Legal information
Privacy policy
In force from 13 October 2026
Contents
1. Who we are
The controller is SERVICII AMPLE S.R.L., IDNO 1016605002030, registered office at str. Voluntarilor 13, s. Străisteni, mun. Chișinău, Republic of Moldova (“we”). We build and run TDACRM: the TDACRM websites, including tdacrm.uk, and the app.tdacrm.eu application. All company details are in the Legal notice.
For any question about personal data you can write to us at [email protected].
2. Scope
This policy covers the data we process when you:
- visit the TDACRM websites;
- write to us through the contact form or by email;
- create a TDACRM account, use the application or are invited by your team;
- take out a subscription and receive invoices.
We process data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Regulation (EU) 2016/679 (EU GDPR) where it applies to you, and Moldovan Law No. 195/2024 on personal data protection. References to “GDPR” articles below mean the UK GDPR and the EU GDPR, which use the same numbering.
3. Our customers’ data in the CRM
Companies that use TDACRM keep their own clients’ data in it: leads from Facebook forms and websites, contacts, call history, WhatsApp messages and emails. For this data the customer company is the controller and we are its processor: we process it only to provide the service, on the customer’s instructions, as set out in the Data processing agreement.
If you filled in a form for a company that uses TDACRM and want to know what data it holds about you, or have it deleted, please contact that company directly. If you write to us, we pass your request on and help the company answer you.
4. What data we process, why and on what legal basis
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Visiting the site | IP address, browser type, page visited, date and time | running and securing the site, protecting it from attacks | legitimate interests (Art. 6(1)(f) GDPR) |
| Contact form | name, company, phone, email, message, the page and UTM parameters you came from | replying to you and presenting the service | steps taken at your request before a contract (point (b)); legitimate interests (point (f)) |
| TDACRM account | name, email, phone, company, role, settings, sign-in data (encrypted password, passkey) | creating the account and providing the service | performance of the contract (point (b)) |
| Subscription and billing | company name and details, contact person, plan, payments, invoices | invoicing and accounting | performance of the contract (point (b)); legal obligation (point (c)) |
| Security logs | sign-ins, IP, device, important actions in the account | protecting the account, investigating incidents | legitimate interests (point (f)) |
| Service messages | email, name | necessary messages: invitations, sign-in codes, invoices, important changes | performance of the contract (point (b)) |
| Statistics and marketing cookies | cookie identifiers, interactions with the site | measuring visits and ads | consent (point (a)) |
Your card details never reach us: card payments go through the payment service provider, and we only receive the payment confirmation and the last digits of the card.
We don’t make decisions based solely on automated processing that have legal effects on you.
5. Cookies
The site uses only strictly necessary cookies and local storage. The details are in the Cookie policy.
6. Who we share data with
We don’t sell personal data. We share it only with:
- providers who help us run the service (hosting and storage, content delivery and protection, email delivery, payments). They act on our instructions and are bound by contract to keep the data confidential and secure. For example, the websites are hosted by Cloudflare, and contact form messages reach us through Resend;
- the services you or your company connect to TDACRM (Facebook, WhatsApp, telephony, email), as far as the integration needs;
- authorities, when the law requires it.
7. Transfers outside the UK and the European Union
We are based in the Republic of Moldova, outside the United Kingdom and the European Union; Moldova applies a data protection law aligned with the GDPR (Law No. 195/2024). Some providers also process data in other countries, for example in the United States (Cloudflare, Resend). We transfer data only to countries with an adequate level of protection or on the basis of appropriate safeguards, such as the UK International Data Transfer Addendum to the European Commission’s standard contractual clauses.
8. How long we keep data
| Data | Period |
|---|---|
| Contact form messages | 12 months from the last contact, if you don’t become a customer |
| Account and CRM data | as long as the account is active; after closure, 30 days for export, then deleted |
| Backups | overwritten automatically within 30 days |
| Invoices and accounting records | the periods required by accounting and tax law |
| Security logs | up to 12 months |
| Your cookie choice | 6 months, then we ask again |
9. Your rights
You have the right to:
- know whether we process data about you and get a copy (Art. 15 GDPR);
- have inaccurate data corrected (Art. 16);
- have your data erased (Art. 17);
- have processing restricted (Art. 18);
- receive your data in a structured format and pass it to another controller (portability, Art. 20);
- object to processing based on legitimate interests and to direct marketing (Art. 21);
- withdraw your consent at any time, without affecting processing carried out before the withdrawal.
Write to us at [email protected]. We reply within one month; for complex requests the period can be extended by two more months, and we’ll let you know. To protect your data we may ask you to confirm your identity.
If you think your rights are not being respected, you can complain to the Information Commissioner’s Office (ico.org.uk), or to the National Centre for Personal Data Protection of the Republic of Moldova (datepersonale.md). We’d appreciate it if you wrote to us first, so we can try to sort it out together.
10. Deleting your data
- TDACRM account. The account owner can ask for the account to be closed and the data deleted by writing to [email protected] from the account’s email address. We delete the data within 30 days and confirm by email.
- Facebook integration. You can disconnect your Facebook page from TDACRM at any time (Settings → Integrations) or from your Facebook account settings, under “Business integrations”. After disconnecting we no longer receive new leads; leads already received stay in the company’s account until it deletes them or closes the account.
- You filled in a form for a company that uses TDACRM. Ask that company directly to delete your data. If you write to us, we pass the request on.
11. Security
We take appropriate technical and organisational measures: encrypted connections (HTTPS/TLS), access to data only for those who need it, sign-in with passkeys and one-time codes, backups and access logs. If a data breach could put your rights at risk, we inform you and notify the competent authority, as the law requires.
12. Children
The service is intended for businesses and adults. We don’t knowingly collect data from children.
13. Changes
We may update this policy. The date of the version in force is shown at the top. We tell customers about important changes by email or in the application before they take effect.