We take the protection of your personal data seriously. This policy applies to the website at lawfirm.md and to enquiries you send us through it. We process personal data in line with Moldovan data protection law and, where it applies, the EU General Data Protection Regulation (GDPR).
01 Who we are
For the purposes of data protection law, the controller of your personal data — the party that decides why and how it is processed — is:
References to “we”, “us” and “our” in this policy mean LAW FIRM S.R.L.
02 Data Protection Officer
We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this policy and our handling of personal data. You can reach the DPO using the details below:
03 The personal data we collect
Information you give us
When you submit the contact form on this website, we collect the data you choose to enter, namely:
- Your name — so we know who we are corresponding with.
- Your email address — so we can reply to your enquiry.
- Your message — the details of the question, transaction or project you describe.
Please send only the information needed to handle your enquiry, and avoid including sensitive personal data or privileged details in an initial message.
Information collected automatically
This is a static website hosted on Cloudflare Pages. When you visit, our hosting and security provider automatically processes limited technical data — such as your IP address, browser type, referring page and the date and time of access — in server and security logs. This is used to deliver the site, keep it available and protect it against abuse and attacks.
Web fonts
Our pages use the Fraunces and Hanken Grotesk typefaces, served through Google Fonts. When a page loads, your browser requests these font files from Google's servers, which means your IP address is processed by Google for that purpose.
04 How and why we use your data
We only process your personal data where the law allows us to. Depending on the situation, our legal bases are:
- Your consent — when you tick the consent box and submit the contact form, we process your data to respond to your enquiry. You can withdraw this consent at any time (see Your rights).
- Steps prior to a contract — where your enquiry concerns engaging us, we process your data to take steps at your request before any engagement is agreed.
- Our legitimate interests — to keep this website secure, available and free from abuse, and to establish, exercise or defend legal claims where necessary.
- Legal obligations — where we are required to retain or disclose data to comply with applicable law.
We do not sell your personal data, and we do not use it for advertising, profiling or automated decision-making that produces legal effects for you.
07 How long we keep your data
We keep enquiry data only for as long as necessary for the purpose it was collected:
- If your enquiry does not lead to an engagement, we generally delete the related correspondence within 24 months of our last contact, unless we need to keep it longer to establish or defend a legal claim.
- If your enquiry leads to an engagement, the data becomes part of the client file and is retained under the rules applicable to that relationship and our professional and legal obligations.
- Technical and security logs are retained for short periods consistent with our providers' security practices.
08 How we protect your data
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. These include encrypted connections (HTTPS) across the site, access controls, and working only with reputable providers that maintain recognised security standards. No method of transmission over the internet is completely secure, but we take reasonable steps to safeguard your information.
09 Your rights
Subject to the conditions and exceptions in applicable law, you have the right to:
- Access — obtain confirmation of whether we process your data and a copy of it.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — ask us to delete your data where there is no overriding reason to keep it.
- Restriction — ask us to limit how we use your data in certain circumstances.
- Objection — object to processing based on our legitimate interests.
- Portability — receive certain data in a structured, commonly used format.
- Withdraw consent — where processing is based on consent, withdraw it at any time, without affecting processing carried out before withdrawal.
To exercise any of these rights, contact us at office@lawfirm.md. We will respond within the timeframes set by applicable law. There is normally no charge, and we may need to verify your identity before acting on a request.
10 Children's privacy
This website and our services are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.
11 Links to other websites
Our site may link to external services — for example, WhatsApp or email. We are not responsible for the privacy practices of those third parties, and we encourage you to review their own privacy notices.
12 Changes to this policy
We may update this policy from time to time to reflect changes in our practices or in the law. When we do, we will revise the “Last updated” date at the top of this page. Significant changes will be made clear on this page. The framework for data protection in Moldova is set out in Law No. 133/2011 on the Protection of Personal Data; Law No. 195/2024, which aligns Moldovan rules more closely with the GDPR, becomes applicable on 23 August 2026, and we will update this notice accordingly.
13 Contact and complaints
If you have any questions about this policy or about how we handle your personal data, please contact us at office@lawfirm.md or write to LAW FIRM S.R.L., str. Calea Moșilor 38, Chișinău, Republic of Moldova.
If you are not satisfied with our response, you have the right to lodge a complaint with the supervisory authority:
If you are located in the European Union, you may also contact the data protection authority in your country of residence.