Privacy Policy

1. Who we are

The data controller for this website is SPACECORE SRL, a limited liability company (societate cu răspundere limitată) registered in the Republic of Moldova, IDNO 1017600023112, with its registered office at MD-2069, mun. Chișinău, sec. Buiucani, str. Mesager 1/3, Republic of Moldova.

For clients and enquiries from the United Kingdom, you can also reach us through our affiliate SPACECORE LTD, company number 11841328, registered at 124 City Road, London, England, EC1V 2NX, United Kingdom.

For any question about this policy or your personal data, write to us at info@spacecore.md or at the postal address above.

2. What data we collect

We collect data directly from you when you:

• fill in the contact form or the project estimate calculator (name, company, email, phone, service of interest, message, indicative budget);
• book a call through Calendly (name, email and booking details);
• email us directly or call the phone numbers listed on the site.

We also automatically collect, through cookies and similar technologies, technical data such as your IP address, browser and device type, pages visited and traffic source — detailed in the “Cookies and analytics” section below.

3. Purposes of processing

We use your data to:

• respond to your contact or quote request and prepare a price estimate;
• schedule and run calls or meetings about a potential project;
• manage the contractual relationship, if you become a client;
• improve the website and its performance, through aggregated statistical analysis;
• comply with legal obligations (for example, accounting records for signed contracts);
• keep the website secure and prevent misuse of our forms (for example, through request rate limiting and anti-spam filters).

4. Legal basis for processing

We process your personal data only when a legal basis exists, in accordance with articles 6, 9 and 10 of Law No. 195/2024:

• your consent — for analytics and marketing cookies, which you can withdraw at any time;
• pre-contractual steps taken at your request — to respond to a quote request or booking;
• performance of a contract — if you become a SPACECORE SRL client;
• our legitimate interest — for website security and fraud/spam prevention;
• a legal obligation — for example, keeping accounting records.

5. How long we keep your data

We keep your data only as long as necessary for the purpose it was collected for:

• data from a contact/quote request that did not lead to a contract: up to 3 years from the last contact, after which it is deleted or anonymised;
• data linked to a signed contract: for the duration of the contract, plus the retention period required by applicable accounting legislation (generally up to 6 years after the end of the relevant financial year);
• cookie preferences: until you change or clear them in your browser.

6. Who we share data with and international transfers

We do not sell or rent your personal data. We only share it with:

• team members who need it to respond to your request;
• Calendly (Calendly, LLC) — for scheduling calls;
• Google LLC / Google Ireland Limited — through Google Analytics 4, if you have accepted analytics cookies;
• Cloudflare, Inc. — our hosting, security and abuse-prevention provider;
• the provider of our internal lead-management (CRM) system, used to organise and track incoming requests;
• public authorities, only when we are legally required to do so.

Some of these providers may process data outside the Republic of Moldova or the European Economic Area (for example, in the United States). In such cases, we make sure the transfer relies on an appropriate legal mechanism, such as the Standard Contractual Clauses approved by the European Commission or the equivalent recognised under Moldovan law.

7. Cookies and analytics

This website uses cookies grouped into three categories, which you can manage from the consent banner shown on your first visit:

• necessary — always active, required for the website to function; no consent needed;
• analytics — Google Analytics 4, helps us understand how the website is used; active only with your consent;
• marketing — used to measure campaign performance; active only with your consent.

Your choice is stored locally in your browser (localStorage) and relayed to Google through Google Consent Mode v2, which by default blocks analytics and marketing storage until you give consent. You can change your preferences at any time from the “Manage cookies” link in the site footer or from your browser settings.

8. Data security

We apply reasonable technical and organisational measures to protect your data, in accordance with article 32 of Law No. 195/2024: data is transmitted over encrypted connections (HTTPS), access is limited to people who need it, and our forms are protected by anti-spam filters and request rate limiting.

In the event of a security incident affecting your data, we will act in accordance with articles 33–34 of Law No. 195/2024, including, where applicable, notifying the National Center for Personal Data Protection and the affected individuals.

9. Your rights

Under articles 13–22 of Law No. 195/2024 and, if you are located in the European Union or the United Kingdom, under the GDPR, you have the following rights regarding your personal data:

• the right to be informed about how your data is processed;
• the right to access the data we hold about you;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure (“the right to be forgotten”), where applicable;
• the right to restrict processing;
• the right to data portability, in a structured, commonly used format;
• the right to object to processing, including for direct marketing purposes;
• the right not to be subject to a decision based solely on automated processing that produces legal effects concerning you;
• the right to withdraw your consent at any time, without affecting the lawfulness of processing before its withdrawal;
• the right to lodge a complaint with the National Center for Personal Data Protection of the Republic of Moldova (datepersonale.md) or with the supervisory authority in your EU/UK member state, if you believe your rights have been infringed.

10. How to exercise your rights

To exercise any of the rights above, write to us at info@spacecore.md, clearly stating your request. We may ask you for additional information to confirm your identity before acting on it.

We respond to requests within one month of receipt, a period that may be extended by up to two further months for complex requests, in which case we will inform you of the extension and the reasons for it. Exercising these rights is free of charge.

11. Children's privacy

This website is not directed at minors, and we do not knowingly collect personal data from individuals under 16 years of age. If you become aware that a minor has provided us with personal data without the consent of a parent or guardian, please contact us so we can delete it.

12. Changes to this policy

We may update this policy from time to time, to reflect changes in the law or in how the website operates. The date of the last update is shown at the top of this page. We encourage you to review it periodically.