmission, computer system or network connection
is completely secure.
In order to deal with the possible risks of personal data leakage, damage and loss, Leapin has
developed a number of systems and control measures to clearly list the classification and classification
standards of security incidents and security vulnerabilities and the corresponding processing process.
Leapin also set up a special emergency response team for security incidents, in accordance with the
requirements of security incident handling norms, start safety plans for different security incidents,
stop losses, analysis, positioning, formulation of remedial measures and joint with relevant
departments for backtracking and combat.
In the event of a personal data security incident, Leapin will inform you, as required by local law, of
the basic circumstances and possible impact of the security incident, the actions we have taken or will
take to address it, the recommendations you can take to prevent and mitigate the risk, and the
remedies available to you. We will inform you about the event by email, SMS, push notification, etc.
When it is difficult to inform personal data subjects individually, we will make announcements in a
reasonable and effective manner. At the same time, we will also report the handling of personal data
security incidents in accordance with the requirements of local regulatory authorities.
Your data subject rights
In some cases, you have rights under data protection laws with respect to your personal data. This
may include the following rights:
Request access to your personal data (commonly known as “right of access"). We will provide you
with a copy of your personal data and you can check whether it has been processed legally.
Request correction of personal data we hold about you. You may correct any incomplete or
inaccurate information we hold about you.