Privacy policy

This policy explains how United Capital S.R.L. ("we", "United Capital") processes the personal data of visitors and partners. It is drafted in line with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and Law no. 133/2011 of the Republic of Moldova on personal data protection.

1. Data controller

United Capital S.R.L., headquartered in Chișinău, Republic of Moldova. Privacy enquiries: privacy@unitedcapital.md.

2. What we collect

Data you provide via the contact form: name, e-mail, phone (optional), message body.
Technical data collected automatically: IP address, browser type, pages viewed, visit duration — aggregated and not directly identifying.
Additional data exchanged in follow-up correspondence with our team.

3. Purpose of processing

Responding to enquiries and initiating discussions with prospective capital partners.
Assessing partnership opportunities and investor profiles.
Improving site content through aggregated traffic analysis.
Meeting legal obligations (AML, tax, reporting).

4. Legal basis

We process data under:

your consent (Art. 6(1)(a) GDPR), when you complete the contact form;
legitimate interest in assessing partnership opportunities (Art. 6(1)(f) GDPR);
legal obligations (Art. 6(1)(c) GDPR), for AML and tax reporting.

5. Recipients of data

Internally, data is accessed only by authorised staff. We may share it with:

technical service providers (hosting, e-mail, analytics) acting as processors;
competent authorities where required by law;
legal, tax and audit advisors under confidentiality.

We do not sell or transfer your data to third parties for commercial purposes.

6. Retention

Contact-form data: 36 months from last interaction, then deleted or anonymised.
Contractual data: term of the contract plus statutory retention (typically 10 years).
Aggregated technical data: 12 months.

7. Your rights

You have the right to:

access the data we hold about you;
request rectification or erasure;
restrict or object to processing;
receive your data in a portable format;
lodge a complaint with the National Center for Personal Data Protection (CNPDCP) in the Republic of Moldova, or the supervisory authority in your country.

To exercise these rights, write to privacy@unitedcapital.md.

8. Security

We apply reasonable technical and organisational measures: TLS in transit, role-based access control, encrypted backups, periodic audits.

9. Changes

We will update this policy as our practices evolve. The current version is published at /legal/privacy. Material changes will be notified separately.