Privacy and data protection

Privacy Policy

We handle personal data with professional confidentiality, data minimisation, and respect for rights under the General Data Protection Regulation and applicable Moldovan privacy standards.

Last updated: 7 May 2026

1. Who We Are

This Privacy Policy explains how legal.md, based in Chisinau, Republic of Moldova, collects and uses personal data when you visit this website, contact us, or request legal services.

For privacy enquiries, contact us at .

2. Personal Data We May Collect

We may collect your name, email address, phone number if provided, organisation name, role, country, message content, documents you choose to send, and any other information you voluntarily provide when asking for legal assistance.

When you use the contact form, the form submission is processed through Web3Forms. This means the details you enter in the form, together with technical information needed to deliver and protect the submission, may be transmitted to Web3Forms so your message can be forwarded to us.

Our website may also process limited technical data, including IP address, browser type, device information, pages visited, approximate location derived from network data, timestamps, security events, and cookie or similar technology identifiers where enabled.

3. Why We Use Personal Data

We use personal data to respond to enquiries, assess whether we can assist you, provide legal services after engagement, manage client relationships, comply with professional and legal duties, secure the website, prevent abuse, deliver contact form messages through Web3Forms, and maintain business records.

We do not sell personal data. We do not use personal data submitted for legal enquiries for unrelated advertising.

4. Legal Bases for Processing

Depending on the context, we process personal data because it is necessary before entering into or performing a contract, because we must comply with legal obligations, because we have a legitimate interest in operating a secure legal services website and contact form, because legal claims may need to be established or defended, or because you have given consent for a specific action.

Where consent is the basis, you may withdraw it at any time without affecting processing that already took place lawfully.

5. Legal Enquiries and Confidentiality

Information sent through the website is treated carefully and confidentially. However, sending a message through this website does not by itself create a lawyer-client relationship. Please avoid sending highly sensitive information until we confirm that we can act for you and appropriate engagement terms are in place.

6. Hosting, Cloudflare, and International Transfers

This website is intended to be hosted on Cloudflare infrastructure. Cloudflare may process technical information such as IP addresses, request metadata, security logs, and performance data to deliver the site, protect it from malicious traffic, and provide network services.

Contact form submissions are processed through Web3Forms, a third-party form delivery provider. Web3Forms may process the information submitted in the form and related technical metadata for message delivery, spam prevention, security, troubleshooting, and service operation.

Cloudflare and Web3Forms may operate infrastructure or use service providers outside your country. Where personal data is transferred internationally, we rely on appropriate safeguards available under data protection law, such as standard contractual clauses, security controls, and vendor commitments.

7. Cookies and Similar Technologies

The website may use essential technologies required for delivery, security, load balancing, and abuse prevention. If analytics, marketing, or non-essential cookies are added later, we will update this policy and provide consent controls where required.

8. Sharing Personal Data

We may share personal data with service providers, including Cloudflare for hosting and security and Web3Forms for contact form delivery, as well as professional advisers, translators, experts, courts, public authorities, counterparties, or other recipients where necessary for legal services, legal obligations, or legitimate administration of our practice.

Service providers are expected to process personal data only under appropriate instructions, confidentiality duties, and security obligations.

9. Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including legal service delivery, professional recordkeeping, limitation periods, accounting requirements, dispute management, and security monitoring.

Unsuccessful or general enquiries are normally retained only as long as needed to respond and manage follow-up, unless a longer period is required for legal, professional, or security reasons. Web3Forms may also retain form submission logs or message data for its own limited service, security, and abuse-prevention purposes under its applicable terms and privacy commitments.

10. Security

We use reasonable organisational and technical measures to protect personal data against unauthorised access, alteration, disclosure, loss, or misuse. No online transmission or storage system is completely risk-free, but we aim to apply safeguards appropriate to the sensitivity of legal communications.

11. Your Rights

Subject to legal conditions and exceptions, you may have the right to access your personal data, request correction, request deletion, restrict processing, object to processing, request data portability, withdraw consent, and lodge a complaint with a competent data protection authority.

To exercise your rights, contact us using the email address above. We may need to verify your identity before responding.

12. Updates

We may update this Privacy Policy to reflect changes in law, practice, website features, or service providers. The updated version will be posted on this page with a revised date.