Privacy & Personal Data Protection Policy

1. Introduction & Scope

DI International Enterprise Pte. Ltd. (together with its subsidiaries and affiliates, hereinafter referred to as "DI Enterprise", "we", "us", or "our"), headquartered in Singapore, is committed to safeguarding the personal data and enterprise confidentiality entrusted to us in strict compliance with the Personal Data Protection Act 2012 of Singapore (No. 26 of 2012) ("PDPA") and relevant subsidiary legislation, regulatory notices, and advisory guidelines issued by the Personal Data Protection Commission ("PDPC").

This Privacy Policy governs the collection, use, disclosure, processing, and retention of Personal Data obtained through our website (diintl.com), our Decision Intelligence & Agentic AI Software-as-a-Service (SaaS) platforms, APIs, client portal systems, and related enterprise consulting engagements.

2. Personal & Enterprise Data We Collect

"Personal Data" refers to data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which the organization has or is likely to have access.

We may collect the following categories of data:

• Business Identity & Contact Data: Name, corporate email address, business telephone number, job title, department, organization name, and corporate office address provided during executive briefing requests, sales inquiries, or platform registration.
• Enterprise Platform Credentials: Enterprise Single Sign-On (SSO) identifiers, OAuth tokens, user IDs, and role-based access control (RBAC) permissions.
• Technical & Telemetry Data: IP addresses, browser specifications, operating system details, network latency, device identifiers, session timestamps, and control tower telemetry logs collected when interacting with our digital interfaces.
• Enterprise Operational Metadata: Anonymized or customer-consented supply chain metadata, inventory SKU counts, transactional volume metrics, and simulation parameters supplied to the ROI Calculator and Control Tower engines.

3. Purposes of Collection, Use, and Disclosure

In accordance with the Purpose Limitation Obligation under Section 18 of the PDPA, DI Enterprise collects, uses, and discloses data solely for the following reasonable and notified purposes:

1. Provision of Services: Facilitating executive briefings, platform demos, proof-of-concept (POC) sandbox environments, and delivering Agentic AI Decision Intelligence modules.
2. System Orchestration: Powering predictive demand forecasting, safety stock algorithms, automated root cause diagnosis, and supply chain control tower visibility.
3. Account & Security Management: Authenticating enterprise authorized representatives, auditing administrative actions, preventing fraud, and defending against cybersecurity threats pursuant to the Singapore Cybersecurity Act.
4. Customer Support & Communication: Responding to inquiries, delivering technical documentation, providing platform maintenance advisories, and sending requested whitepapers.
5. Regulatory & Legal Compliance: Complying with applicable Singapore statutes, court orders, accounting standards, and regulatory audits conducted by Singapore statutory boards.

4. Agentic AI Processing & Enterprise Data Isolation

DI Enterprise adheres to the Model AI Governance Framework (Second Edition) and the National AI Strategy (NAIS 2.0) established by Singapore’s Infocomm Media Development Authority (IMDA) and PDPC.

5. Consent & Deemed Consent under Singapore Law

We collect Personal Data only with your knowledge and express consent, except where collection without consent is authorized under the First or Second Schedules of the PDPA (e.g., vital interests, investigations, or publicly available data).

By submitting an Executive Briefing request, contacting our representatives, or accessing our platform, you are deemed to have consented to the collection, use, and disclosure of your Personal Data for the stated business purposes pursuant to Section 15 of the PDPA.

Withdrawal of Consent: You may at any time withdraw your consent by providing written notice to our Data Protection Officer at info@diintl.com. Upon receipt, we will cease (and cause our data intermediaries to cease) collecting, using, or disclosing your Personal Data within thirty (30) business days, unless otherwise required or permitted by applicable law.

6. Disclosure & Cross-Border Data Transfers

We do not sell, rent, or trade your personal data to third parties. We may disclose personal data to vetted service providers and data intermediaries (such as cloud infrastructure providers, ISO/SOC2-certified data centers, and legal advisors) solely to perform necessary contracted functions on our behalf.

Transfer Limitation Obligation (Section 26 PDPA): If Personal Data is transferred outside Singapore (e.g., to regional cloud regions or global enterprise partners), DI Enterprise ensures that the recipient organization provides a standard of protection comparable to that required under the Singapore PDPA, through binding corporate rules, standard contractual clauses (SCCs), or data transfer agreements.

7. Security Safeguards & Protection Obligation

Pursuant to the Protection Obligation (Section 24 PDPA), DI Enterprise employs stringent physical, electronic, administrative, and technical safeguards to prevent unauthorized access, collection, use, disclosure, copying, modification, leakage, loss, or damage to personal data.

• End-to-end data encryption using AES-256 at rest and TLS 1.3 in transit.
• Role-Based Access Control (RBAC) with mandatory Multi-Factor Authentication (MFA).
• SOC2 Type II compliance controls, regular external penetration tests, and vulnerability assessments.
• Mandatory Data Breach Notification protocols adhering to Section 26D of the PDPA, notifying both the PDPC and affected individuals in the event of any notifiable data breach.

8. Retention Limitation & Disposal

Pursuant to the Retention Limitation Obligation (Section 25 PDPA), we retain personal data only for as long as necessary to fulfill the operational and business purposes for which it was collected, or as mandated by Singapore statutory retention laws (e.g., tax, audit, and commercial recordkeeping requirements).

Once retention is no longer required, personal data is permanently destroyed, securely erased, or irreversibly anonymized using industry-standard sanitization protocols.

9. Your Rights under Singapore PDPA

Under Sections 21 and 22 of the PDPA, you are entitled to the following rights regarding your Personal Data:

• Right to Access: You may request access to your personal data in our possession or control, as well as information on how it has been used or disclosed within the past 12 months.
• Right to Correction: You may request the correction of any error or omission in your personal data. We will correct the data as soon as practicable within thirty (30) days.
• Right to Data Portability: Where applicable under PDPA data portability provisions, you may request the transmission of eligible personal data to another organization.

To exercise any of these rights, please submit a written request to our DPO with identity verification details.

10. Cookies, Telemetry & Singapore Spam Control Act

Our website uses strictly necessary and performance cookies to facilitate user navigation, maintain session integrity, and assess aggregate traffic metrics. You can manage or disable non-essential cookies via your browser settings.

Spam Control Act (Cap. 398A): Any commercial electronic messages sent by DI Enterprise comply with Singapore's Spam Control Act, providing clear sender identification, accurate subject headers, and automated one-click unsubscribe links. We strictly respect the Do Not Call (DNC) Registry under the PDPA for telemarketing communications.

11. Designated Data Protection Officer (DPO) Contact

In accordance with Section 11(3) of the PDPA, DI Enterprise has designated a Data Protection Officer responsible for overseeing our privacy compliance program and addressing all data protection inquiries, feedback, and complaints.

If you are not satisfied with our response to your inquiry, you have the right to lodge a complaint with the Personal Data Protection Commission of Singapore (PDPC) at www.pdpc.gov.sg.