Privacy Policy

Last updated: August 21, 2026.

1. Who we are

The controller of the personal data collected through the website www.bikeshop.md is ALMANARA SRL, registered at str. Nicolae Testemițanu 23, block 2, MD-2024, Chișinău, Republic of Moldova.

For any questions regarding your personal data, you can contact us at bikeshop.md@gmail.com or by phone at +373 78799944.

This policy describes what data we collect through the website, for what purpose we use it, to whom we disclose it, how long we keep it, and what rights you have, in accordance with Law No. 195/2024 on the protection of personal data and Law No. 284/2004 on information society services. For the commercial terms of orders (delivery, payment, returns), please see the separate Terms and Conditions document.

2. What data we collect

Depending on how you interact with our website, we may collect:

• When placing an order: first and last name, delivery address, e-mail address, phone number;
• When subscribing to the newsletter: e-mail address;
• When you contact us (form, e-mail, phone): name, contact details, and the content of your message;
• Automatically, through your use of the website: IP address, browser and device type, pages visited — through cookies and similar technologies, detailed in the Cookie Policy.

3. Legal basis for processing

We process your personal data based on the following grounds, under Article 6 of Law No. 195/2024:

• Performance of a contract — for processing and delivering your order, invoicing, and warranty. Providing this data is required to complete the order; without it, we cannot process your order.
• Your consent — for sending marketing communications (newsletter, offers) and for statistics/marketing cookies, only if you have given separate and voluntary consent. This consent is never a condition for placing an order.
• Legal obligation — for retaining accounting and tax records, as required by applicable legislation.
• Legitimate interest — for fraud prevention, website security, and service improvement, while respecting your rights.

4. Purposes of processing

We use the collected data to:

• process, deliver, and invoice orders;
• communicate with you about your order (confirmations, delivery notifications, requests for clarification);
• manage returns and complaints;
• run promotions you take part in and determine winners;
• send marketing communications, only if you have voluntarily subscribed to the newsletter;
• analyze and improve the website's performance.

5. Who we share your data with

We do not sell your personal data. We share it only with the following categories of recipients, strictly to the extent necessary for the relevant service:

• Delivery / courier services — to deliver your order (name, address, phone number);
• Payment processors (e.g., PayPal) — to process online payments;
• Website hosting and technical maintenance providers;
• Accounting — for financial and tax record-keeping, if outsourced;
• Public authorities or courts — only upon a lawful request, under the conditions provided by law.

We do not transfer personal data outside the Republic of Moldova, except where a provider mentioned above (for example, the payment processor) operates servers in another country; in that case, the transfer takes place in accordance with the safeguards set out in Articles 44–49 of Law No. 195/2024.

6. How long we keep your data

• Data related to orders (name, address, order history) — for the duration of the contractual relationship and afterward, for the period required by Moldovan accounting and tax legislation.
• Data used for marketing — until consent is withdrawn or you unsubscribe.
• Data from contact forms not related to an order — a maximum of 12 months from the last contact, if no order results from it.

7. Your rights

Under Law No. 195/2024 on the protection of personal data, you have the following rights:

• Right of access — you can find out whether we process your data and obtain a copy of it.
• Right to rectification — you can request the correction of inaccurate data or the completion of incomplete data.
• Right to erasure — you can request the deletion of your data, under the conditions provided by law.
• Right to restriction of processing — you can request a temporary limitation of processing, in certain situations.
• Right to data portability — you can request the transfer of your data, in a structured format, to another controller.
• Right to withdraw consent — at any time, as easily as it was given, without affecting the lawfulness of processing carried out before the withdrawal.
• Right to object to direct marketing — you can object at any time, without any justification, to the processing of your data for direct marketing purposes, including profiling; such processing stops immediately, upon your simple request or via the unsubscribe link in any marketing e-mail.
• Right to lodge a complaint — with the National Center for Personal Data Protection (CNPDCP), datepersonale.md, within one year at the latest from the date you became aware of the alleged breach (but no later than 3 years from the date of the breach).

To exercise these rights, you can contact us at bikeshop.md@gmail.com. We will respond within one month of receiving your request at the latest; in complex cases, this period may be extended by up to two months, and we will inform you of this.

8. Data security

We use reasonable technical and organizational measures to prevent unauthorized access to your data and to ensure its accuracy and integrity. However, the transmission of data over the internet cannot be guaranteed to be 100% secure, so any information sent to us is sent at your own risk.

In the event of a data security breach posing a risk to your rights, we will notify the CNPDCP within 72 hours of becoming aware of the incident and, if the risk is high, we will inform you directly.

9. Cookies

The website uses cookies for the shopping cart to function, for statistics, and, with your explicit consent, for marketing. Full details — cookie categories, providers, and storage periods — are available in the Cookie Policy, where you can change or withdraw your consent at any time.

10. Marketing and newsletter

We send you marketing communications (offers, news) only if you have voluntarily subscribed, via a separate checkbox that is not checked by default. Subscribing to the newsletter is always independent of placing an order — you can order without subscribing, and subscribe without ordering. You can unsubscribe at any time, with a single click on the link in any e-mail you receive from us.

11. Children and minors

Our website is intended for adults. Under Article 8 of Law No. 195/2024, for persons under 14 years of age, any consent to the processing of data must be given by their legal representative. If you become aware that a minor under 14 has provided us with data without the consent of a legal representative, please contact us so that we can delete it.

12. Complaints

For a complaint regarding the way we process your personal data, you can contact the National Center for Personal Data Protection — datepersonale.md.

For a complaint related directly to the purchase of a product, please see the Complaints section of the Terms and Conditions or contact the Consumer Protection Agency of the Republic of Moldova — www.consumer.gov.md.

13. Changes to this policy

We may periodically update this policy to reflect legislative or operational changes. The date of the last update is indicated at the beginning of this document. We encourage you to review it periodically.