Privacy Policy

This Privacy Policy explains how Spark Digital & Analytics Limited ("Spark", "we", "us") collects, uses and protects personal data when you visit spark-hq.com or contact us. We act as the data controller for the personal data described below within the meaning of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Irish Data Protection Act 2018.

1. Who we are

Spark Digital & Analytics Limited
77 Camden Street Lower, Saint Kevin's, Dublin 2, Ireland
Registered in Ireland — Company Number 675436
Contact for privacy matters: info@spark-hq.com

2. What personal data we collect

• Information you submit via our contact form: first name, last name, work email, company, role, the topics you select, and any free-text message or context you provide.
• Information you send by email: the contents of any email you choose to send to us, including your email address and any attachments.
• Technical data: IP address, browser user-agent, request timestamps and similar server log data, collected automatically by our hosting provider for security, abuse-prevention and rate-limiting purposes.

We do not knowingly collect special category personal data and we do not use the website to collect data from children.

3. Purposes and legal bases

• To respond to your enquiry — legal basis: your consent (GDPR Art. 6(1)(a)) given via the consent checkbox on the contact form, and where relevant steps taken at your request prior to entering into a contract(Art. 6(1)(b)).
• To send the transactional emailsthat notify our team of your message — legal basis: legitimate interests (Art. 6(1)(f)) in operating and responding to enquiries about our business.
• To keep the website secure and prevent abuse (rate-limiting, log retention, anti-spam) — legal basis: legitimate interests (Art. 6(1)(f)) in protecting our site and users.
• To comply with legal obligationsthat may apply to us (e.g. responding to lawful requests) — legal basis: legal obligation (Art. 6(1)(c)).

4. Who receives your data

We share personal data only with carefully selected processors who help us run the website and respond to enquiries:

• Hosting and database — our website and database are hosted by Lovable Cloud (which uses Supabase / Cloudflare infrastructure).
• Email delivery — transactional email notifications are sent through our email infrastructure on notify.spark-hq.com.

We do not sell your personal data, and we do not share it with third parties for marketing purposes.

5. International transfers

We seek to keep personal data within the European Economic Area where possible. Where a processor transfers data outside the EEA, that transfer is protected by an adequacy decision of the European Commission or by Standard Contractual Clauses adopted under Art. 46 GDPR, together with any supplementary measures required.

6. How long we keep it

• Contact-form enquiries: up to 24 months from your last interaction, unless a client relationship begins (in which case retention is governed by that engagement).
• Security and server logs: up to 90 days, longer only where required to investigate a specific security incident.
• Email delivery logs and suppression lists: retained as long as necessary to operate the email service reliably and to honour unsubscribe requests.

7. Your rights

Under GDPR you have the right to access your personal data, to ask us to rectify or erase it, to restrict or object to certain processing, to data portability, and (where processing is based on consent) to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, email info@spark-hq.com. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or with the supervisory authority in your country of residence.

8. Cookies and tracking

Our website does not use analytics, advertising or third-party tracking cookies. We use only strictly-necessary storage required for the site to function. See our Cookie Policy for details. If we introduce analytics or marketing technologies in future, we will update this policy and seek your consent where required.

9. Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

10. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction, including encrypted transport (TLS), access controls and least-privilege service credentials.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page indicates when it was most recently revised. Material changes will be highlighted on the site where appropriate.

12. Contact

Questions about this policy or how we handle personal data: info@spark-hq.com.