Privacy Policy
1. Who we are
ExpertCont (S.R.L. "RIGHT CONSULT COMPANY", IDNO 1022600002005), located at 51/A Alexandru cel Bun St., Chișinău, MD-2012, is the controller of the personal data described below. For any question about your data, email [email protected] or call +373 60 82 55 81. For data protection matters and to exercise your rights, write to [email protected].
2. What data we collect
Through the forms on this site (contact, booking, quote, questions, reviews and newsletter) we collect your name, email address, phone number and the message you send. For each submission we also keep the page it was sent from, your browser type and an irreversibly encrypted fingerprint (hash) of your IP address, used only to prevent abuse; we don't store the IP address itself. For clients under contract we process company data and the financial and legal documents they send, including their employees' payroll data. We don't ask for sensitive data through the site. Fields marked * are required: in the contact, booking and quote forms we need your name and phone number so we can call you back, and your email address is optional; for FAQ questions and the newsletter we need your email, because the answer and the newsletter are sent by email. Without the required data we can't handle your request; optional data only helps us reach you on your preferred channel.
3. Purposes and legal basis
(a) Replying to your request and preparing an offer, at your request, before any contract. (b) Performing our contract for accounting, legal and consulting services. (c) Meeting legal obligations: bookkeeping, tax reporting, audit. (d) Sending the newsletter, only with your consent, which you can withdraw at any time. (e) Analysing how the site is used and recording sessions, only with the consent you give in the cookie banner. (f) Keeping the site secure and preventing abuse, based on our legitimate interest.
4. Who we share data with
We work with providers who process data on our behalf, only for the purposes above: Supabase (database and site forms), Cloudflare (site hosting), Zoho Cliq (internal notifications to our team about new requests), Google (Google Analytics and Google Tag Manager, only with your consent), Microsoft (Clarity, only with your consent) and CARTO (the map on the contact page, which receives the visitor's IP address to show the map). Microsoft receives Clarity data as an independent controller: it also uses it for its own purposes, including Microsoft Advertising. See the Microsoft Privacy Statement: privacy.microsoft.com/privacystatement. We don't sell data or share it for commercial purposes. We may share it with authorities only when the law requires it.
5. Transfers outside Moldova and the EU
Some providers (Google, Microsoft, Cloudflare) may process data outside the Republic of Moldova and the European Union, including in the United States. In these cases we rely on the providers' safeguards, such as the European Commission's standard contractual clauses or EU-U.S. Data Privacy Framework certification. For Microsoft Clarity, the transfer to the US happens only with your explicit consent in the cookie banner, given after being told that data in the US may be less protected than in the EU, including against access by authorities (Art. 49(1)(a) of Law No. 195/2024 and of the GDPR). The Supabase database is hosted in Frankfurt, Germany (European Union), and Zoho Cliq notifications are hosted in Zoho's European Union data centres.
6. Storage and security
Data is encrypted in transit (TLS) and at rest. Access is limited to the team members directly working on your request or file, protected by two-factor authentication.
7. How long we keep data
Requests sent through the site that don't lead to a contract: 12 months from the last contact. Client data and accounting documents: for the duration of the contract and 10 years after it ends, as Moldovan accounting and tax law requires. Unpublished reviews: 12 months; published reviews: until you ask us to remove them. Newsletter subscribers: until they unsubscribe, and unsubscribed addresses are deleted after 30 days. Expired requests are deleted automatically every day. Analytics data: at most 14 months in Google Analytics and 13 months in Microsoft Clarity. When the period ends, data is securely deleted.
8. Your rights
You have the right to access, rectify and erase your data, to restrict its processing, to data portability and to object, and the right to withdraw your consent at any time without affecting earlier processing. You also have the right not to be subject to a decision based solely on automated processing and to ask for a specialist to step in. To exercise these rights, email [email protected]; we reply within one month, which may be extended by two more months for complex requests, in which case we'll tell you. You can lodge a complaint with the National Center for Personal Data Protection of the Republic of Moldova or, if you live in the European Union, with the data protection authority in your country.
9. Price estimates
The price calculator on this site automatically estimates the monthly cost of our services from the data you enter: the services you pick, your line of business, invoices per month, turnover, VAT status, number of employees or number of hours. The logic is simple: we start from the base rate for your line of business, add a surcharge for invoices above the included threshold and for VAT, apply a factor based on turnover, subtract any active promotional discount and round to 10 MDL; for legal, financial and IT services we multiply hours by the hourly rate, and for HR the number of employees by the per-employee rate. The calculation runs in your browser and uses no personal data. The result is only an indicative estimate, not a binding offer, and it has no legal effect on you: if you send us the estimate, a specialist checks it and confirms the final offer. You can always ask for the price to be set directly by a specialist.
10. Legal framework
We process data under the Republic of Moldova's Law No. 195/2024 on personal data protection and, for people in the European Union, under Regulation (EU) 2016/679 (GDPR).
Have Questions?
For any clarification related to this document, contact us at [email protected] or at +373 60 82 55 81.
Contact Us