Legal
Last updated: 5 September 2026
NestEgg OÜ, trading as ICOS, controls personal data collected through this public website, account sign-up, customer enquiries, product accounts and billing.
Where an organisation uses ICOS Due Diligence to manage counterparty due diligence, that organisation will normally control the case data and NestEgg OÜ will process it on the organisation’s instructions under a separate data processing agreement.
Depending on how you use the website or the product, we may collect:
We use your email address with your consent to send material product updates. You can withdraw consent at any time by emailing support@icosstudio.com.
We use enquiry and product account data to respond, provide the service, secure accounts and investigate faults. We rely on steps requested before a contract and our legitimate interests in operating and protecting the service.
We use billing and transaction records to perform customer contracts, manage payments and meet tax, accounting, fraud-prevention and other legal obligations.
Mollie hosts the payment pages and processes card, bank-login, direct-debit and bank-transfer information under its own privacy and security obligations. ICOS receives transaction identifiers, amounts and status information needed to reconcile a payment, but does not receive or store full card details or online-banking credentials.
We do not sell personal data. The website and product use Supabase for database and application infrastructure, Cloudflare for site security and anti-abuse verification, Netlify for website hosting, and Mollie for payment processing. These providers process limited data on our instructions or under their applicable service terms.
Google Fonts files are requested from Google when the website loads. We do not use analytics, advertising pixels or marketing cookies on this website.
Some providers may process data outside the European Economic Area. Where required, we rely on a recognised transfer safeguard, such as an adequacy decision or the European Commission’s Standard Contractual Clauses.
We keep account data while your account remains active and for a limited period afterwards. We keep correspondence only as long as needed to answer the enquiry and maintain reasonable business records.
Account, activity and payment records are kept while the account remains active and for a limited period afterwards for security, fault investigation and audit. Invoice and transaction records are kept for the period required by tax and accounting law. Customer due diligence data follows the customer contract, data processing agreement and applicable legal duties.
We use only essential cookies and similar browser storage. These support authorised sessions, site security and the cookie-notice preference. We do not use analytics or advertising cookies.
Subject to applicable data protection law, you may:
Contact support@icosstudio.com with a privacy request. We may update this policy as the service changes. The date at the top shows the latest revision.
NestEgg OÜ, trading as ICOS. Registered in Estonia under number 14509210. VAT number EE102647646.
Registered address: Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 10151, Estonia.
Contact: support@icosstudio.com · +356 9999 4554