Version 2026-08-22
Privacy policy
This policy explains data processing on the IsoThermLux website. It is a technical and documentary notice; unconfirmed legal details must be completed by the owner.
1. Data controller
The isothermlux.md website operates for the IsoThermLux brand. Legal entity name, IDNO, full registered address and official representative: INFORMATION REQUIRED FROM THE OWNER.
Public contact details shown on the website: infopoliuretan@gmail.com and +373 60 811 115.
2. Data collected
Forms may collect your name, phone number, locality, type of work, approximate area, message and estimated price.
The website may process technical data: page, referrer, browser language, user-agent, device type and UTM parameters. Advertising identifiers (_fbp, _fbc, gclid, fbclid) are used in the CRM only after marketing consent.
Clicks on phone, WhatsApp, TikTok or other buttons are saved as CRM events only after marketing consent.
3. Purposes and legal bases
Responding to quote and consultation requests: steps requested by the data subject before entering into a contract.
CRM administration and lead records: legitimate operational interests, with data minimisation.
Analytics: separate consent for the Analytics category.
Google/Meta marketing, remarketing and conversions: separate consent for the Marketing category.
Maps and YouTube: consent to the Functional category, enabled voluntarily.
4. Recipients and providers
Vercel may process technical hosting data and stores the CRM through Vercel Blob.
Google may process data for GA4, Google Ads, Google Maps and YouTube only when the relevant category is enabled.
Meta may process data for Meta Pixel only after marketing consent.
WhatsApp opens at the user’s request to confirm the enquiry. The message content reaches WhatsApp/Meta when the user continues in the app.
Data processing agreements, transfer safeguards and exact processing locations: CONTRACTUAL VERIFICATION REQUIRED.
5. Data retention
Cookie preferences are retained for up to 12 months or until the policy or configuration changes.
Leads, CRM notes and CRM events: INFORMATION REQUIRED FROM THE OWNER about the internal retention period and deletion procedure.
Analytics and marketing cookies that the website can technically control are deleted when consent is withdrawn, within browser and domain limitations.
6. Your data protection rights
You may request access, correction, deletion, restriction, objection, portability where applicable, and withdrawal of consent.
To withdraw cookie consent, use Cookie settings in the footer or the fixed icon in the corner of the page.
You may lodge a complaint with the competent data protection authority in the Republic of Moldova. The authority’s current contact details should be checked when needed.
7. Security
The website uses HTTPS and CRM APIs with no-store responses. Access to the CRM administration area is protected by an administration key configured in the environment.
The implemented code does not send names, phone numbers, email addresses or form messages to Google Analytics, Google Ads or Meta Pixel.
Internal procedures for access, backups, deletion, incidents and staff training: INFORMATION REQUIRED FROM THE OWNER.
8. Cookies and external services
The current list of cookies, categories, providers and withdrawal options is available in the Cookie policy.