Privacy Policy

FIDELIR (“we”, “us”) operates fidelir.com and related digital services from Chișinău, Republic of Moldova. Full company registration details are provided in engagement documentation.

This Privacy Policy describes how we process personal data in connection with the website and related enquiries. Our Independence, Privacy & Security Charter sets out operational principles for client engagements — including data minimisation, purpose limitation, no voluntary disclosure to third parties, and staff accountability. The Charter is published on this website and should be read together with this policy.

We may process identity and contact data (name, email, phone), message content sent through the contact form, and technical data required to operate and secure the website (for example IP address, browser type, and session identifiers).

For client engagements, we process only the information strictly necessary to deliver the agreed service. Access to client systems and data is limited to engagement scope, retained only for the contractually defined period, and not used for any other purpose.

We process data to respond to enquiries, operate and secure the website, deliver contracted services, and meet legal obligations. Depending on the case, processing is based on legitimate interests, contract performance, consent, or legal obligation under applicable law, including the GDPR.

We do not voluntarily provide governments, intelligence agencies, law enforcement, or other third parties with access to website enquiry data, client systems, or operational data. Any disclosure occurs only where we are legally compelled under applicable law, and never as a matter of courtesy or expediency. Where legally permitted, we will notify affected clients of official requests concerning their information or infrastructure.

We use cookies and similar technologies as described in our Cookie Policy. Essential cookies are required for site security and session handling. We do not use cookies to create privileged or undisclosed access to systems. Non-essential cookies, if used, are only set with consent where required.

Contact messages and related records are retained only as long as needed for the purpose of the enquiry and for applicable legal or security requirements. Session data is retained for the duration of the session or a short technical period thereafter. Engagement-related data is retained according to the contract and applicable law.

Data may be processed by infrastructure and service providers acting on our instructions (hosting, email, security). Processors act under contractual controls. Where data is transferred outside the EEA, we use appropriate safeguards required by law.

We apply privacy-by-design and least-privilege practices. Personnel access to client environments, where required, is limited to what is necessary for the task, for the shortest time required, and is logged. Background screening, confidentiality obligations and internal accountability measures apply as described in our Charter.

Subject to applicable law, you may request access, rectification, erasure, restriction, portability, and objection to processing, and you may withdraw consent where processing is consent-based. You may also lodge a complaint with a supervisory authority.