Privacy Policy

Who we are

Nahaba Group SRL is responsible for the personal information described in this policy (the data controller).

• Address: str. Doina 38, Chișinău, MD-2059, Republic of Moldova.
• Company registration number (IDNO): 1015600020025
• Privacy contact: hello@nahabagroup.com

This policy explains how we handle personal information when you visit our website or contact us about our services.

Information you provide

When you use our enquiry form, we receive your name, email address, message and any optional company or website details you provide.

Your name, email address and message are required to submit the form. Company or website details are optional. You can also contact us directly by email. If you do, we receive your email address, message and any information or attachments you choose to send.

Please provide only information relevant to your enquiry. Do not send passwords, identity documents, payment-card details or sensitive personal information through the form. If project work requires protected information, we can agree a suitable method separately.

Technical and security information

Our hosting and email services may record technical information needed to operate the website, deliver messages, investigate errors and protect against abuse. This may include IP addresses, request times, requested pages and browser information.

Our contact-form handler uses a coded value derived from your IP address to limit repeated submissions. This value is pseudonymous rather than anonymous: it helps recognise repeated requests without storing the original IP address in that rate-limit record.

Spam and bot protection

We use Cloudflare Turnstile to help distinguish human visitors from automated traffic and protect our enquiry form against abuse. Turnstile processes technical signals, including your IP address, browser information and connection characteristics.

Our server sends your verification token to Cloudflare to check the result. It does not include your name, email address or message in that verification request.

Cloudflare processes information on our behalf to protect the website. It also acts as a separate controller when processing information to improve Turnstile's bot-detection capabilities. Further information is available in Cloudflare's Turnstile Privacy Addendum.

Why we use your information

We use personal information for the following purposes:

• To respond to enquiries, discuss requirements and prepare proposals. Where you intend to contract with us personally, this processing may be necessary to take steps at your request before entering into a contract.
• To handle general enquiries and communicate with people acting on behalf of businesses. Our legitimate interest is managing business communications and potential client relationships.
• To operate the website, investigate technical problems and prevent spam or abuse. Our legitimate interest is maintaining secure and reliable services.
• To meet applicable legal obligations and, where necessary, establish, exercise or defend legal claims. The legal basis depends on the obligation or claim concerned.

We do not use enquiry details for unrelated marketing without an appropriate legal basis. Sending an enquiry does not subscribe you to a newsletter.

Who can access your information

Enquiries are currently handled by Nahaba Group's owner, who also manages projects. Access is limited to what is needed for the relevant work.

We use service providers to operate the website, host email and protect the enquiry form:

• Website hosting and email services: we use Amplica for website hosting, business mailboxes and outgoing website email.
• Spam and bot protection: Cloudflare provides the Turnstile verification service described above.

We may disclose information to professional advisers or competent authorities when necessary to meet legal obligations or establish, exercise or defend legal claims.

We do not sell enquiry information or share it for third-party advertising.

Where information is processed

Nahaba Group is based in the Republic of Moldova, where we handle enquiries and manage our business communications.

Amplica has confirmed that website files, databases, email messages and backups for its hosting services are stored exclusively in the Republic of Moldova.

Cloudflare operates internationally, so information processed through Turnstile may be handled outside Moldova, including outside the European Economic Area.

Cloudflare describes its international-transfer safeguards, including standard contractual clauses where applicable, in its Data Processing Addendum. You can contact us at hello@nahabagroup.com for further information about the safeguards applicable to our use of the service.

How long we keep information

We keep personal information only for as long as needed for the purposes described in this policy.

For enquiries that do not become projects, we delete the correspondence after 12 months without meaningful contact, unless there is a specific reason to retain it longer, such as an unresolved dispute or a legal obligation.

Project correspondence, contracts, invoices and related records follow separate retention periods based on the work involved, applicable legal obligations and the need to establish, exercise or defend legal claims.

We may keep local copies of correspondence on company devices and in protected backups. Our retention rules also apply to local copies. Deleted information may remain in backups until those copies are replaced through the backup rotation.

Expired contact-form rate-limit counters are removed when the handler next processes a request. They are not necessarily erased immediately when their counting window ends.

According to our hosting provider, Amplica, website access logs and email-service logs are retained for 30 days.

Amplica confirms that weekly backups include website files, databases, mailboxes and email messages. Backups are stored on a separate server, and the latest four weekly copies are retained.

Deleted information may remain in existing backups until those copies are replaced. Restoring an older backup may restore previously deleted messages. Following a restoration, we will check for information that needs to be deleted again and repeat the deletion where appropriate.

Cookies, saved preferences and analytics

When you choose a light or dark appearance, the website saves your preference in your browser's local storage under the key nahaba-theme. Choosing System removes that saved preference and lets the website follow your device's appearance setting.

Local storage is different from a cookie: the browser does not automatically send this saved preference with website requests. You can remove it by clearing this website's browser data.

We use Cloudflare Turnstile for security as described above. Pre-clearance is disabled in our widget settings.

We use Google Search Console to understand how the website appears in Google Search. This does not install Google Analytics or an advertising tracker on our website.

We do not currently use Google Analytics, advertising pixels or newsletter tracking on this website.

Your rights

Depending on the applicable law and circumstances, you may have the right to:

• Request access to your personal information and a copy of it.
• Ask us to correct inaccurate or incomplete information.
• Request deletion of information we no longer need to retain.
• Request restrictions on how we use your information.
• Object to processing based on legitimate interests, where the applicable conditions are met.
• Receive certain information in a portable format, where the applicable conditions are met.
• Withdraw consent where processing is based on consent, without affecting the lawfulness of earlier processing.

These rights are not absolute. For example, we may need to retain information to meet a legal obligation or establish, exercise or defend legal claims.

To make a request, contact hello@nahabagroup.com. We may ask for information reasonably needed to verify your identity and will respond within the applicable legal deadline.

Privacy complaints

Please contact us if you have concerns about how we handle your personal information. You also have the right to complain to Moldova's National Center for Personal Data Protection.

Where GDPR applies, you may also complain to the competent EU supervisory authority, including in the Member State of your habitual residence, workplace or the alleged infringement.

Automated decisions

We use automated security checks to help prevent spam and abuse. We do not use your enquiry information for solely automated decisions that produce legal or similarly significant effects on you.

Changes to this policy

We may update this policy when our services, providers or information-handling practices change. The publication or update date will identify the current version. Where required, we will provide additional notice of material changes.