Privacy Policy
Version 2026-10 · last updated: 6 October 2026
1. Who processes your data
The controller of personal data collected through nqdata.md is „NQ DATA” S.R.L., IDNO 1007600059781, legal address: str. Ștefan cel Mare 202, MD-2004, Chișinău, Republic of Moldova; office: str. Ștefan cel Mare 115/1, Chișinău; e-mail info@nqdata.md, phone +373 69 155 143. This policy follows Law No. 195/2024 on personal data protection of the Republic of Moldova.
2. What data, why and on what legal basis
Requests sent through forms (contact, quote, plan selection): name, company, e-mail, phone, your message and the options you selected, plus the IP address, time of the request and the record of your consent. Purpose: to answer you and prepare an offer. Legal basis: steps taken at your request before concluding a contract; for the IP address and time — our legitimate interest in protecting the site from abuse.
AI consultant: the questions you type. Purpose: to generate an answer. Legal basis: your request. We do not store the conversation; the IP address is kept only in a short-lived anti-abuse counter.
Helpdesk (technical support portal): the e-mail you sign in with, your name, company and phone if you provide them, the subject and text of your requests, the correspondence on them and attached files (screenshots, documents), plus the IP address, time of the requests and a record of your consent. Purpose — to solve your technical problem and keep the history of requests. Legal basis — performance of the service contract or steps taken at your request before entering into one; for processing of the request by the AI assistant — your consent, given when you send a request; for the IP address and time — our legitimate interest in protecting the portal from abuse. The AI assistant answers first: the text of the request and the correspondence, attached images and text files and, for NQ DATA clients, the company name and the list of licences bought through us are sent to Anthropic to prepare the reply (other attachments are seen only by an engineer); the e-mail, name and phone from your profile are not sent to the assistant. The assistant only suggests a solution to the technical problem and takes no decisions that produce legal effects for you; you can hand the request over to an engineer at any time with the “Call an engineer” button. Do not include passwords, verification codes or bank card data in requests or screenshots.
Analytics: pages visited, device and approximate location, collected by Google Analytics with an anonymised IP. Legal basis: your consent, which you can withdraw at any time via “Cookie settings”.
Messengers: if you write to us on WhatsApp or Telegram, we process the conversation to answer you (steps before a contract).
Clients: contracts, invoices and correspondence are processed to perform the contract and to meet accounting and tax obligations.
3. Who receives the data
Only providers that run the site for us and act on our instructions: the hosting provider of the site (Republic of Moldova); Brevo (Sendinblue SAS, France) — delivers form requests to our mailbox and sends Helpdesk e-mails (sign-in codes and request notifications); Telegram (Telegram FZ-LLC, United Arab Emirates) — notifies our staff about new requests, including Helpdesk requests passed to an engineer; Anthropic PBC (USA) — generates the answers of the AI consultant and of the Helpdesk AI assistant; Google LLC / Google Ireland Ltd — Google Analytics, only with your consent. We do not sell personal data.
4. Transfers outside Moldova
Data may be transferred to the EU (Brevo, Google Ireland), the USA (Anthropic, Google LLC) and the UAE (Telegram). Transfers rely on the safeguards offered by these providers, including standard contractual clauses in their data processing terms, as required by Law No. 195/2024.
5. How long we keep it
Form requests — 24 months, then they are deleted automatically. Helpdesk requests with their correspondence and attachments are kept for 24 months after the request is closed and then deleted automatically; sign-in codes are valid for 10 minutes and a portal sign-in lasts up to 30 days. Records of form and cookie consent — up to 3 years, to be able to prove consent. Google Analytics data — according to the retention set in Google Analytics (up to 14 months). Contracts and accounting documents — for the periods required by accounting and tax legislation.
6. Your rights
You have the right to: access your data; rectify inaccurate data; erase data (“right to be forgotten”); restrict processing; data portability; object to processing based on legitimate interest or for direct marketing; not be subject to decisions based solely on automated processing. Where processing is based on consent, you may withdraw it at any time; this does not affect earlier processing. We do not make decisions based solely on automated processing.
7. How to exercise your rights
Write to info@nqdata.md with the subject “Personal data”. We answer within one month of receiving the request; in complex cases this may be extended by two more months, and we will tell you about the extension within the first month. We may ask you to confirm your identity.
8. Complaints
If you believe your data is processed unlawfully, you may lodge a complaint with the National Center for Personal Data Protection of the Republic of Moldova, str. Serghei Lazo 48, Chișinău (datepersonale.md).
9. Security
The site works only over HTTPS; request logs, Helpdesk requests and their attachments are stored outside public access; access to requests is limited to the staff who handle them. In the event of a personal data breach we notify the National Center within 72 hours and, where the risk is high, the people concerned.