Privacy Statement
Effective Date: 24 August 2026
Service Provider: Directional Pte. Ltd.
Solution: Supply Logic 365
Supply Logic 365 is a product of Directional Pte. Ltd.
- Purpose
This Privacy Statement explains how personal and business information is collected, processed, stored, accessed and protected when Supply Logic 365 is implemented, configured, supported, integrated or used by customers.
Supply Logic 365 is a business management and operations solution designed for ship suppliers, maritime service providers and related businesses. The solution may process information relating to customers, suppliers, employees, vessel owners, vessel operators, crew, agents, port contacts, business partners, transactions and other individuals as part of a customer’s business operations.
Directional Pte. Ltd. (“Directional”, “we”, “us” or “our”) is committed to handling personal data responsibly and applying appropriate technical and organizational safeguards in accordance with applicable data protection laws.
- Information Processed
Depending on the customer’s configuration and use of Supply Logic 365, the solution may contain or process:
- Customer and supplier names and contact information
- Business addresses, telephone numbers and email addresses
- Employee, user and contact information
- Vessel, vessel owner, operator, agent and crew information
- Port, shipping and maritime-related information
- Quotations, sales orders, purchase orders and delivery records
- Invoices, payments and payment-related information
- Inventory, warehouse and logistics information
- Proof-of-delivery and supporting documentation
- Product, service and transaction information
- Documents and attachments uploaded into the system
- User accounts, roles and access permissions
- System activity, audit and security information
- Information received through third-party integrations
- Technical information required to operate, secure and support the solution
Customers are responsible for determining what personal information is collected and stored within their Supply Logic 365 environment and ensuring that the collection, use and disclosure of such information has an appropriate legal basis.
- Use of Information
Information processed through Supply Logic 365 may be used to:
- Manage customer and supplier relationships
- Manage ship supply and maritime service operations
- Prepare quotations and sales orders
- Manage purchasing and supplier transactions
- Manage inventory, warehousing and logistics
- Manage vessel and port-related activities
- Manage deliveries and proof of delivery
- Process invoices, payments and business transactions
- Generate reports and business intelligence
- Support customer service and operational activities
- Maintain system security and audit records
- Provide implementation, configuration and technical support
- Perform data migration and system administration
- Integrate Supply Logic 365 with approved business applications
- Improve system functionality, reliability and security where permitted
Directional will not use customer data for purposes unrelated to providing the contracted services unless otherwise authorized by the customer or required or permitted by applicable law.
- Customer Data and Directional’s Role
Depending on the engagement, Directional may act as an implementation partner, application service provider, technical support provider, system administrator or other service provider in relation to Supply Logic 365.
Where Directional processes personal data on behalf of a customer, Directional processes such information only to the extent necessary to provide the agreed services and in accordance with the customer’s instructions, applicable contractual obligations and applicable data protection laws.
The customer generally remains responsible for determining the purposes for which personal data is collected and processed within its Supply Logic 365 environment.
- Microsoft Cloud Services
Supply Logic 365 may be deployed on or integrated with Microsoft cloud services, including Microsoft Dynamics 365 Business Central, Microsoft Azure, Microsoft 365 and Microsoft Power Platform services, depending on the customer’s configuration.
Where Microsoft cloud services are used, customer data may be processed and stored within Microsoft’s cloud infrastructure in accordance with the applicable Microsoft service terms, security controls and privacy commitments.
Microsoft’s privacy and data protection practices are governed by Microsoft’s applicable policies and contractual terms. Customers should review the applicable Microsoft privacy documentation and contractual data protection terms for further information.
- Access to Customer Data
Access to customer information is restricted to authorized personnel who require access to perform their assigned responsibilities.
Directional may access customer data where reasonably necessary for:
- Implementation and configuration
- Troubleshooting and technical support
- System maintenance
- Data migration
- Integration support
- Security investigation
- System administration
- Backup and recovery activities where applicable
Where practical, access will be limited to the minimum information and permissions required to perform the relevant task.
- Data Security
Directional applies reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, loss or destruction.
Depending on the services provided, security measures may include:
- Role-based access controls
- User authentication and permission management
- Administrative access controls
- Encryption provided by applicable Microsoft cloud services
- Audit logging and monitoring
- Secure development and configuration practices
- Backup and recovery mechanisms
- Access review and termination procedures
- Confidentiality obligations for authorized personnel
No electronic system or internet-based service can be guaranteed to be completely secure. Customers should also implement appropriate security controls for their users, devices, credentials and connected applications.
- Data Retention
Customer data is retained in accordance with the customer’s business requirements, applicable Microsoft service terms and the contractual arrangements between the customer and Directional.
Upon termination of services, customer data may be retained, returned, exported or deleted in accordance with the applicable agreement and legal or regulatory requirements.
Customers are responsible for establishing appropriate retention periods for information maintained in their Supply Logic 365 environment.
- Third-Party Integrations
Supply Logic 365 may be integrated with third-party applications and services, including:
- Microsoft Dynamics 365 Business Central
- Microsoft Power Platform
- Banking and payment systems
- Warehouse management systems
- Logistics applications
- Communication platforms
- Document management systems
- Electronic invoicing services
- Customer relationship management systems
- Other business applications selected by the customer
Information transferred to third-party services will be subject to the applicable configuration, contractual arrangements and privacy policies of those services.
Customers should review and approve third-party integrations before enabling the transfer of personal information.
- International Data Transfers
Depending on the Microsoft services, third-party integrations, support arrangements and geographic configuration selected by the customer, information may be processed or accessed across different countries.
Where personal data is transferred internationally, Directional will seek to ensure that appropriate contractual, technical or other safeguards are applied where required by applicable data protection laws.
- Singapore Personal Data Protection Act
For customers operating in Singapore, personal data processed through Supply Logic 365 should be managed in accordance with applicable requirements of the Singapore Personal Data Protection Act 2012 (“PDPA”).
Customers should establish appropriate policies and procedures covering areas such as consent, notification, access and correction, protection, retention, transfer and data breach management, where applicable.
Directional will cooperate with customers in addressing reasonable data protection and security requirements relating to services provided by Directional.
- Data Breach and Security Incidents
Directional maintains procedures for identifying and responding to security incidents affecting services under its control.
Where Directional becomes aware of a confirmed security incident involving customer personal data, Directional will assess the incident and notify the affected customer in accordance with applicable contractual and legal requirements.
Security incidents relating to Microsoft-managed infrastructure or Microsoft cloud services may be subject to Microsoft’s own security and incident-management procedures.
- Customer Responsibilities
Customers using Supply Logic 365 are responsible for:
- Configuring appropriate user permissions
- Protecting user credentials and authentication information
- Determining appropriate data retention periods
- Ensuring that personal data is collected and used lawfully
- Obtaining required consent or establishing another applicable legal basis
- Reviewing and approving third-party integrations
- Ensuring that users receive appropriate privacy and security training
- Maintaining appropriate internal data protection policies
- Responding to data subject requests where applicable
- Ensuring that information provided to Directional is accurate and appropriate for processing
- Data Subject Requests
Where applicable, individuals may have rights relating to their personal data, including rights to access, correction or other rights provided under applicable data protection laws.
Requests relating to personal information held within a customer’s Supply Logic 365 environment should normally be directed to the organization that controls the relevant data.
Directional may provide reasonable technical assistance to customers in locating, exporting, correcting or deleting information where such functionality is supported by Supply Logic 365 or its underlying systems and is included within the applicable services.
- Confidentiality
Directional treats customer information as confidential and will not intentionally disclose customer information to unauthorized parties except where:
- The customer has authorized the disclosure;
- Disclosure is necessary to provide the contracted services;
- Disclosure is required by law or a lawful authority; or
- Disclosure is necessary to protect the security or integrity of the services.
- Cookies and Similar Technologies
Directional websites and online services may use cookies or similar technologies to support functionality, security, performance, analytics and user preferences.
Users may configure their browser or device settings to restrict or disable cookies. Certain functionality may not operate correctly if cookies are disabled.
- Children’s Privacy
Supply Logic 365 is intended for business use and is not directed toward children. Directional does not knowingly collect personal data from children for purposes unrelated to the provision of its business services.
- Changes to This Statement
Directional may update this Privacy Statement from time to time to reflect changes to Supply Logic 365, Microsoft services, third-party integrations, applicable laws or privacy practices.
The latest version will be made available through the appropriate Directional communication or website channels. The effective date at the beginning of this Statement indicates when the current version took effect.
- Contact
For questions regarding this Privacy Statement, data protection or privacy matters relating to Supply Logic 365 and services provided by Directional, customers may contact:
Directional Pte. Ltd.
Singapore
Email: sales@thedirectional.com
Website: www.thedirectional.com
Directional will review and respond to privacy-related requests in accordance with applicable laws and within a reasonable period.
Important: This Privacy Statement is intended as a general privacy document for Supply Logic 365 and related implementation, integration and support services. It should be reviewed against Directional’s actual contractual role, Microsoft’s applicable data protection terms, third-party service terms and the specific privacy laws applicable to each customer before publication or contractual use.