Privacy Policy

M Design Truckstyling S.R.L. (MDT)

Last updated: 12 October 2026

This Privacy Policy explains how M Design Truckstyling S.R.L. (“MDT”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal data when individuals visit, register, purchase digital products, or interact with services available through our official website: https://mdesigntruckstyling.com.

Personal data is processed in accordance with the legislation of the Republic of Moldova, including Law No. 195/2024 on Personal Data Protection, and Regulation (EU) 2016/679 (GDPR) and other applicable data protection laws where relevant.

This Privacy Policy applies to website visitors, registered customers, purchasers, newsletter subscribers, support requesters, and individuals submitting copyright infringement reports.

1. Data Controller

The data controller responsible for determining the purposes and means of personal data processing is:

M Design Truckstyling S.R.L.

Email: store@mdesigntruckstyling.com

Website: Official MDT Website

Contact Form: Contact MDT

Privacy-related inquiries and requests to exercise data protection rights may be submitted through the above contact channels.

2. Personal Data We Collect

Depending on how individuals interact with our website and services, MDT may process the following categories of personal data.

2.1 Identification & Contact Data

First and last name.
Email address.
Billing name and address, where provided or required.
Country and other billing details.
Information voluntarily provided through contact forms or support requests.

2.2 Account & Authentication Data

Registered account email address and associated account identifiers.
Password authentication data stored in securely hashed form.
Account creation and access information.
Account status and relevant permissions.
Login attempts and security-related account events.
Records of security restrictions and account reviews, where applicable.

MDT does not need access to customers’ plaintext account passwords to manage their purchases.

2.3 Orders, Payments & Digital Downloads

Order numbers and purchase history.
Purchased products and corresponding product identifiers.
Transaction dates, amounts, currency, and payment status.
Payment method and payment provider references.
Payment-related identifiers or payer information received from an authorized payment provider.
Refund, dispute, and chargeback records.
Download availability, access, and relevant delivery records.
Records of applicable contractual acknowledgements or permissions collected during checkout.

Payment providers may process additional financial information directly.

MDT does not intentionally collect or store complete payment card numbers or card security codes in its website database.

2.4 Technical & Security Data

IP addresses.
Browser and device information.
Operating system and user-agent information.
Website access and technical logs.
Session identifiers and security cookies.
Failed login attempts.
Relevant activity associated with website security, fraud prevention, and unauthorized download investigations.

2.5 Communications & Support Data

Messages submitted through website contact forms.
Customer support correspondence.
Information submitted through technical support tickets.
Relevant screenshots, configuration details, game logs, or attachments voluntarily provided.
Correspondence concerning purchases, refunds, payment disputes, and account reviews.

2.6 Newsletter & Marketing Data

Email address and subscriber information.
Subscription and consent status.
Subscription confirmation records.
Unsubscription preferences.
Email delivery and interaction information made available by the relevant communication service.

2.7 Copyright Infringement Reports

When a copyright infringement report is submitted, MDT may process:

Name and organization.
Email address.
Relationship to the copyright owner.
Description of the alleged infringement.
References and URLs of the disputed materials.
Submitted declarations and electronic signature.
Relevant correspondence and supporting evidence.

These records are used to assess, respond to, and document copyright-related complaints.

3. Sources of Personal Data

MDT obtains personal data primarily from individuals who register, make purchases, contact us, subscribe to communications, or connect supported third-party accounts.

Where relevant, data may also be received from:

Authorized payment providers, including information associated with completed or disputed transactions.
Discord, where a user authorizes the applicable account integration.
Previously supported sales platforms, where order records have been lawfully migrated for customer purchase recognition and support.
Individuals submitting copyright infringement complaints, fraud reports, or other relevant communications.
Publicly accessible information or relevant evidence associated with suspected unauthorized distribution, where collecting and reviewing such information is lawful and necessary.

Where personal data is obtained from sources other than the individual concerned, MDT will provide additional information or notices where required by applicable law.

4. Purposes & Legal Bases of Processing

MDT processes personal data only where an appropriate legal basis applies.

4.1 Performance of a Contract

Personal data may be processed to:

Register and maintain customer accounts.
Process and fulfill orders.
Supply purchased digital products.
Maintain appropriate download access.
Verify purchase eligibility.
Provide purchase-related updates and customer assistance.
Handle contractual requests and product conformity complaints.

4.2 Compliance With Legal Obligations

Personal data may be processed to:

Maintain legally required accounting, tax, and transaction records.
Comply with applicable consumer protection requirements.
Respond to legally binding requests from competent authorities.
Fulfill mandatory data protection and recordkeeping obligations.

4.3 Legitimate Interests

Where permitted by applicable law and subject to the relevant assessment of individuals’ rights, MDT may process personal data to:

Protect customer accounts and website infrastructure.
Prevent fraud, unauthorized account access, and payment misuse.
Detect and investigate suspected unauthorized distribution of digital products.
Protect intellectual property and enforce lawful license conditions.
Investigate disputes, abuse reports, and suspected contractual violations.
Establish, exercise, or defend legal claims.
Maintain the security and reliability of website services.

Such processing must be relevant, necessary, and proportionate to the purpose pursued.

4.4 Consent

Where consent is the applicable legal basis, MDT may process personal data for purposes such as:

Newsletter subscriptions and marketing communications.
Optional tracking technologies requiring consent.
Other optional activities expressly presented on a consent basis.

Consent may be withdrawn in accordance with applicable law.

Withdrawal does not affect processing that was lawful before the withdrawal or processing justified by another applicable legal basis.

5. Account Security, Fraud Prevention & Anti-Abuse Measures

MDT uses technical and administrative measures to protect digital products, prevent fraudulent activity, and investigate credible indications of unauthorized distribution.

Depending on the circumstances, relevant information may include:

Registered account and order information.
Payment identifiers and payer email addresses.
IP addresses and security logs.
Login and download records.
Relevant Discord verification information.
Documented evidence associated with suspected unauthorized sharing or misuse.

Such information may be used to identify suspicious activity, verify purchases, investigate suspected license violations, and determine whether appropriate security measures are necessary.

MDT may apply automated security checks, including measures related to repeated failed login attempts, account status, or suspicious purchasing activity.

These measures may temporarily restrict login, account functions, or checkout access.

Restrictions affecting customers will be handled in accordance with applicable contractual conditions and data protection requirements.

Individuals affected by account restrictions may contact MDT to request clarification and review.

Where a decision is based solely on automated processing and produces legal or similarly significant effects, MDT will apply the safeguards required by applicable law.

MDT does not use information about unrelated third-party communities as an automatic substitute for evidence of unauthorized redistribution by an individual customer.

Security and investigation records are subject to applicable data minimization, access control, confidentiality, and retention requirements.

6. Third-Party Services: Discord

6.1 Discord Integration Data

MDT offers an optional integration allowing users to connect their website account with Discord for identification, account verification, and community-related services.

Where authorized and technically available, MDT may retrieve and process limited Discord account information, including:

Discord user ID.
Username.
Server nickname.
Relevant membership and role information associated with the official MDT Discord server.

6.2 Purposes of Discord Integration

This information may be used for:

Linking the MDT website account to a Discord identity.
Verifying customer status.
Synchronizing eligible community roles.
Determining access to relevant support channels.
Managing customer-related community services.
Investigating legitimate account security concerns.

Discord integration is optional and is not required for purchasing digital products through the MDT website.

6.3 Disconnecting Discord

Users may disconnect their Discord account through the available website account features or request assistance through MDT’s official contact channels.

Disconnecting the integration stops the related ongoing account synchronization, subject to technical completion and any continuing processing required by law or justified by another lawful basis.

Certain records may remain where necessary for legitimate security, accounting, contractual, or legal purposes.

Discord is an independent third-party service and processes personal data under its own privacy practices.

Users may consult the Discord Privacy Policy.

7. Payment Processing

MDT uses authorized third-party payment providers to process electronic payments.

The payment methods available to customers are displayed during checkout.

PayPal & Card Payments

When customers pay through PayPal or a supported card payment service, the payment provider may receive information necessary to process the transaction, such as:

Customer name and contact information.
Billing information.
Order amount and currency.
Transaction and payment identifiers.
Other information required for payment authorization, fraud prevention, or regulatory compliance.

MDT may receive transaction confirmations, payment references, payer information, and information relating to refunds or disputes.

MDT does not independently process complete card numbers or card security codes through its ordinary website order records.

Payment providers may act as independent data controllers for their own payment processing, fraud prevention, and legal compliance activities.

In particular, PayPal may process transaction-related information as an independent data controller under its applicable privacy statement.

Customers should consult the privacy information provided by their selected payment provider.

8. Email Communications & Marketing

MDT uses professional email and customer communication services, including Google Workspace, FluentCRM, and Mailgun, according to their configured purposes.

Transactional Communications

These may include:

Order confirmations and receipts.
Password reset messages.
Account and security notifications.
Purchase and download information.
Product-related communications.
Replies to customer support or contractual inquiries.

Such communications may be necessary for fulfilling purchases, managing accounts, or meeting legal obligations and do not automatically constitute marketing communications.

Marketing Communications

MDT sends promotional newsletters and marketing communications to recipients who have provided the necessary permission under applicable law.

Newsletter subscriptions may be confirmed through a double opt-in process.

Marketing preferences and subscription records are managed through MDT’s customer communication systems.

Recipients may unsubscribe at any time using the unsubscribe link included in marketing emails or by contacting MDT.

Unsubscribing from marketing communications does not prevent MDT from sending necessary order confirmations, security notices, or other legally or contractually required messages.

MDT does not use purchased third-party mailing lists for its marketing campaigns.

9. Sharing of Personal Data

MDT may disclose personal data to selected service providers or other recipients where necessary and legally justified.

Depending on the service, these may include:

Website hosting and infrastructure providers.
Cloud storage and backup service providers.
Payment providers and relevant financial institutions.
Email delivery and communication providers.
Technical security and maintenance providers.
Customer support and authorized website administration personnel.
Accountants, legal advisers, and professional service providers.
Competent public authorities where disclosure is legally required.

The information shared is limited, where reasonably possible, to what is necessary for the relevant purpose.

Service providers acting on MDT’s instructions are subject to appropriate contractual and data protection arrangements where required.

Some third parties, particularly payment providers, may operate as independent data controllers and process information under their own privacy policies.

MDT does not sell customer personal data to advertisers or unrelated data brokers.

10. Data Retention

MDT retains personal data for no longer than necessary for the purposes for which it is processed, subject to applicable contractual requirements, mandatory retention obligations, and legitimate legal interests.

The applicable retention period or the criteria used to determine it depend on the category of data and the reason for processing.

Customer accounts: Account information is generally retained while the customer relationship remains active and for any additional period necessary to administer existing purchases, address legitimate requests, or comply with applicable obligations.

Order, payment, and accounting records: Information is retained for the applicable statutory accounting, tax, recordkeeping, and dispute-related periods.

Download and purchase verification records: Records may be retained while reasonably necessary to verify purchases, maintain contractual access, investigate delivery disputes, and establish or defend relevant legal claims.

Security and anti-abuse records: Records are retained for the period reasonably necessary to investigate, resolve, document, or defend against the relevant security incident or suspected violation, taking into account its seriousness and any applicable legal requirements.

Customer support and copyright complaints: Records are retained as needed to resolve the request and, where justified, for relevant contractual or legal limitation periods.

Marketing subscription records: Subscriber information is generally processed until withdrawal of permission, unsubscription, or another applicable deletion event. Limited suppression or consent records may be retained where necessary to honor preferences or demonstrate compliance.

Technical logs and backups: Retention depends on the applicable security, operational, backup rotation, and legal requirements.

Where data is no longer necessary and there is no lawful reason to retain it, MDT will delete or anonymize it in accordance with the applicable procedures.

A request to delete an account does not automatically require deletion of records that MDT is legally required or otherwise lawfully entitled to retain.

11. International Data Transfers

MDT is established in the Republic of Moldova and uses services that may involve the processing, storage, or transmission of personal data in other countries.

Depending on the services involved, personal data may be transferred or made accessible outside Moldova or the European Economic Area.

Where international data transfers are subject to applicable data protection requirements, MDT will rely on appropriate legal mechanisms and safeguards, which may include adequacy decisions, contractual protections, standard contractual clauses, or other legally permitted transfer mechanisms, as appropriate to the particular transfer.

Information about applicable safeguards may be requested using the contact details in this Privacy Policy.

MDT will assess international transfers in accordance with the data protection requirements applicable to the relevant processing activities.

12. Data Security

MDT implements technical and organizational measures intended to protect personal data against unauthorized access, accidental loss, alteration, misuse, or unlawful disclosure.

Depending on the relevant system, such measures may include:

Access restrictions for authorized personnel.
Account authentication and password protection.
Website and server security controls.
Encrypted communications where supported.
Appropriate software maintenance and security updates.
Monitoring of suspicious access attempts.
Backups and recovery procedures.
Administrative controls for sensitive customer information.

No method of electronic storage or internet transmission can guarantee absolute security.

Where a personal data breach occurs, MDT will investigate the incident and make notifications where required by applicable law.

13. Your Data Protection Rights

Depending on the applicable data protection legislation and the circumstances of the processing, individuals may have the right to:

Request access to their personal data.
Request correction of inaccurate or incomplete data.
Request deletion of personal data where the legal conditions are met.
Request restriction of processing.
Object to certain processing activities, including direct marketing.
Request portability of eligible personal data.
Withdraw consent where processing is based on consent.
Exercise applicable rights relating to automated individual decision-making.
Submit a complaint to a competent data protection supervisory authority.

Rights may be subject to lawful limitations, including situations involving mandatory accounting records, the rights of other individuals, or the establishment, exercise, or defense of legal claims.

Requests can be sent to:

store@mdesigntruckstyling.com

MDT may request reasonable additional information when necessary to verify the identity of the requester.

Requests will be handled within the time limits and procedures required by applicable law.

Data Protection Supervisory Authority – Republic of Moldova

Centrul Național pentru Protecția Datelor cu Caracter Personal (CNPDCP)

Official Website: National Centre for Personal Data Protection

Individuals may also have the right to lodge a complaint with a competent European or other national data protection authority where the relevant law applies.

14. Cookies & Similar Technologies

MDT uses cookies and similar technologies to support website functions such as account authentication, shopping cart operation, checkout processes, security, and user preferences.

Depending on the services enabled, additional technologies may be used for optional functionality or statistics.

Where consent is required for a particular cookie or tracking technology, it must be obtained in accordance with applicable law.

Information about cookies, their purposes, relevant providers, and available preference controls is provided in our separate:

Cookie Policy

15. External Websites & Third-Party Services

The MDT website may contain links to independent third-party websites or services.

Such services may include payment providers, Discord, external software developers, and other independently operated platforms.

Third-party services are responsible for their own data processing practices, subject to their applicable legal obligations.

Users should review the relevant privacy information before submitting personal data directly to an external service.

16. Children & Age Restrictions

MDT digital product purchases are intended for individuals aged 18 or older, as established in the MDT Terms & Conditions.

MDT does not intentionally offer purchasing accounts to children under the applicable minimum age.

If MDT becomes aware that personal data has been collected from a child in circumstances that are not legally permitted, it will take appropriate steps in accordance with applicable law.

17. Changes to This Privacy Policy

MDT may update this Privacy Policy to reflect changes in legislation, technical systems, service providers, website operations, or personal data processing activities.

The latest version will be published on this page with an updated revision date.

Where required by law, individuals will receive additional notice of material changes affecting the processing of their personal data.

18. Contact

For questions regarding this Privacy Policy, the processing of personal data, or the exercise of data protection rights, please contact:

M Design Truckstyling S.R.L.

Email: store@mdesigntruckstyling.com

Website: Official MDT Website

Contact Form: Contact MDT

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern the use of our website and services. For more information about the use of cookies and similar technologies, please refer to our Cookie Policy.