Privacy Policy

1. Scope of this policy

This policy applies to visitors to dockt.com, people who contact Dockt, and people who interact with Dockt marketing campaigns or sales communications. It also provides a high-level summary of how Dockt treats customer and worker data in the product.

When Dockt provides the product to a customer, the customer generally acts as the controller of worker, contractor, and compliance data submitted to Dockt. Dockt processes that data under the applicable customer agreement and data processing agreement. This website policy does not replace those contractual terms.

2. Personal data we collect

The categories of personal data collected depend on the nature of the interaction with Dockt.

Category Examples

Contact details Name, work email address, company, role, message content, and demo-request preferences submitted through the website.

Website usage Pages viewed, links clicked, form interactions, approximate device and browser information, referrer, and timestamps.

Campaign attribution UTM parameters, referring page, landing page, and ad-click identifiers such as li_fat_id, gclid, fbclid, or msclkid when they are present in the URL.

Technical and security data IP address, logs, error events, consent preference, and information required to protect the site from misuse or unauthorized activity.

Product data For customers, worker and contractor compliance records, submitted evidence, audit events, and account data processed under the relevant customer agreement.

3. Sources of personal data

Dockt collects data directly from individuals when they complete a form, send an email, book a meeting, or otherwise communicate with Dockt. Dockt also collects limited technical data automatically when the website loads.

If a visitor arrives from a Dockt advertisement, including a LinkedIn advertisement, Dockt may receive campaign parameters in the landing-page URL or campaign reporting from the relevant advertising platform. If Dockt uses a LinkedIn Lead Gen Form, LinkedIn may provide Dockt with the form fields the individual chooses to submit. LinkedIn services remain governed by LinkedIn's privacy terms and the individual's LinkedIn advertising settings.

4. Purposes of processing

Responding to inquiries. Dockt uses contact details and message content to answer questions, arrange demonstrations, and manage sales communications.
Operating and securing the website. Dockt uses technical data to deliver pages, prevent misuse, investigate errors, and maintain security.
Measuring website and campaign performance. With consent where required, Dockt uses analytics, campaign attribution, and conversion data to assess the performance of pages, advertisements, and messages.
Improving Dockt. Dockt uses aggregated and de-identified insights to improve website content, product positioning, onboarding flows, and support.
Providing the product. For customers, Dockt processes account, workspace, evidence, and compliance data to deliver the Dockt platform under the customer agreement.
Meeting legal obligations. Dockt may use and retain data where required for accounting, compliance, dispute handling, or lawful requests.

5. Cookies, analytics, and advertising tools

Dockt uses a cookie notice for optional analytics and marketing tools. Visitors may decline optional cookies and continue to use the website.

Tool or data Purpose

Consent preference Stores whether optional analytics were accepted or declined, so the website can respect that choice.

Google Analytics 4 Measures visits, page views, and campaign performance when analytics consent is accepted.

PostHog Measures product-marketing interactions and may record sessions after consent to support usability analysis.

HubSpot Processes contact-form submissions, stores form attribution, and supports sales follow-up.

Ad platforms, including LinkedIn Measure ad clicks, leads, and conversions, and support the relevance of advertising. Dockt does not target advertisements using sensitive worker compliance records.

Browser controls, content blockers, and platform privacy settings may also limit cookies and tracking. Visitors may change their optional cookie choice by clearing site data for dockt.com and revisiting the site.

Dockt does not itself attempt to identify visitors across unrelated websites or devices. Advertising, analytics, and CRM providers may recognize a browser, device, or signed-in account across sessions or devices in accordance with their own privacy terms and the settings selected with those providers.

6. Legal bases

Where the GDPR or similar laws apply, Dockt relies on the following legal bases: consent for optional analytics and marketing cookies where required; legitimate interests for site security, basic business communications, campaign measurement, and improving our services; contract necessity where Dockt provides services to a customer; and legal obligation where Dockt must keep records or respond to lawful requests.

7. Sharing personal data

Dockt shares personal data only where necessary to operate the website, respond to inquiries, provide Dockt, measure campaigns, or meet legal obligations. Recipients may include hosting and security providers, analytics providers, CRM and form providers, advertising platforms such as LinkedIn when Dockt runs campaigns there, customer-authorized integration providers, professional advisers, and public authorities when legally required.

Dockt does not sell personal data. Dockt does not permit customer workforce compliance records, identity documents, or evidence files to be used for third-party advertising targeting.

8. International transfers

Dockt is designed with EU hosting and EU data residency in mind. Some service providers may process data outside the European Economic Area or the United Kingdom. In those cases, Dockt uses appropriate safeguards such as standard contractual clauses, provider transfer terms, and technical and organizational controls.

9. Retention

Dockt retains personal data only for as long as necessary for the purpose for which it was collected. Contact and sales records are normally retained while a conversation is active and for a reasonable period thereafter for follow-up, dispute handling, and business records. Analytics and campaign data are retained according to the settings of the relevant analytics or advertising platform. Product data retention is governed by the customer agreement, product configuration, and applicable legal requirements.

10. Security

Dockt uses access controls, encryption, audit logging, tenant separation, and security monitoring to protect personal data. No system can be guaranteed to be completely secure, but Dockt designs its controls around least privilege, EU residency, and evidence handling appropriate for sensitive workforce compliance data.

11. Your choices and rights

Depending on applicable law, individuals may have rights to access, correct, delete, restrict, object to, or port their personal data. Individuals may also withdraw consent for optional analytics and marketing cookies where consent is the legal basis.

To submit a privacy request, email hello@dockt.com. Dockt may need to verify the request before acting on it. If a request concerns product data controlled by a Dockt customer, Dockt may direct the request to that customer or act on the customer's instructions.

Individuals in the EEA or UK may also submit a complaint to their local data protection authority.

12. Children

Dockt is a business-to-business service and website. The marketing website is not directed to children, and Dockt does not knowingly collect personal data from children through the marketing website.

13. Changes to this policy

Dockt may update this policy as Dockt, the website, advertising tools, or legal requirements change. The effective date at the top of the page indicates when this policy was last updated.

Dockt Privacy Policy.