Privacy and data protection notice
Last updated: [DATE OF PUBLICATION]
This notice explains how EnterpriseAI Pte Ltd collects, uses, shares and protects your personal data when you visit eai-asia.com, talk to our AI assistant, take our readiness check, or work with us. By using our website or services, you agree to the practices described here.
1. Who we are and how to contact us
EnterpriseAI Pte Ltd (UEN 202650220R), a company incorporated in Singapore with its registered office at [REGISTERED ADDRESS] ("EnterpriseAI", "we", "us"), is responsible for your personal data under this notice.
Our Data Protection Officer (DPO) handles all questions, requests and complaints about personal data:
| Data Protection Officer | [DPO NAME] |
|---|---|
| [dpo@eai-asia.com] | |
| Post | Data Protection Officer, EnterpriseAI Pte Ltd, [REGISTERED ADDRESS] |
Please write to the DPO rather than to individual staff, so that your request is logged and answered.
2. Personal data we collect
We collect only what we need for the purposes in section 4.
| When | What we collect |
|---|---|
| You visit eai-asia.com | Device and browser type, IP address, pages viewed, time spent, referring site (see section 3) |
| You take the readiness check or contact us | Name, job title, company name, business email, phone or WhatsApp number, industry, number of outlets and staff, the systems you use, and your answers about how your business runs |
| You talk to our AI assistant | What you type or say, the assistant's replies, and the time and length of the conversation |
| You book a planning session or a course | The above, plus billing details, attendance, assessments and course feedback |
| You become a client | Contact details of your staff who work with us, and business records you choose to share so that we can set up and measure your digital assistant |
| You apply to work or partner with us | CV details and any information you send us |
We do not ask for your NRIC number, health information or other sensitive data through the website. Please do not share it in the AI assistant or in free-text fields.
Business contact information (such as a name, job title, business email and phone number given for business purposes) is largely outside the PDPA, but we protect it in the same way.
3. How we collect it
- From you directly: when you fill in a form, talk to the AI assistant, email or message us, or attend a session.
- Automatically: our website host keeps standard server logs. We do not currently use analytics or advertising cookies. If we add them, we will ask for your consent first and update this notice.
- From others: from a person who refers you to us (for example a trade association, training partner or business contact), or from public sources such as your company's website or ACRA record.
If you give us personal data about someone else, such as a colleague, please make sure they agree to it first.
4. Why we use it, and your consent
We use your personal data to:
- Answer your questions, including through the AI assistant.
- Assess whether our programme suits your business, and prepare your planning session.
- Arrange, deliver and administer sessions and courses, including with our training partners.
- Set up, run and measure digital assistants for clients, including the before-and-after measurement of your team's work.
- Bill you, keep records, and meet our legal, tax and audit duties.
- Keep our website and systems secure and working, and improve our services.
- Send you marketing, only if you have agreed to it (see below).
Consent. We collect, use and share your personal data with your consent, or where the PDPA allows us to without consent (for example, to perform a contract with you, or where the law requires it). The readiness check asks for your consent before it collects your contact details.
Marketing. We ask for marketing consent separately. Saying no does not affect your readiness check or any service. You can unsubscribe at any time through the link in our emails or by writing to the DPO. We check the Do Not Call Registry before sending marketing messages to Singapore phone numbers, unless you have given us clear consent to contact you.
5. Who we share it with
| Who | Why |
|---|---|
| Service providers who work for us | Website hosting, email, forms and contact management, video conferencing, payment, and the AI assistant and avatar on our website. They may use the data only to provide their service to us. |
| Technology platform providers | To set up and run digital assistants for clients, under contract. |
| Training partners | To register and run funded courses, where you enrol in one. |
| Professional advisers | Our lawyers, accountants and auditors. |
| Authorities | Where the law requires it or permits it, such as government agencies, regulators or the courts. |
| A buyer or successor | If EnterpriseAI is reorganised, merged or sold, under confidentiality. |
[WE DO NOT SELL PERSONAL DATA: to be confirmed as company policy.]
6. Transfers outside Singapore
Some of our service providers store or process data outside Singapore. When we transfer personal data overseas, we take appropriate steps to ensure the recipient is bound by legally enforceable obligations to protect it to a standard comparable to the PDPA, usually through contract terms with the provider.
[COUNTRIES OR REGIONS WHERE THE MAIN PROVIDERS HOLD DATA]
7. Protection, retention and data breaches
Protection. We use reasonable security arrangements to protect personal data, including access controls, multi-factor sign-in on our systems, encryption where available, and contracts that require our providers to protect it. No system is completely secure, so please contact the DPO if you think your data has been put at risk.
Retention. We keep personal data only as long as we need it for the purposes in section 4 or as the law requires, then delete or anonymise it:
| Data | How long we keep it |
|---|---|
| Readiness check answers from people who do not become clients | [24 months] after last contact |
| AI assistant conversation records | [30 days], unless needed to handle a complaint |
| Client and course records | [7 years] after the engagement ends, for tax, audit and funding requirements |
| Marketing contact details | Until you unsubscribe |
Data breaches. If a data breach is likely to cause you significant harm, or affects 500 or more people, we will notify the Personal Data Protection Commission (PDPC) within three calendar days of assessing it as notifiable, and notify affected individuals as soon as practicable, as the PDPA requires.
8. Your rights
You can write to the DPO to:
- Access the personal data we hold about you, and find out how it has been used or disclosed in the past year.
- Correct personal data that is wrong or incomplete.
- Withdraw consent to our collecting, using or disclosing your personal data. We will tell you what this means for any service you receive. We may still keep data where the law requires.
- Stop marketing at any time.
We will reply as soon as reasonably possible, normally within 30 days. If we need longer, we will tell you when to expect a reply. We may need to confirm your identity first, and we may charge a reasonable fee for an access request; we will tell you the fee before we act on the request.
9. Our AI assistant
The assistant on eai-asia.com is an AI system with a digital presenter, not a person. It says so at the start of every conversation, and it will connect you with a person if you ask.
- It answers from information approved by EnterpriseAI. Its answers are general information, not advice, and do not form part of any contract. Please confirm anything important with us.
- It does not ask for your name, email or phone number. If you want us to contact you, it will point you to the readiness check, which asks for your consent first.
- If you speak your question in the search box, your web browser's own speech service turns it into text (in Google Chrome, that service is run by Google). If you use your microphone in a video call with the live assistant, your voice is converted to text to produce a reply. [WHETHER AUDIO, VIDEO OR TRANSCRIPTS ARE STORED, AND FOR HOW LONG]
- The assistant does not make decisions about you that have legal or similar effects.
10. Other things you should know
Children. Our website and services are for businesses. We do not knowingly collect personal data from anyone under 18.
Other websites. Our site may link to other websites. Their privacy practices are their own, so please read their notices.
Changes. We may update this notice. The date at the top shows the latest version, and we will tell clients about significant changes.
Complaints. Please contact our DPO first, and we will try to resolve your concern. If you are not satisfied, you may contact the Personal Data Protection Commission at pdpc.gov.sg.