Privacy Policy

This policy explains how DataDock (“DataDock”, “we”, “us”) handles personal data on this website and in the DataDock app. Questions or requests: hello@datadockhq.com.

In the app, the business that uses DataDock decides what it records about its staff and customers; we store and process those records on the business’s behalf. On this website, and for the accounts we create, we decide how data is used.

When you book a demo or request pricing: your name, business name, type of business, country, number of locations and cashiers, WhatsApp number and, if you give it, your email.

How you found us: if you arrive from an ad or a tagged link, the ad click ID and campaign tags in the link, kept in your browser for 90 days and sent with your form.

If you accept cookies: how you use the site, measured by Google Analytics and Google Ads. If you decline, these are not used.

Account details: names, email addresses and usernames for business logins and the people a business adds.

Staff details: each person’s name, role, locations and PIN. PINs are stored scrambled (hashed), so we can’t read them.

Business records: sales, cash approvals, stock, expenses, salaries and similar records, with the name of the person who recorded each one and when. A cashier may add a customer’s or guest’s name to a sale if the business chooses to.

Device and usage details: which devices are connected to the account, sign-ins, and which parts of the app are used, so we can keep accounts secure and improve DataDock.

Support messages you send us from the app.

To run DataDock for your business, keep it secure and give you support; to reply to demo and pricing requests; to improve DataDock; and, with your consent, to measure our website and ads.

We don’t sell personal data, and we don’t use business records for advertising.

Only with the service providers that help us run DataDock, under agreements that protect your data: Supabase (database and sign-in), Cloudflare (hosting this website and the app), Google Workspace (our email) and, if you accept cookies, Google Analytics and Google Ads.

We may also share data when the law requires it, or to protect people or the service from fraud or harm.

Our providers store data in data centres that may be outside your country. We choose providers that protect data with encryption and access controls. The DataDock app also keeps a working copy of your business’s records on your devices, so selling continues offline.

Business records: for as long as the business has a DataDock account, and for up to 90 days after it closes the account, so it can change its mind or ask for a copy. Then we delete them, unless the law requires us to keep something longer.

Demo and pricing requests: up to 24 months after our last contact with you.

Website measurement: as set in Google Analytics, up to 14 months.

You can ask us for a copy of your personal data, to correct it, to delete it, or to stop using it for a purpose you object to. You can withdraw cookie consent at any time by clearing this site’s data in your browser. If your data is held in a business’s DataDock account (for example as a member of staff), we pass your request to that business, which decides on it with our help.

You may also have the right to complain to the data protection authority in your country.

Data travels over encrypted connections, each business’s data is kept separate from every other business’s, and access inside a business is limited by role. If a breach affects your data, we tell you without delay.

DataDock is for businesses and is not meant for children.

If we change this policy in a way that matters, we tell you on this page and, for app users, in the app. The date at the top shows the latest version.