Legal

Privacy Policy & PDPA Notice

This notice explains what personal data GDI Solutions (“GDI”, “we”) collects through gdi.com.sg, why we collect it, who we share it with, and the choices you have under Singapore's Personal Data Protection Act 2012 (PDPA).

Last updated: 26 August 2026

Who we are

GDI Solutions is a Singapore-registered digital and IT solutions firm. We are the data controller for personal data collected through this website. You can reach us at [email protected] or +65 8714 1149.

Our Data Protection Officer can be contacted at [email protected], or by post to GDI Solutions, Singapore. Mark your message “Attn: Data Protection Officer” and we will respond within 30 days, as the PDPA requires.

What we collect, and when

We only collect what you choose to give us. Specifically:

• When you request a quote or send a project brief (the “Start a project” form): your name, work email, phone/WhatsApp number if provided, company name, and the project details you write.
• When you use the grant eligibility checker: your answers about your business (registration, shareholding, size, project type, budget band), and — only if you ask for the breakdown — your name, email, phone and company.
• When you use the cost estimator or website health check: the website address or project options you enter, and your contact details only if you request the full report.
• When you use the AI assistant: the messages you type, and your contact details only if you choose to leave them.
• Automatically: your IP address, which we use for rate-limiting and abuse prevention, and standard server logs.

We do not require an account, we do not sell personal data, and we do not run advertising or cross-site tracking pixels on this website.

Why we use it

• To respond to your enquiry and prepare a scope, quote or report you asked for.
• To advise on government grant options relevant to your project.
• To provide and improve our services, and to keep records of our dealings with you.
• To protect the site from abuse (rate-limiting, spam prevention).
• To comply with legal or regulatory obligations.

By submitting a form you consent to us contacting you about your enquiry. We will not send you unrelated marketing without your consent, and you can opt out at any time.

Who we share it with

We keep disclosure to the minimum needed to run the service:

• Our own infrastructure. Enquiries are stored on servers we control, and are not hosted with a third-party CRM.
• AI language-model provider. If you use the AI assistant, the text of your messages is sent to our AI provider to generate a reply. Please do not enter sensitive personal data, credentials, or confidential information into the chat.
• Messaging/notification services. We receive an internal alert when a new enquiry arrives, which may include the contact details you submitted.
• Cloudflare, which provides network security and delivery for this site and processes request metadata (such as IP address) in doing so.

We may also disclose personal data where required by law, or to protect our rights. We do not sell or rent personal data to anyone.

Transfers outside Singapore

Some of the service providers above process data outside Singapore. Where that happens, we take reasonable steps to ensure a standard of protection comparable to the PDPA, as required by the Act's transfer limitation obligation.

How long we keep it

We keep enquiry records for as long as needed to deal with your enquiry and for our legitimate business and legal record-keeping — typically up to seven years for records relating to an engagement, and no longer than two years for enquiries that do not proceed. We delete or anonymise personal data when the purpose no longer applies.

How we protect it

Access is restricted to those who need it, admin surfaces are authenticated, the site is served over HTTPS, and our servers are not directly exposed to the public internet. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the sensitivity of the data.

Cookies

This website does not use advertising or cross-site tracking cookies. Any storage used is strictly functional (for example, remembering that you have an open enquiry). If we introduce analytics in future, we will update this notice and seek consent where required.

Your rights under the PDPA

You may, at any time:

• Access the personal data we hold about you and how it has been used.
• Correct anything inaccurate or incomplete.
• Withdraw consent to our use of your data, or ask us to delete it.

Email [email protected] with your request and we will respond within a reasonable time, generally within 30 days. Withdrawing consent may mean we can no longer progress your enquiry. If you are not satisfied with our response, you may contact the Personal Data Protection Commission (PDPC) of Singapore.

Changes to this notice

We update this notice when our practices change. The date at the top always reflects the current version.