Privacy Policy

01Who we are & how to contact us

Full Stack Energy is a trading name of ResourceKraft Ltd. ("Company", "ResourceKraft", "we", "us"). This notice explains how we process personal data when you visit our websites, contact us by email, join our Microsoft Teams or Zoom meetings (including meetings analysed with AI tools such as Microsoft Copilot), receive our marketing, use our services, or otherwise interact with us.

If you have any questions or wish to exercise your data protection rights, contact privacy@resourcekraft.com.

• Controller: ResourceKraft Ltd., Block 9, LEDP Building, LEDP Campus, Roxboro, Limerick, V94 C66H, Ireland
• Email: privacy@resourcekraft.com
• Supervisory authority: Data Protection Commission (DPC), Ireland. You may lodge a complaint at dataprotection.ie.

02The data we process

• Identity & contact details — name, employer, job title, email, phone, postal address.
• Communications data — emails you send us; chat/messages in meetings; recordings/transcripts; AI-generated meeting summaries, actions and decisions.
• Usage/technical data — IP address, device/browser info, timestamps, pages viewed, basic analytics and security logs.
• Commercial data — enquiries, proposals, orders, contracts, billing and support history.
• Marketing preferences — subscriptions and opt-in/opt-out choices.
• Recruitment data (if you apply) — CV, qualifications, references.

We do not intentionally collect children's data and our services are for business users.

03How we collect data

• Directly from you by email, web forms, events, support tickets, and during online or in-person meetings.
• Automatically via our websites and Microsoft 365 (limited technical/usage data).
• From third parties (partners, referrals, publicly available business sources) where lawful.

04Purposes & lawful bases

We process personal data only where a lawful basis under GDPR applies:

• To respond to enquiries, provide quotations, deliver and support services. Legal basis: performance of a contract or steps prior to contract; legitimate interests (running our business).
• To host and manage online meetings (Teams/Zoom), including optional recording, transcription and AI analysis (e.g. Copilot) to produce minutes, action items and summaries. Legal basis: legitimate interests (effective collaboration, accurate records). Where we record or store transcripts, we clearly notify participants at the start of the meeting; where required, we rely on consent.
• To secure our systems, prevent fraud/abuse, and maintain service integrity. Legal basis: legitimate interests; legal obligation where applicable.
• To send business updates or marketing. Legal basis: consent (where required) or legitimate interests for B2B communications. You can opt out at any time.
• To meet legal and regulatory obligations (e.g. tax, accounting, compliance). Legal basis: legal obligation.
• Recruitment and hiring. Legal basis: steps prior to contract; legitimate interests; consent where appropriate.

We do not sell personal data.

05Meetings, recordings & AI analysis (Teams/Copilot)

What may be processed: participant names, organisation, email, chat content, spoken audio/video, screen content, and derived artefacts (e.g. transcripts, summaries, actions, decisions).

Purpose: process and fulfil your service requests accurately; improve our customer service quality; maintain records for business continuity; resolve any potential disputes or misunderstandings.

Sharing: only authorised personnel involved in processing your requests will access recordings, on a need-to-know basis.

06Cookies & online tracking

We use necessary cookies and limited analytics on our websites to operate and improve the site. For details and choices, see our Cookie Policy.

07Who we share data with

• IT and cloud providers (primarily Microsoft 365 — Teams, SharePoint, OneDrive, Exchange; Zoom where used).
• CRM, email and marketing tools (for B2B communication and list management).
• Professional advisers and auditors (legal, tax, compliance).
• Event, training and survey platforms used for specific engagements.
• Authorities or courts where required by law.

All suppliers act under contract as processors or separate controllers, as applicable.

08International transfers

We primarily use EU/EEA data centres where available. Where data is transferred outside the EEA/UK, we rely on appropriate safeguards (e.g. EU Standard Contractual Clauses and, where applicable, UK IDTA/Addendum) plus supplementary measures.

09Security

We apply appropriate technical and organisational measures to protect personal data (access controls, encryption in transit and at rest where supported by our platforms, role-based access, logging/monitoring, backup and recovery, supplier due diligence, staff training). No system is 100% secure, but we continually review and improve our controls.

10Retention (Microsoft 365 defaults)

We keep personal data only as long as needed for the purposes above, then delete or anonymise it. Unless we've agreed a different project-specific policy, we follow Microsoft 365 defaults in our tenant:

• Emails (Exchange Online) — retained in user mailboxes by default unless the user or a policy deletes/archives them.
• Teams/OneDrive/SharePoint content (including meeting artefacts, transcripts and Copilot outputs) — retained by default in the host workspace unless users or space owners delete them, or retention policies apply.
• Teams meeting recordings — stored in OneDrive/SharePoint with the service's default expiry/retention configured by our tenant (if an expiry is in effect, owners can extend or retain where there is a valid business need).
• Contracts, billing and financial records — retained for the statutory periods required under Irish law (typically 6+ years for core records).

If you need exact retention details for a given project or workspace, email privacy@resourcekraft.com and we will confirm the current default/policy state for that data set.

11Your rights (EEA/UK)

Subject to conditions and exemptions in GDPR, you have the right to:

• Access your personal data and receive a copy
• Rectify inaccurate or incomplete data
• Erase data (right to be forgotten)
• Restrict processing
• Object to processing (including to B2B direct marketing)
• Data portability (where applicable)
• Withdraw consent at any time where processing is based on consent

To exercise any right, contact privacy@resourcekraft.com. We will verify your identity and respond within the statutory timeframe.

12Marketing choices

You can opt out of marketing emails via the unsubscribe link or by emailing privacy@resourcekraft.com. Service/transactional messages may still be sent.

13Third-party links

Our websites and meeting invites may link to third-party sites or services. Those providers operate their own privacy practices. Please review their notices.

14Changes to this notice

We may update this notice from time to time. The "Last updated" date above shows the latest version. Significant changes will be highlighted on our website or notified directly where appropriate.

15How to contact us

• Email: privacy@resourcekraft.com
• Post: ResourceKraft Ltd., Block 9, LEDP Building, LEDP Campus, Roxboro, Limerick, V94 C66H, Ireland