Legal

Privacy Policy

Last updated: 27 August 2026

1. Who we are

Certus LEI is a brand operated by TwoRocks OÜ, a company registered in Estonia (registry code 16130561, registered address Tartu mnt 67/1-13b, Kesklinna linnaosa, Tallinn, Harju maakond, 10115, Estonia). TwoRocks OÜ is the data controller for personal data collected through certuslei.com.

For any question about this policy or about your personal data, write to info@certuslei.com.

2. What we collect

We collect only what we need, and only in two situations.

When you submit the early access form. Your name, company name, email address, and the entity type you select. These are the fields on the form — we do not collect anything else at this stage, and we do not ask for payment details.

When you browse the site. If, and only if, you accept analytics cookies, Google Analytics records aggregated usage data: pages viewed, approximate location at city level, device and browser type, and how you arrived at the site. If you decline, no analytics cookies are set.

Our hosting provider also processes standard server request data, including IP addresses, as a technical necessity for delivering the site and protecting it from abuse.

3. Why we process it, and on what legal basis

Purpose Legal basis (GDPR Art. 6)
Responding to your early access enquiry and discussing our services with you Steps taken at your request prior to entering a contract, Art. 6(1)(b)
Analytics cookies to understand how the site is used Your consent, Art. 6(1)(a) — withdrawable at any time
Keeping the site available and secure Our legitimate interest in operating the service, Art. 6(1)(f)

4. Cookies

The site sets no cookies until you make a choice in the consent banner. Analytics cookies are loaded in a consent-gated mode: they remain disabled by default and are activated only if you press Accept.

Your choice is stored locally in your browser so we do not ask again on every visit. To change it, clear your browser storage for this site and reload the page — the banner will reappear.

We do not use advertising cookies, retargeting pixels, or cross-site tracking.

5. Who else sees your data

We do not sell personal data, and we do not share it with third parties for their own marketing. We use a small number of service providers who process data on our instructions:

Some of these providers operate outside the European Economic Area. Where that is the case, transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard under Chapter V of the GDPR.

If a specific service is instructed and a partnership with a registration agent or Local Operating Unit is in place, entity data required for an LEI application would be passed to that partner in order to file the application. We will identify that partner to you before any such transfer takes place.

6. How long we keep it

7. Your rights

Under the GDPR you may ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, restrict or object to how we use it, or send it to another provider in a portable format. Where processing rests on consent, you can withdraw that consent at any time without affecting what was lawful beforehand.

Write to info@certuslei.com and we will respond within one month. If you are not satisfied with our response, you may complain to your national data protection authority — in Estonia, the Andmekaitse Inspektsioon.

8. Security

The site is served over HTTPS. Access to form submissions and to our email is restricted to the people who need it. No online service can promise perfect security, but we keep the amount of data we hold deliberately small, which is the most effective protection available to us.

9. Children

This is a business-to-business service. It is not directed at children, and we do not knowingly collect data from anyone under 16.

10. Changes to this policy

If we change how we handle personal data, we will update this page and revise the date at the top. Where a change is significant and we hold your contact details, we will tell you directly.

A note on scope Certus LEI is a registration facilitation service. LEIs are issued by GLEIF-accredited Local Operating Units; Certus prepares, validates, and files applications on behalf of clients. This policy covers the certuslei.com website and our correspondence with you. It does not govern how an issuing LOU handles data once an application is filed with it — that is set out in the issuer's own terms, which we will point you to before filing.