ICSP OÜ · Registry code 16454909 · Estonia
01 Data controller and contact
ICSP OÜ, registry code 16454909, at Treiali tee 2-3, Peetri alevik, 75312 Rae vald, Harju maakond, Estonia, operates MSB Desk and is the controller of personal data collected through this website.
Privacy enquiries can be sent to info@msbdesk.com.
02 Information we collect
We collect the contact details, company information, selected services, project-readiness answers, chat questions and context, consent record, referral URL and campaign parameters that you submit. If you subscribe to MSB Desk updates, we also store your email address, subscription status, consent time and campaign source. If you use the secure document-review portal, we also process your login email, secure session records, the files you upload, project status, payment reference, private project messages, review findings and reviewer notes. We process limited security and request information needed to operate and protect the website.
03 How and why we use information
We use information to provide the website assistant, calculate and send an indicative proposal, deliver a requested document-readiness review, identify documentary gaps and inconsistencies, send confirmed regulatory and service updates, respond to you, manage a prospective or active professional relationship, prevent misuse and comply with legal obligations.
Depending on the context, our legal bases are your consent, steps requested before entering a contract, contract performance, legal obligations and legitimate interests in operating a secure professional service.
04 Service providers and transfers
Information may be processed by vetted website-hosting, private file-storage, document-processing, database, email-delivery, communications and professional-service providers acting under appropriate terms. It may be disclosed to advisers or authorities where legally required.
Where information is transferred outside the European Economic Area, we use an applicable legal transfer mechanism.
05 Retention and security
Prospective-client lead and assessment information is normally retained for up to 24 months after the last meaningful interaction, unless a shorter period is appropriate or law, an active engagement or a dispute requires longer retention.
Newsletter subscription records are retained while your subscription is active. If you unsubscribe, we retain a limited suppression record so that we can continue to respect your choice.
Portal documents, private project messages and review reports are retained only for as long as needed to deliver and document the requested service. A signed-in client can delete an individual file or the complete portal project, subject to any retention required by law, an active engagement or a dispute.
Portal access links are single-use and expire after 15 minutes. Portal sessions expire after seven days. We store cryptographic hashes rather than the access links and session tokens themselves, and apply proportionate technical and organisational safeguards designed to protect the information we process.
06 Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent. Contact info@msbdesk.com. You may also complain to the competent privacy authority.
07 Sensitive documents
Do not submit passports, identity-document numbers, criminal-record certificates, dates of birth, private source-of-funds documents, banking credentials, transaction data or authentication information through the public assessment or website chat. Where MSB Desk requests supporting documents for a contracted review, use only the signed-in secure portal and upload only what is necessary for the agreed scope.
09 Policy updates
We may update this policy as our services, processors and legal obligations develop. Any material changes will be reflected in this policy.