Privacy Policy

1. Who we are (the controller)

ITBOX SRL, IDNO 1020600028441, registered at Strada Florilor 12A, MD-2068, Chișinău, Republic of Moldova.

• E-mail: info@itbox.md
• Phone: +373 67 502020
• For any request concerning your personal data, write to the e-mail address above.

2. What data we collect

We collect only the data needed to answer you and operate the site:

• Through the contact form: your name, company name (optional), phone number, and the text of your message.
• The e-mail generated by the form also carries the IP address it was sent from and a request identifier — used strictly to protect against spam and abuse.
• With your consent, browsing statistics through Google Analytics 4 — see the Cookie Policy.
• Your theme preference (light / dark) and your cookie choice, stored in the site own cookies.
• We do not ask for and do not need sensitive data (health, political affiliation, biometric data, etc.). Please do not include any in your message.
• The site has no user accounts, builds no profiles, and makes no automated decisions about you.

3. Why we process it and on what basis

Each processing activity rests on its own legal basis:

• To answer your request and prepare a quote — pre-contractual steps taken at your request and our legitimate interest in responding to enquiries.
• To keep the site secure (anti-spam verification of the form, rate limiting, technical logs) — our legitimate interest in preventing abuse.
• For traffic statistics — your consent alone, given in the cookie banner and withdrawable at any time.
• To comply with the legal obligations that apply to us (accounting, tax, requests from competent authorities).
• We do not use form data for marketing and we do not send unsolicited commercial messages.

4. Where the data goes

The site has no database. A message sent through the form is turned into an e-mail and delivered to the info@itbox.md mailbox — it is not saved on the server and is not stored in any other record of the site.

The correspondence then stays in our mailbox, accessible only to the staff handling quotes and your project.

5. Who we share the data with

We work with a small number of providers, each with a clear role:

• Cloudflare, Inc. — hosting the site and protecting the form against spam (Turnstile).
• SMTP2GO — delivering the e-mail generated by the form to our mailbox.
• Google Ireland Limited — browsing statistics (Google Analytics, only with your consent) and the map embedded in the contact section.
• These providers may process data outside the Republic of Moldova, on the basis of standard contractual clauses and the safeguards set out in their own data protection policies.
• We do not sell or rent your data to anyone. We disclose it to authorities only where the law requires us to.

6. How long we keep the data

We keep data only as long as we need it:

• Correspondence received through the form: 3 years from the last contact, then we delete it.
• If you become a client, contract documents are kept for as long as accounting law and our contractual obligations require.
• Your cookie choice: 6 months.
• Google Analytics statistics: according to the retention configured in the Google Analytics account.
• You can ask for earlier deletion at any time, at info@itbox.md.

7. Your rights

Under Law no. 195/2024 you have the following rights:

• The right of access to your data, rectification, and erasure.
• The right to restriction of processing and the right to object.
• The right to data portability.
• The right to withdraw your consent at any time (for example for analytics cookies), without affecting processing carried out before the withdrawal.
• Write to info@itbox.md and we will answer within 30 days at most. We may ask you to confirm your identity, so that we do not hand your data to someone else.
• If you are not satisfied with our answer, you can lodge a complaint with the National Center for Personal Data Protection of the Republic of Moldova (datepersonale.md).

8. Security and minors

The site runs exclusively over HTTPS, the form is protected against spam and rate limited, and access to the mailbox is restricted to the people who need it.

Our services are addressed to businesses and adults. We do not knowingly collect data from people under 16.

9. Changes to this policy

If we change anything material, we update the date shown above and, where needed, ask for your cookie consent again.