Privacy Policy

Who we are

Yell Chisinau (yell.md) is a business directory for Chișinău. For any question about personal data write to [email protected] or call +373 68 549509, Chișinău, Republic of Moldova.

Operator: Antreprenor Independent Oleg Visan, Chișinău, Republic of Moldova. We process data under Law No. 195/2024 on personal data protection.

What we collect

• Technical data. On every visit the server and Cloudflare record the IP address, browser type, requested page and time. These logs are used for security and diagnostics.
• Account data. If you add or claim a business we keep your name, e-mail address and whatever you enter in the form.
• Reviews and messages. Review text, display name and e-mail; messages sent through the contact form.
• Job applications. See the “Job applications” section.
• Cookies and analytics. See the section below.

Where business data comes from

Business pages are built from public sources: contact details published by the businesses themselves, open registries and Google Maps (including reviews and photos, shown with attribution). We do not publish personal data of employees.

If you own a business and want its page corrected or removed, write to [email protected]. We verify and reply within 30 days.

Job applications

In the “Jobs” section you can send an application directly to the employer that posted the job.

• What data. Name and phone (required), e-mail and message (optional), a CV in PDF up to 5 MB (optional). We do not need sensitive data (health, religion, personal ID number etc.) — please do not include it in your CV or message.
• Purpose and legal basis. The only purpose is to pass your application on to the employer. The legal basis is your consent, given by ticking the box in the form. You can withdraw it at any time; withdrawal does not cancel an application already sent.
• Who receives the data. The company that posted the job, at the e-mail address linked to its page on yell.md. From the moment of receipt the employer processes the data as a separate controller under its own rules; to have your data removed from its hiring process, contact the employer directly. Yell takes no part in the selection and does not see further correspondence.
• How long we keep it. We do not store applications or CVs. The data stays only in the sending queue until it is sent and is then deleted. The CV file is kept in a folder with no public access and deleted right after sending, in any case within 24 hours. Only a technical log without personal data (job, company, date) and an application counter visible to the employer remain.
• Confirmation. If you give your e-mail, we send you a confirmation that the application was sent.
• Protection. The form is protected by Google reCAPTCHA v3, and the content of its fields is not recorded by Yandex Metrica.
• Phone confirmation. For a Moldovan mobile number we send a code by SMS. For this the number is passed to the SMS service sms.md (Republic of Moldova) and used only to send the code. Yell keeps, for no more than 30 days, only an irreversible fingerprint (hash) of the number so the employer does not pay twice for a repeat application, and in your browser a technical cookie yj_pv (30 days) so we do not ask for the code again.

Independent tradespeople

For a tradesperson listing we process the name or nickname, phone number, email (not published), service areas, photos provided and service details. The legal basis is the tradesperson’s consent and performance of the listing arrangement (free listing or Tradesperson plan).

• Phone verification. We send a code by SMS through the provider sms.md. We keep only the verification date and the verified number.
• Identity verification. The tradesperson sends us a short video on Viber or WhatsApp showing an ID document and a code from the account area. Only the Yell team sees the video; we do not publish it, do not copy the document data, and delete it right after checking, within 7 days at the latest. We keep only the fact and date of verification. Messages pass through Viber or WhatsApp under their own rules.
• Listing statistics. We count views and actions on the listing (number clicks, messengers, social links, requests) without data that identifies the visitor.
• Requests to the tradesperson. Data from the request form (name, phone, email, message, area, preferred date) is emailed to the tradesperson; Yell receives a copy for support. Photos attached to a request are kept on the Yell server for 30 days (the tradesperson receives a link) and are then deleted automatically.
• The tradesperson can ask at any time for the listing and data to be deleted by writing to [email protected]; we delete it within 30 days.

Connecting a Google profile

A business can connect its Google Business Profile to its page on Yell so that all of its Google reviews are shown on the page. Connecting is voluntary and free, and sign-in happens through Google. The profile can be connected by the owner or by an agency that manages it on the business’s behalf.

• What we receive. The Google account email and name (for sign-in); the list of business profiles you manage (name and place identifier — only to find the matching page); the reviews of the connected profile: author name and photo, rating, text, date and owner response.
• Why. Only to show the reviews on the business’s page on Yell. We do not change anything in your Google profile, do not use this data for advertising, do not sell or share it with third parties and do not use it to train AI models.
• Retention. We refresh reviews every few days and keep them for no more than 30 days after the last refresh. The access key to the profile is stored encrypted.
• How to disconnect. With the “Disconnect” button on the page, by email to [email protected], or in your Google account settings (myaccount.google.com/permissions). When you disconnect, we delete the loaded reviews and the access key.

Yell’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies and advertising

• Essential. Session, sign-in, language choice and list view mode. The site does not work without them.
• Analytics. Google Analytics 4 and Yandex Metrica — which pages are viewed, where visitors come from, device type. Reports are built on aggregated data. Metrica runs with click map and session recording (Webvisor): it records mouse movement, scrolling and clicks on the page so we can see where the interface gets in the way. Passwords and data in confidential fields are masked by Metrica — they appear as asterisks in the recording.
• How this is loaded. The counters are connected through Google Tag Manager. It sets no cookies of its own — it only starts the services you consented to: before you answer the banner, Yandex Metrica does not run at all, and Google Analytics works without cookies or identifiers (Google Consent Mode).
• Advertising. Google AdSense serves ads and may use cookies for personalisation. You can control this in My Ad Center.
• Form protection. On the “Add your business” and “Contact” pages, and in the job application form (loaded only when you start filling it in), we use Google reCAPTCHA v3: it checks in the background that the form is filled in by a person and not a bot. The service receives the IP address and page-behaviour data and sets the _GRECAPTCHA cookie (6 months). It does not load anywhere else on the site. Details in Google’s privacy policy.

Consent for analytics and advertising cookies is requested on the first visit and can be withdrawn at any time in the banner settings.

Who we share data with

We do not sell personal data. Processing happens through service providers: Google (Analytics, AdSense, Maps, reCAPTCHA), Yandex (Metrica), Cloudflare (delivery and protection), Brevo (sending the site’s e-mails) and our hosting provider. Job applications are passed on to the employer you choose. Data goes to authorities only on a lawful request.

How long we keep it

Server logs — up to 12 months. Accounts and reviews — for as long as the account exists. Contact form messages — up to 24 months. Job applications are not kept: they are deleted after sending, CVs within 24 hours at most.

Your rights

You may request access to your data, correction, deletion or restriction of processing, and you may object to processing. Write to [email protected]. We reply within 30 days.

You also have the right to lodge a complaint with the National Center for Personal Data Protection (datepersonale.md).

Changes

We will update this page when needed; the date of the last change is shown at the top.