Privacy Policy

Last updated: 21 August 2026

This policy explains what personal data we process when you use newlightdigital.com, why we process it, how long we keep it, and what rights you have. It is written under Law no. 195/2024 on personal data protection, in force from 23 August 2026.

newlightdigital.com is a marketing agency website. There is no online shop, no customer account and no payment on this site. In practice we process two things: the enquiries people send us, and, with consent, statistics about how the site is used.

Who the controller is

New Light Digital SRL, fiscal code 1020600015852, registered at Str. Mitropolit Varlaam 75, of. 29, Chisinau MD-2012, Republic of Moldova, is the data controller for this website.

For any question about your data, including to exercise the rights described below, write to us at [email protected] or call +373 69 138459.

What we process, what for, and on what basis

Your enquiry. Your name, email address, phone number, the website or company you mention, and whatever you write in the message. We use it to answer you and to discuss the work you are asking about. Basis: steps taken at your request before entering into a contract, and our legitimate interest in replying to people who contact us (art. 6(1)(b) and (f)). Retention: for as long as a business relationship is active, reviewed once a year, and deleted sooner if you ask us to.

How you reached us. If you consent to statistics, the site keeps a record in your browser of the pages you read, how you arrived, how many times you have visited and how long you stayed. If you also consent to marketing, that record includes the advertising click identifiers on the address you arrived with. When you send an enquiry, that record is attached to it, so we can see what you were reading before you wrote to us and reply in context. Basis: your consent (art. 6(1)(a)). Retention: with your enquiry, as above. Refusing statistics stops this entirely, and withdrawing it deletes what was stored.

Site usage statistics. Pages visited, source of the visit, approximate location derived from the IP address, device and browser, and identifiers held in cookies. We use them in aggregate to see which pages are worth writing and which are not. Basis: your consent. Retention: per the duration of each cookie, as listed in the Cookie Policy.

Advertising measurement. Advertising click identifiers and identifiers held in cookies, used to tell which campaign led to an enquiry. Basis: your consent. If you refuse the Marketing category, this does not happen. Retention: per each platform's own policy.

Site security and abuse prevention. IP address, browser type, time of access and technical events in the server logs, plus the anti-spam check that runs when you submit the form. Basis: our legitimate interest in keeping the site available and stopping abuse (art. 6(1)(f)). Retention: no more than 12 months.

Feedback you volunteer. If you use the feedback button, whatever you write in it, together with the page you were on and your IP address. Basis: our legitimate interest in improving the site. Retention: 2 years from your last message.

Proof of your cookie choice. The time you chose, the categories you accepted, the version of the policy, a random identifier, and an irreversibly encrypted form of your IP address and browser. This exists so we can demonstrate consent, as art. 7(1) requires, and it is not used to track you. Retention: 13 months from the moment you chose.

We do not process special categories of data as defined in art. 9 of Law no. 195/2024. We do not take automated decisions producing legal effects for you, and we do not profile you to decide anything about you: the browsing record described above exists so that a human can reply to you in context.

Who we share data with

We share data only where it is necessary for the purposes above, with the following categories of recipient:

• Kommo, the customer relationship system where your enquiry is recorded and worked on;
• Brevo, which delivers the email your enquiry generates;
• Google (Tag Manager, Analytics, Ads), for statistics and advertising measurement, only within the limits of your consent;
• Meta, for advertising measurement, only within the limits of your consent;
• Yandex, for site statistics, only within the limits of your consent;
• Cloudflare, which serves the site, protects it from attack and runs the anti-spam check on the form;
• Appzi, the feedback widget, if you choose to use it;
• our hosting provider;
• public authorities, where the law requires it.

Every provider processing data on our behalf does so under a contract imposing confidentiality and security obligations, in line with art. 28 of Law no. 195/2024. The full, current list is available on request at [email protected].

We do not sell your data and we do not make it available to third parties for their own marketing purposes.

Transfers outside the Republic of Moldova

Our providers process data on servers outside the Republic of Moldova. Google, Meta, Cloudflare, Brevo, Appzi and Kommo process in the European Union and the United States. Yandex processes on servers in the Russian Federation. Those transfers rely on standard contractual clauses and on the guarantees each provider gives in its own terms, in line with the chapter on international transfers in Law no. 195/2024.

The transfers for statistics and advertising, including the transfer to Yandex, happen only if you have given consent for the category concerned. Refusing statistics stops the transfer to Yandex and to Google Analytics; refusing marketing stops the transfer to Meta and to Google Ads.

Cookies

The site uses strictly necessary cookies without asking, and statistics and marketing cookies only with your consent, given through the banner shown on your first visit. The full list, the purposes and the durations are in the Cookie Policy. You can change your choice at any time from the Cookie settings link in the page footer.

Your rights

In relation to your data you have the following rights:

• the right of access: to learn whether we process data about you and to receive a copy of it;
• the right to rectification: to correct inaccurate or incomplete data;
• the right to erasure: to ask for your data to be deleted where there is no longer a basis for keeping it;
• the right to restriction of processing in the cases provided by law;
• the right to object to processing based on our legitimate interest, and, at any time and unconditionally, to processing for direct marketing;
• the right to portability: to receive the data you provided in a structured, commonly used, machine-readable format;
• the right to withdraw your consent at any time, as easily as you gave it, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, write to us at [email protected]. We reply within one month of receiving the request. If the request is complex, that period may be extended, in which case we will tell you about the extension and the reasons for it within the first month.

If you believe your rights have been infringed, you can contact the National Center for Personal Data Protection, str. Serghei Lazo 48, MD-2004, Chișinău, phone (022) 820 801, email [email protected], or the courts.

Data security

We use encrypted connections, role-based access control, logging of administrative operations, backups and regular updates of software components. Staff with access to personal data are bound to confidentiality. No system can be guaranteed absolutely, but we treat your data with the same care we give our own records.

If a security incident occurs that could put you at high risk, we will tell you without undue delay and notify the authority, in line with art. 33 and 34 of Law no. 195/2024.

Children

Our services are meant for businesses and for adults. We do not knowingly collect data from children. If you learn that a child has given us their data, write to [email protected] and we will delete it.

Changes

We may update this policy when our services or the legal requirements change. The date of the last update is shown at the top of the page. If a change affects you significantly, we will say so on the site.