Privacy Policy

1. Who we are (the controller)

Sky Soft Solutions SRL, trading as Inocode, located at Tekwill, str. Studenților 9/11, Chișinău, MD-2045, Republica Moldova, is the controller of personal data collected through inocode.md.

For any data protection matter write to contact@inocode.md or call 022 011 268.

2. Applicable law

We process data under Law no. 195/2024 on personal data protection (in force since 23 August 2026), which transposes Regulation (EU) 2016/679 (GDPR) into Moldovan law. For EU clients, GDPR also applies directly.

3. What we collect and why

• Contact form: name, email, phone, message — to answer your request. Basis: consent and pre-contractual steps.
• Consultation booking: name, email, phone, date/time and meeting type. Basis: pre-contractual steps.
• Call request: name and phone. Basis: consent.
• Checklist download: email — to deliver the material. Basis: consent.
• Marketing emails: email — only with a separate explicit opt-in. Basis: consent.
• Technical and analytics data: truncated IP, device type, pages visited — only if you accept analytics/marketing cookies.
• Client contracts and invoicing: identification and tax data. Basis: contract and legal obligation.

4. We do not process special categories

We never ask for health data, political or religious beliefs or biometrics, and we do not process data of children under 16. Please don't include such information in form messages.

5. Retention periods

• Leads and enquiries without a contract — 12 months from last contact.
• Consultation bookings — 24 months after the meeting.
• Clients, contracts and accounting records — 5 years, as required by Moldovan law.
• Cookie consent — 13 months, then we ask again.
• Marketing subscription — until you withdraw consent.

6. Who we share data with (processors)

We never sell your data. We share it only with providers that help us run the service, under data processing agreements:

• Supabase — database hosting and authentication (EU infrastructure).
• Cloudflare / Lovable — website hosting and delivery.
• Resend — transactional emails.
• Twilio — SMS confirmations.
• Google (Analytics 4, Ads, Tag Manager) — only with your consent.
• Public authorities — only where the law requires it.

7. International transfers

Some providers process data outside Moldova (EU and US). Those transfers rely on the European Commission's standard contractual clauses or an adequacy decision, per art. 40–46 of Law no. 195/2024.

8. Your rights

Exercise your rights through the form on the Data protection page or by writing to contact@inocode.md. We reply within 30 calendar days; for complex requests we may extend by another 30 days and will tell you.

• Access to the data we hold about you.
• Rectification of inaccurate data.
• Erasure (the right to be forgotten).
• Restriction of processing.
• Data portability in a structured format.
• Objection to legitimate-interest processing and to direct marketing.
• Withdrawal of consent at any time.
• No automated decision-making with significant effects — we don't use any.

9. Security

• HTTPS encryption across the whole site.
• Database access restricted by row-level security policies and individual accounts.
• Data minimisation: we collect only what we need.
• In case of a breach that risks your rights we notify CNPDCP within 72 hours and inform you directly when the risk is high.

10. Cookies

Strictly necessary cookies run without consent; analytics, marketing and functional cookies only after your explicit opt-in via the cookie banner (Google Consent Mode v2). You can change or withdraw your choice anytime from the “Cookie preferences” button in the footer.

11. Complaints

Please contact us first at contact@inocode.md. You also have the right to lodge a complaint with the National Center for Personal Data Protection of Moldova (CNPDCP), str. Serghei Lazo 48, MD-2004, Chișinău, https://datepersonale.md.

12. Changes to this policy

We update this policy when our services or the law change. The current version is always published on this page with its update date.