1. Scope & Roles
When TechDirectory routes a qualified buyer brief to your company ("Vendor", "you"), TechDirectory shares personal data about a prospective buyer so that you can respond to that buyer's enquiry. For the personal data received through this routing, you act as an independent controller for the purpose of responding to the buyer, and you agree to handle that data in accordance with these terms and the PDPA. These terms apply from the moment a lead is delivered to you, whether via the vendor inbox, email, or our automation provider.
2. What You Receive
A routed lead may include the buyer's name, work email, phone number, company, UEN, and the project brief (category, scope, budget, and timeline). This is personal data and, in many cases, business contact information. You receive it for one reason only: to assess and respond to that specific procurement enquiry.
3. Purpose Limitation
You may use a routed lead solely to evaluate and respond to the buyer's enquiry and to perform any engagement the buyer subsequently asks you to perform. You must not use it to:
- Add the buyer to a marketing list, newsletter, or cold-outreach sequence unrelated to their enquiry, without the buyer's separate consent.
- Profile, enrich, resell, or license the data.
- Train models or build datasets from the data.
- Contact the buyer about anything other than their enquiry.
4. Confidentiality
You must keep routed lead data confidential, disclose it only to your personnel who need it to respond to the enquiry, and ensure those personnel are bound by equivalent confidentiality obligations. Buyer briefs frequently contain commercially sensitive procurement information and must be treated accordingly.
5. No Onward Sale or Sharing
You must not sell, rent, trade, or otherwise disclose routed lead data to any third party, except sub-processors you engage to respond to the enquiry (e.g. your own CRM), provided those sub-processors are bound by obligations no less protective than these terms and you remain responsible for their handling of the data.
6. Security
You must protect routed lead data with reasonable technical and organisational security measures appropriate to its sensitivity — including access controls, encryption in transit, and prompt removal of access when no longer needed. This reflects the PDPA Protection Obligation (§24).
7. Retention & Deletion
You may retain routed lead data only for as long as necessary to respond to the enquiry and to perform any resulting engagement, plus any period required by law. Where you do not win the engagement, you should delete or de-identify the personal data once it is clear the enquiry will not proceed. This reflects the PDPA Retention Limitation Obligation (§25).
8. Erasure Pass-Through
If TechDirectory notifies you that a buyer has exercised a right to erasure or withdrawal of consent in respect of a routed lead, you must delete or de-identify that buyer's personal data in your systems within a reasonable period (target: 30 days) and confirm completion to TechDirectory on request. This is the contractual control TechDirectory relies on when it tells buyers their erasure request will be honoured by recipient vendors.
9. Cross-Border Transfer
If you transfer routed lead data outside Singapore (for example, to an overseas CRM or support team), you must ensure the recipient is bound to a standard of protection comparable to the PDPA, in line with the PDPA Transfer Limitation Obligation (§26).
10. Data-Breach Notification
If you become aware of a data breach affecting routed lead data, you must notify TechDirectory at privacy@techdirectory.sg without undue delay and in any case within 48 hours, with enough detail for TechDirectory to assess its own notification obligations to the PDPC and affected buyers.
11. Compliance & Audit
You are responsible for your own compliance with the PDPA and applicable law in respect of routed lead data. On reasonable request, you agree to provide TechDirectory with information sufficient to demonstrate your compliance with these terms.
12. Consequences of Breach
Breach of these terms may result in suspension or termination of your access to routed leads and to paid lead-routing, removal of any sponsored placement, and — where the breach involves the misuse of buyer personal data — referral to the relevant authorities. TechDirectory may suspend routing to your company immediately and without notice where it reasonably suspects misuse of buyer data.
13. Contact
Questions about these terms, or to report a data-handling issue:
- Data & privacy: privacy@techdirectory.sg
- Vendor / lead routing: info@techdirectory.sg
- Governing law: Republic of Singapore (see Terms §13)