What we collect, why, and what you can do about it.

Who is responsible

This website is operated by AndAnd Operations OÜ (Icon.Partners), Narva mnt 7-634, Tallinn 10117, Estonia, registry code 16445425 (“Icon”, “we”). Icon is the controller of personal data collected through the site — contact-form submissions, call bookings, analytics and, with your consent, advertising cookies. Icon is established in the European Union and the GDPR applies to it directly.

Once you engage Icon.Partners Contract Desk, personal data in your matter is handled by Icon.Partners under your service agreement and the DPA in it. That processing is described in your service agreement and on the Security & data page, not here.

What we collect

What you send us. Name, email, company, what you need and your message when you use the contact form or email us; the names of parties you mention so that a conflicts check can be run before any legal work starts. Call bookings. Handled by Calendly under its own privacy notice; we receive your name, email and the slot. Analytics. Plausible Analytics counts page views without cookies and without identifying you; IP addresses are not stored. Advertising cookies. Only if you accept them: tags from Google, Meta and LinkedIn that measure our campaigns and may show you our ads elsewhere (see the Cookie policy). Technical logs. Cloudflare keeps short-term security logs (IP address, request) to run and protect the site.

Why, and on what basis

To answer your enquiry and run a conflicts check — steps at your request before a contract (GDPR Art. 6(1)(b)) and our legitimate interest in operating the desk (Art. 6(1)(f)). To keep the site secure and understand how it is used — legitimate interest. To measure and target advertising — your consent (Art. 6(1)(a)), which you can withdraw at any time from the cookie preferences. We do not sell personal data and we do not use it to make automated decisions about you.

Who receives it

Service providers acting on our instructions: Cloudflare (hosting, contact-form function), Google Workspace (email and document storage), Slack (client channels), Calendly (call booking), Plausible (cookieless analytics). Advertising platforms only where you have consented to their cookies. Authorities where the law requires. Nobody else.

Where it goes

We work from the European Union, and several providers process data outside the EEA. Transfers from the EEA or UK rely on the EU Standard Contractual Clauses (and the UK Addendum) or on the provider’s participation in the EU–US Data Privacy Framework.

How long we keep it

Enquiries that do not become matters: 24 months from last contact, then deleted. Conflicts-check records: as long as the professional rules binding our lawyers require. Analytics: aggregated only, no personal data retained. Advertising cookies: per the Cookie policy. Client matters: as set out in your service agreement.

Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), the right not to be subject to solely automated decision-making (Art. 22), and the right to withdraw consent at any time. Advertising cookies are set on consent only; you withdraw it by choosing Necessary only in the cookie preferences, and we honour the Global Privacy Control signal. The controller is AndAnd Operations OÜ (Icon.Partners), Narva mnt 7-634, Tallinn 10117, Estonia, reg. no. 16445425. You may lodge a complaint with our supervisory authority, the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee), or with the supervisory authority of your own EU member state or your place of work.

To exercise any right, write to office@icon.partners. We answer within one month, extendable by two further months for complex requests, and may ask you to confirm your identity.

Children, changes, contact

This site is for businesses and is not directed at anyone under 18. We update this policy when our practices change and show the date below. Questions: office@icon.partners, or by post to the Icon address above.