Privacy Policy

1. General Provisions

This Privacy Policy (the "Policy") outlines how Traffic Lords SRL ("Company", "we", "us", or "our") collects, uses, processes, and protects the personal data of individuals who access or use our website and services.

We value your privacy and are committed to ensuring transparency, integrity, and safety regarding any information you share with us.

This Policy has been established in compliance with:

• Law of the Republic of Moldova No. 133 of July 8, 2011 on Personal Data Protection;
• Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation — GDPR) with respect to data subjects located within the European Economic Area (EEA).

By visiting our website or submitting a lead form, you acknowledge that you have read and agreed to the practices described in this Privacy Policy.

2. Personal Data We Collect

We adhere to the data minimization principle and collect only the information necessary to fulfill our business commitments and provide you with consultations and marketing services.

2.1. Information you provide voluntarily:

• Full name / Contact person: to address you personally in communications;
• Business email address: to send audit results, media plans, and commercial proposals;
• Company name and/or website: to research your business requirements prior to consultations;
• Services of interest: software automation, targeting management, or comprehensive packages;
• Any other information voluntarily disclosed in business correspondence, briefing calls, or discovery chats.

2.2. Information collected automatically:

• Internet Protocol (IP) address and approximate geographical location (country/city level);
• Browser brand and version, operating system, device model, and display resolution;
• Date, timestamp, duration of visits, pages viewed, and scrolling depth;
• Referring URL (the previous page or campaign from which you reached us);
• Cookie identifiers and analytical event tracking data.

3. Purposes and Legal Bases for Processing

We process your data strictly under valid legal grounds provided by Law No. 133/2011 and the GDPR:

• Consent (Art. 5 Law No. 133/2011, Art. 6(1)(a) GDPR) — given when you submit your inquiry through the website or accept non-essential cookies;
• Performance of a contract / Pre-contractual steps (Art. 6(1)(b) GDPR) — to process consultation requests, conduct advertising audits, demo software, and prepare service agreements;
• Legitimate interests (Art. 6(1)(f) GDPR) — to maintain site stability, safeguard against spam and abuse, analyze service quality, and improve user experience;
• Compliance with statutory legal obligations — fulfilling corporate, financial, and tax accounting regulations.

The primary purposes of data processing are:

1. Managing incoming inquiries, scheduling consultation calls, and providing customer support;
2. Conducting free advertising audits and building data-driven targeting media plans;
3. Demonstrating and integrating workflow automation tools (AI creative generator, auto-launch, automated reports);
4. Drafting, signing, and executing service agreements for digital targeting across Meta Ads, TikTok Ads, Google, and Yandex;
5. Aggregating anonymized website analytics to optimize page performance and conversion flows.

4. Cookies and Web Analytics

Our website utilizes cookies (small text files placed on your computer or mobile device) and similar tracking technologies to guarantee technical functionality and collect metrics.

Cookie Categories:

• Strictly Necessary: Enable foundational features such as language switching (RU/EN), form security, and routing. These cannot be disabled.
• Analytical / Performance: Help us measure visitor interactions and identify areas for improvement. We use Google Analytics (Google Ireland Ltd.) and Yandex Metrika (Yandex LLC). All statistical metrics are collected anonymously.
• Marketing / Advertising Pixels: We may employ Meta Pixel (Meta Platforms Ireland Ltd.), TikTok Pixel (TikTok Technology Ltd.), and Google Ads tags to evaluate campaign efficacy and deliver relevant advertising.

You can adjust your browser settings to reject cookies or delete them at any time. Please note that disabling cookies may affect certain interactive features of our website.

5. Third-Party Disclosures and International Transfers

We never sell, lease, or monetize your personal data to any external commercial third parties.

Personal data may only be transferred to trusted processors strictly to the extent required to deliver our services:

• Cloud hosting providers and infrastructure partners maintaining site availability and server defense;
• Enterprise email providers and CRM software systems used to manage client inquiries;
• Web analytics and advertising networks (Google LLC, Meta Platforms Inc., ByteDance Ltd., Yandex LLC), under their respective Data Processing Agreements incorporating European Commission Standard Contractual Clauses (SCCs);
• Judicial or law enforcement authorities — solely when mandated by applicable legislation of the Republic of Moldova.

6. Data Retention Periods

Personal data is retained only for as long as necessary to fulfill the intended purposes:

• Contact form leads and consultation records are stored for the duration of communication and up to 3 (three) years from the last active interaction if no commercial contract is established;
• Contractual and financial records for active or past clients are kept for the duration of the engagement plus statutory tax and accounting retention periods (typically 5 years);
• Analytics logs and cookies are retained in line with standard platform retention schedules (ranging from 14 days to 24 months);
• Upon withdrawal of consent, your data will be permanently deleted or anonymized within 30 days, unless statutory preservation rules apply.

7. Information Security Measures

We deploy robust organizational, administrative, and technological security controls to defend your information from unauthorized access, breach, loss, or alteration:

• End-to-end SSL/TLS encryption for all data transmitted between your browser and our servers;
• Strict role-based access restrictions limiting data visibility to authorized personnel only;
• Continuous software updates, firewalls, and multi-factor authentication across internal systems;
• Regular data integrity verifications and server backup protocols.

8. Your Rights as a Data Subject

Under Law No. 133/2011 and the GDPR, you are granted comprehensive rights over your personal data:

• Right of Access: Obtain confirmation whether your data is processed and request a copy of collected details;
• Right to Rectification: Request correction of inaccurate, obsolete, or incomplete information;
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data when retention is no longer justified;
• Right to Restriction: Request limitation of data processing during disputes over accuracy or lawfulness;
• Right to Data Portability: Receive your personal data in a structured, machine-readable format;
• Right to Object: Object to processing carried out under our legitimate interest grounds;
• Right to Withdraw Consent: Revoke consent at any moment without affecting processing carried out prior to withdrawal.

9. Amendments to this Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory enhancements. Any changes will be posted on this page with an updated effective date.

We encourage you to review this page periodically to stay informed about how we safeguard your information.

10. Contact Us

If you have any questions or feedback regarding our privacy practices, please contact us at: