Privacy Policy

1. Introduction

This Privacy Policy describes how Red Line Oil Moldova collects, uses, stores, and protects your personal data when you use the redlineoil.md website.

We respect your privacy and strive to ensure secure protection of personal data in accordance with the laws of the Republic of Moldova.

2. What data we collect

We may collect the following categories of personal data:

• Identification data: first name, last name, email address, phone number.
• Delivery data: postal address, city, postal code.
• Account data: login, encrypted password, order history.
• Technical data: IP address, browser type, operating system, and page visit information.
• Payment data: we do not store bank card details; they are processed by secure payment providers.

3. Purposes of data processing

Your personal data is processed for the following purposes:

• Placing and fulfilling orders.
• Creating and managing a user account.
• Communicating with you about orders and service matters.
• Sending informational and promotional messages where consent is given.
• Improving the website and user experience.
• Complying with legal obligations.

4. Legal basis for processing

We process your data on the following legal grounds:

• Performance of a contract — to process and deliver your orders.
• Consent — to send marketing messages.
• Legitimate interest — to improve our services and ensure security.
• Legal obligation — to comply with applicable laws.

5. Sharing data with third parties

To run the shop we work with providers that process data on our instructions and only to the extent their task requires:

• Payment services — to take payment.
• Delivery services — to ship and hand over the order.
• Email delivery service — for order messages and email address confirmation.
• Hosting and site protection services — to keep the site running and secure.
• Web analytics services — only with your consent.
• Public authorities — where required by law.

Transfers outside Moldova. Some of the providers listed above are located outside the Republic of Moldova, including in the USA. We work only with providers that ensure an adequate level of protection, and we transfer the minimum amount of data required.

We do not sell your data and do not share it with third parties for marketing purposes.

6. Data retention

We keep data no longer than the purposes it was collected for require:

• Your account and its contents — for as long as the account exists. Once an account is deleted the data is erased or anonymised, except documents we are legally required to keep.
• Orders and payment documents — for the period set by accounting and archiving legislation.
• Messages sent through site forms — 24 months from the last reply.
• Cookie consent records — 3 years, so the consent given can be demonstrated.
• Server technical logs — 12 months.
• Web analytics data — according to the analytics service settings.

Once the period expires the data is deleted or anonymised.

7. Data protection

We apply technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, including:

• Encryption of data in transit (SSL/TLS).
• Storage of passwords in encrypted form.
• Restricted employee access to personal data.
• Regular security system updates.

8. Cookies

The website uses cookies to ensure proper operation, analyze traffic, and personalize content. You can manage cookie settings in your browser. Disabling cookies may affect website functionality.

9. Your rights

In relation to your personal data you have the right to:

• Access — request a copy of your personal data.
• Rectification — ask for inaccurate data to be corrected.
• Erasure — ask for your data to be deleted.
• Restriction — ask for processing to be limited.
• Portability — receive your data in a machine-readable format, or ask us to pass it to another controller.
• Objection — object to processing based on legitimate interest, and opt out of marketing messages at any time.
• Withdrawal of consent — withdraw consent you gave earlier; this does not affect the lawfulness of processing carried out before the withdrawal.

We answer a request within one month, free of charge. If the request is complex the period may be extended, and we will tell you within the first month.

If you believe your rights have been breached, you may lodge a complaint with the supervisory authority — the National Center for Personal Data Protection of the Republic of Moldova (Centrul Naţional pentru Protecţia Datelor cu Caracter Personal): MD-2004, mun. Chișinău, str. Serghei Lazo 48; +373 22 820 801; [email protected]; datepersonale.md.

10. Changes to the policy

We may update this Policy from time to time. The current version is always available on this page together with the date of the latest update. Where changes are significant, we will notify you by email or by a notice on the website.

11. Contact information

If you have any questions regarding the processing of personal data, you can contact us:

• Phone: +373 60 699 666
• Email: [email protected]
• Address: Chișinău, Republic of Moldova