Privacy & Statutory Data Policy

GDPR Article 13 & 14

Quarkline Technologies • Effective Date: September 2026

1. Data Controller Identification

Spark Office is developed and operated by Quarkline Technologies, registered in Ireland. This policy describes how we collect, process, and protect your personal information as a contractor subscriber, as well as the client property details (Eircodes, MPRNs, inspection test records) you manage on the platform.

For data protection inquiries, contact our Data Protection Officer at: privacy@sparkoffice.ie.

2. Lawful Basis for Processing (GDPR Art. 6)

We process data under the following lawful bases set out in GDPR Article 6(1):

Contractual Necessity (Article 6(1)(b)): Processing contractor accounts, billing details, team invitations, and providing software services.
Legal Obligation (Article 6(1)(c)): Processing electrical installation test records, property Eircodes, MPRN metering numbers, and safety statements pursuant to statutory regulations:
- Electricity Regulation Act 1999 (as amended) and S.I. 282/2013
- Commission for Regulation of Utilities (CRU) Scheme Criteria (CER/16/001)
- National Rules for Electrical Installations (I.S. 10101:2020)
- Taxes Consolidation Act 1997 (TCA 1997) and VATCA 2010

3. Statutory Retention Schedules

Under Irish statutory mandates, data cannot be erased prior to the expiration of mandatory regulatory audit schedules:

Safe Electric / CRU Compliance:5 Years Minimum Retention

All completion certificates (Cert 1, 2, 3), PIRs, and Test Record Sheets.

Revenue Commissioners Mandate:6 Tax Years (TCA 1997 s886)

All invoices, eRCT vouchers, merchant dockets, and mileage logs.

4. GDPR Article 17 (Right to Erasure) & PII Redaction

When a customer exercises their Right to Erasure, Spark Office executes automated PII anonymization (redacting name, email, phone number to [GDPR REDACTED]) while preserving the non-identifiable installation test values, loop impedance results, and financial balances required by law for regulatory audits.

5. Sub-Processors & Data Residency

All server-side data is hosted in EU-West (Ireland) data centers. We engage the following vetted sub-processors:

Stripe Payments Europe, Ltd (Dublin, Ireland): Subscription billing and card processing.
Supabase Inc (EU Region / AWS Frankfurt & Dublin): PostgreSQL database infrastructure.
OpenAI Ireland Ltd: Audio voice-to-quote transcription (processed ephemerally, not used for model training).

6. Supervisory Authority

You have the right to lodge a complaint with the Data Protection Commission (DPC) of Ireland at dataprotection.ie or by writing to 21 Fitzwilliam Square South, Dublin 2, D02 RD28.