Privacy policy.

Dockt Hospitality (trading as Dockt) ("Dockt", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and protect personal information in connection with our website at dockt.com.au, our order system, and the Dockt plates dashboard (collectively, the "Service"). We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information we collect

Information you provide directly

• Order information: when you order physical products such as Dockt Plates, we collect your name, email address, phone number, venue name and type, suburb, state, postcode, shipping address, branding details and design notes.
• Account information: when you create a Dockt account, we collect your email address, full name, phone number and venue details. Staff and managers you invite have their name, phone number and role stored against your venue.
• Communications: when you contact us by email or a contact form, we collect your name, email address and the content of your message.

Information collected automatically

• Usage data: information about how you access and use the Service, including your IP address, browser type, pages visited and time spent on pages.
• Cookies: we use cookies and similar technologies to improve your experience and understand how the Service is used. You can control cookies through your browser settings.
• Session recording: our product analytics provider records interactions with the Service, such as pages viewed, clicks, scrolling and mouse movement, to help us improve it. These recordings may capture information displayed on your screen during a session. Text you enter into form fields, including passwords, is masked and not captured.

Venue and app data

When you use the plates dashboard, we store your business profile (name, URL slug, logo, brand colour and destination links), the plates on your account and where each one points. We also record a tap count per plate, with the time and a hashed IP address, so we can show you how often a plate is used. We do not identify the people who tap your plates.

Historic data from our retired venue management product may still be held. It is not used and can be deleted or exported on request. It could include:

• Loyalty: member records, including the name and mobile number members provide to join your program, and their stamp or reward history.
• Reservations: booking and walk-in waitlist entries, including the guest name and mobile number used to send a table-ready or confirmation SMS.
• Menu: the menu content, items, prices and dietary information you publish.
• Tasks, Shifts, Stock and Notices: checklists and completion records, staff rosters and timesheets, stock items and levels, and the notices you post to your team.

Where you enable SMS, we process the mobile numbers of the members, guests or staff you choose to message in order to deliver those messages and the one-time verification codes used to confirm a number. We also collect anonymised tap analytics: counts and timestamps of NFC and QR interactions with your tap points.

Much of this is information about your own members, guests and staff that you provide or collect through the Service. You are responsible for that data and for having a lawful basis to collect it. We process it on your behalf to provide the Service.

2. How we use your information

• To process and fulfil your orders.
• To communicate with you about your order, design process and delivery.
• To provide and operate the plates dashboard.
• To send transactional emails such as order confirmations, design proofs and shipping notifications.
• To deliver the SMS messages you configure, such as reward reminders, table-ready alerts, shift confirmations and low-stock alerts, to the recipients you choose.
• To respond to your enquiries and support requests.
• To improve our products, services and website.
• To comply with legal obligations.

We do not sell your personal information. We do not use your information for third-party advertising.

3. Disclosure of information

We may share your information with:

• Service providers: trusted third parties including payment processing (Stripe), email delivery, SMS delivery, cloud hosting and infrastructure (Supabase, Vercel), and product analytics. These providers are contractually required to protect your data and may only use it to provide their service to us.
• Legal requirements: we may disclose your information if required by law or in response to valid legal process.
• Business transfers: if Dockt is involved in a merger or acquisition, your information may be transferred as part of that transaction.

4. Data retention

We retain your personal information for as long as necessary to fulfil the purposes described in this policy. Order information is retained for a minimum of 7 years for accounting and legal compliance. Account and app data is retained for the duration of your account plus 12 months after closure, after which it is deleted or anonymised.

5. Security

We take reasonable measures to protect your personal information. Data is encrypted in transit using TLS, the dashboard is protected by authentication and database-level access controls, and account passwords are stored in hashed form and never in plain text. The dashboard is hosted on secure, enterprise-grade cloud infrastructure. Payment processing is handled entirely by Stripe. We do not store card numbers or payment credentials.

6. Your rights

Under the Australian Privacy Principles and, where applicable, the GDPR, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information, subject to legal retention requirements.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Office of the Australian Information Commissioner.

To exercise any of these rights, contact us at hello@dockt.com.au. If your request relates to data we hold on behalf of a venue, for example as one of its loyalty members or a member of its staff, we may direct you to that venue as the party responsible for the data.

7. Children's privacy

The Service is not directed at persons under 18 years of age. We do not knowingly collect personal information from children.

8. Links to third-party sites

The Service may contain links to third-party websites, including the destinations you configure for your tap points. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the date above.

10. Contact us

For questions about this policy or our handling of your personal information:

Dockt Hospitality (trading as Dockt)
hello@dockt.com.au
Australia