Privacy Policy

ProfStack.co ("ProfStack", "we", "us") is operated by an individual, [OPERATOR FULL NAME], trading as ProfStack. ProfStack is not operated through a limited company. The intended country of establishment is Ireland. Address: [OPERATOR ADDRESS].

Subject to confirmation of the actual operating arrangements, the individual operator named above is the data controller for personal information collected through this website. No Data Protection Officer has been appointed. Privacy contact: [PRIVACY CONTACT EMAIL]. You can also use our contact form.

We collect only what you choose to send us through our forms:

• Newsletter sign-up: email address, subscription status, whether you gave consent, the date and time of consent, the exact consent wording and version you accepted, and where on the site you signed up.
• Register interest: email address and, if you choose to provide them, your name, area of interest and message, plus the same consent record.
• Contact enquiries: name, email address, subject, message, the date sent and its handling status.

Our forms do not store your IP address. The Stack Builder works in your browser and does not save your answers. Our hosting and security providers process technical information such as IP address, browser type and request details to deliver and protect the site (see section 6 and our Cookie Policy).

• Sending newsletters and interest updates — your consent (GDPR Art. 6(1)(a)), given by ticking the consent box. You can withdraw it at any time, including through the unsubscribe link in any newsletter email.
• Keeping a record of your consent — our legal obligation to demonstrate consent and our legitimate interest in proving it (Art. 6(1)(c) and (f)).
• Answering contact enquiries — our legitimate interest in responding to messages you send, or steps you ask us to take before entering a contract (Art. 6(1)(f) or (b)). Contacting us never signs you up to marketing.
• Operating and securing the website, including spam and bot protection — our legitimate interest in a safe, working website (Art. 6(1)(f)).
• Improving the platform using aggregated, non-identifying usage information — our legitimate interest (Art. 6(1)(f)).

Form submissions are stored in a private database provided through Lovable Cloud. The database tables cannot be read, changed or deleted through the public website; submissions are written only by our server, and only authorised ProfStack administrators can view them.

We validate submissions and use spam safeguards. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Our service providers may process data outside the European Economic Area. Database hosting region: [DATABASE REGION — TO BE CONFIRMED]. Where data is transferred outside the EEA, we rely on safeguards such as an adequacy decision or the European Commission's Standard Contractual Clauses provided in our providers' data processing terms.

• Lovable (Lovable Cloud) — website hosting, server functions and database, together with its infrastructure sub-processors.
• Cloudflare — content delivery and security for the website, which processes technical request data.

Proposed retention periods (automatic deletion is not yet in place and these periods are currently applied manually):

• Newsletter and interest records: while you remain subscribed. After you unsubscribe, we keep a minimal consent record for up to [PERIOD, e.g. 3 years] to demonstrate past consent, then delete it.
• Contact enquiries: up to [PERIOD, e.g. 24 months] after the enquiry is resolved.
• Hosting and security logs: as set by those providers.

Under the GDPR you have the right to:

• access a copy of your information;
• have inaccurate information corrected;
• have your information erased;
• restrict how we use it;
• receive information you gave us in a portable format, where processing is based on consent or contract;
• object to processing based on our legitimate interests;
• withdraw consent at any time, without affecting earlier lawful processing.

To exercise any right, email [PRIVACY CONTACT EMAIL] or use our contact form. We may need to confirm your identity and will respond within one month. You may also complain to your local data protection authority or, for Ireland, the Data Protection Commission (dataprotection.ie) [LEAD AUTHORITY TO BE CONFIRMED ON ESTABLISHMENT].

ProfStack is intended for business owners and professionals. It is not aimed at children, and we do not knowingly collect information from anyone under 16.

Our site links to third-party tools and services. Their own privacy policies apply when you visit them, and we are not responsible for how they handle your information.

We will update this page when our practices change and revise the date above. Significant changes affecting subscribers will be communicated where appropriate.