1. Who We Are
Optimum Web is a software development company registered in the Republic of Moldova. Our office is located at Calea Iesilor 8, office 3, MD-2069 Chisinau, Moldova. You can reach us at [email protected] or by phone at +373 22 843569. This privacy policy explains how we collect, use, store, and protect your personal data when you use our website or engage our services.
2. What Data We Collect
We collect the following categories of personal data:
- Contact form submissions — name, email address, phone number, and project description
- Email correspondence — messages exchanged during project inquiries and service delivery
- Website analytics — anonymized usage data collected via Google Analytics 4 (with IP anonymization enabled)
- Cookies — session cookies, analytics cookies, and preference cookies
- Server access credentials — provided temporarily for Fixed Price Services, stored in encrypted vaults and deleted immediately after task completion
3. How We Use Your Data
We use your personal data for the following purposes:
- To respond to project inquiries and provide accurate quotes
- To deliver Fixed Price Services and custom development projects you have ordered
- To send service updates, project communications, and delivery notifications
- To improve our website through anonymized analytics
We do NOT sell, rent, or share your personal data with third parties for marketing purposes. Ever.
4. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your data based on the following legal grounds:
- Contract performance — processing necessary to deliver services you have requested
- Legitimate interests — business communication, fraud prevention, and service improvement
- Consent — for marketing emails and non-essential cookies (you may withdraw consent at any time)
5. Data Retention
We retain your data only as long as necessary for the purposes described above:
- Project communications — retained for 5 years for legal and tax compliance purposes
- Server credentials — deleted immediately after service completion
- Analytics data — retained for 26 months (Google Analytics default retention period)
- You may request deletion of your personal data at any time by emailing [email protected]
6. Third-Party Services
We use the following third-party services in our operations. Each service has its own privacy policy:
- Google Analytics 4 — website analytics and usage tracking
- Google Workspace — email, documents, and internal communication
- Stripe / PayPal — secure payment processing for international clients
- GitHub / GitLab — code repositories and version control
7. Your Rights (GDPR)
Under the GDPR, you have the following rights regarding your personal data: the right to access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and objection to processing. To exercise any of these rights, email [email protected]. We will respond within 30 calendar days.
8. Cookies
Our website uses the following types of cookies:
- Strictly necessary cookies — required for website functionality (session management)
- Analytics cookies — Google Analytics cookies for understanding website usage patterns
- Preference cookies — remembering your settings and preferences
You can disable analytics and preference cookies in your browser settings at any time. Strictly necessary cookies cannot be disabled as they are essential for the website to function.
9. Security
We take the security of your data seriously. All data transmitted between your browser and our servers is encrypted via HTTPS/TLS. Access credentials provided for Fixed Price Services are stored in encrypted vaults (Bitwarden Teams or HashiCorp Vault). Internal access to personal data is restricted to personnel who require it for service delivery.
10. Changes to This Policy
We may update this privacy policy when our practices change or when required by law. The "last updated" date at the top of this page reflects the most recent revision. We notify active clients of material changes by email.
11. Contact
For any questions about this privacy policy or your personal data, contact us at [email protected]. We aim to respond to privacy-related inquiries within 5 business days.