1. Introduction
This Privacy Policy explains how iCars.md ("we", "our") collects, uses and protects the personal data of its users ("you", "user").
We comply with the General Data Protection Regulation (GDPR) and Law No. 133/2011 on personal data protection of the Republic of Moldova.
2. What data we collect
We collect only the data strictly necessary for the platform to work:
- Data you provide directly: name, email, phone (when you fill in the contact form)
- Data collected automatically: IP address (anonymized via hash), browser type, device type, pages visited
- Data stored locally in your browser: favorite listings, comparison list (localStorage — not sent to the server)
We do NOT collect: banking data, passwords, data about friends/contacts, GPS location.
3. How we use data
The collected data is used exclusively for:
- Responding to your contact messages
- Improving platform functionality (aggregated statistics)
- Preventing abuse (spam, fake accounts)
- Communicating important notices (terms changes, security measures)
4. Sharing with third parties
We do NOT sell or rent your data to third parties. We share it only in the following cases:
- Technical providers: hosting services, transactional email (under a strict confidentiality contract)
- Competent authorities: only upon a lawful written request from the courts
- With your explicit consent: for example, when you contact a dealer through the platform
5. Cookies and similar technologies
We use cookies for essential functionality (sessions, language preferences). For full details, see Politica de Cookies.
6. Your rights (GDPR)
You have the following rights regarding your data:
- Right of access — to find out what data we hold about you
- Right to rectification — to correct inaccurate data
- Right to erasure ("right to be forgotten") — to have your data deleted
- Right to portability — to receive your data in a machine-readable format
- Right to object — to object to data processing for marketing purposes
- Right to lodge a complaint — with Moldova's National Center for Personal Data Protection
To exercise any of these rights, write to us at privacy@icars.md.
7. How long we keep data
Contact messages: 24 months from the last interaction.
Access logs: 90 days.
Locally stored data (favorites, comparison): for as long as you don't delete it from your browser.
8. Security
We implement technical and organizational measures to protect data:
- Encrypted HTTPS communication across the entire platform
- Database access restricted to authorized personnel only
- Daily encrypted backups
- Continuous monitoring of unauthorized access attempts
9. Changes to this policy
We reserve the right to update this policy. Changes will be announced by email to registered users and via a visible notice on the site at least 30 days before they take effect.
10. Data protection contact
For any questions related to this policy:
Email: privacy@icars.md
Phone: +373 22 123 456
Address: Stefan cel Mare Blvd 73, Chisinau, Moldova