Information Security Policy

Last updated: July 2025

At LeadsMingle, data security and privacy are integral to our business processes and client partnerships. This policy outlines our commitment to protecting personal and business data processed through our systems in compliance with global standards and industry best practices.

1. Purpose

To safeguard the confidentiality, integrity, and availability of all data managed or processed by LeadsMingle, ensuring trust and compliance in all our lead generation and marketing activities.

2. Scope

This policy applies to:

• All LeadsMingle employees, contractors, and third-party partners

• All data processing activities, including collection, storage, and transfer of personal and business data

• All tools, platforms, and infrastructure used by LeadsMingle

3. Data Classification

We categorize data into:

• Public: General information on our website

• Confidential: Client and operational data

• Sensitive: Personal data such as name, job title, company, and business email address, relevant to lead generation campaigns

4. Security Controls and Measures

We employ the following controls:

• Data Encryption: Encryption of data in transit (SSL/TLS) and at rest

• Access Management: Role-based and least-privilege access controls

• Network Security: Firewalls, VPNs, and Intrusion Detection Systems (IDS)

• Authentication: Mandatory strong passwords and multi-factor authentication (MFA)

• Data Minimization: We only collect data necessary for the intended purpose

• Anonymization: Where applicable, data is anonymized to protect personal information

5. Vendor and Third-Party Assurance

We collaborate with vendors and platforms (e.g., CRM, cloud storage) that meet rigorous data protection standards, including GDPR, CCPA, and other relevant regulations.

6. Incident Response

We maintain a documented Incident Response Plan to:

• Detect and assess security incidents

• Contain and remediate risks

• Notify affected parties and regulators as required by law

7. Compliance and Regulations

LeadsMingle adheres to:

• GDPR (General Data Protection Regulation)

• CCPA (California Consumer Privacy Act)

• EU-U.S. Data Privacy Framework (where applicable)

• Other relevant data privacy laws in operational regions

8. Employee Awareness & Training

All staff undergo regular training on data protection, privacy regulations, and information security best practices to maintain compliance and reduce risks.

9. Continuous Improvement

We conduct regular audits, risk assessments, and updates to our policies and security infrastructure to adapt to emerging threats and regulatory changes.

8. Contact Us

For inquiries related to our security practices or data protection:

📧 support@leadsmingle.com
📍 LeadsMingle 8 SRL. ILFOV, ROMANIA.