Privacy Policy

This notice describes how the public website collect.md handles information in practice. It is not legal advice and it does not claim that we are “fully GDPR compliant” or certified under any other regime. The controller is SOFT COLLECT SRL. Moldova Law No. 133/2011 on personal data protection applies to personal-data requests. Retention periods, processor contracts and the legal basis for each operation should be confirmed by legal counsel.

1. Data controller

SOFT COLLECT SRL, IDNO 1021600014531, MD-2028 Chișinău, Șoseaua Hâncești 43, office 302. Contact: info@collect.md, +373 22 10 50 33, +373 60 633 033, +373 60 628 606.

2. Applicable law

The public site is aimed at the Republic of Moldova. Personal data processing is governed, among other rules, by Law No. 133/2011. This page describes actual website behaviour. It does not replace a mandate contract and is not a compliance guarantee.

3. Data from public forms

The contact form collects: name; phone number (required); email (optional); message text; a consent tick for personal-data terms; interface language; the page URL from which you submitted. A hidden honeypot field is used only against spam and is not meant for real users. The quick-evaluation form collects: name; email; phone; an approximate debt amount band; debt age; debtor type (legal entity or individual); optional document types you mark (contract, invoices, payment demands, court decision); language; page URL. There is no dedicated “company name” field; a company name appears only if you type it in the message.

4. Why we collect it

The contact form is to answer a consultation request. The evaluation form is to understand the claim at a high level and to contact you. We do not use these forms for a marketing newsletter or a public listing. A separate written mandate for recovery is not created by submitting the website forms.

5. How submissions are sent (Web3Forms)

The browser posts public-form content to the Web3Forms delivery service (api.web3forms.com) so the request can reach info@collect.md. We do not state here how long that service stores data or in which locations. The access key is not shown on the site. Ask us or the provider if you need the contractual terms of that service.

6. Login and client portal

/login and the language-prefixed /portal routes are separate. They use authentication and backend infrastructure (the browser calls same-origin /api, which is reverse-proxied to the application host). Public marketing pages do not make those requests. You do not need the portal to use the public site. Cookie or session behaviour at login should be verified on staging or production; it was not fully proven in local development.

7. Technical requests to Google

On the contact page, the Google Maps embed (maps.google.com) loads automatically via iframe. Those requests may send technical data (such as IP address and browser details) to Google. Site fonts are self-hosted and are not loaded from fonts.googleapis.com. This site does not install Google Analytics.

8. Processing under a recovery mandate

If you become a client under a written mandate, creditor and debtor data may be processed as needed for recovery. That is not the same as public-form fields. Sharing with courts, bailiffs or lawyers happens only in that mandate context and under applicable law — not because someone merely browsed the site.

9. Retention

This notice does not set a fixed retention period for website enquiries. Duration depends on answering the request, accounting needs and counsel’s instructions. Court or archive duties follow separate rules if they arise. Do not treat this paragraph as a promise that web-form data is kept for “3 years”.

10. Rights

Under Law No. 133/2011 you may request access, rectification, erasure or restriction, withdraw consent where processing is based on consent, and lodge a complaint with the National Center for Personal Data Protection (www.datepersonale.md, +373 22 236 040). Requests: info@collect.md.

11. Security

Form posts use HTTPS to the delivery service named above. We do not claim specific at-rest encryption or backup schedules for this website, because they are not documented in this repository.

12. Cookies and local storage

See the cookies policy. The public site does not use analytics cookies.

Cookies policy

13. Contact

For personal-data questions: info@collect.md, +373 22 10 50 33. National Center: www.datepersonale.md.