This Privacy Policy explains how Dockview Ltd ("we", "us", "our") collects, uses, shares, and protects personal data in connection with the Dockview enterprise licensing service available at this site (the "Service"). This Policy applies to personal data that we process as a data controller. For data we process on behalf of a customer in our role as a processor, the terms of the relevant customer agreement govern.
1. Who we are
Dockview Ltd is the data controller for personal data processed in connection with the Service. You can contact us at enterprise@dockview.dev.
2. Personal data we collect
We collect the following categories of personal data:
- Purchase details you provide during checkout: contact name, business email address, company name, and the application name the licence is intended for.
- Incomplete checkout details: if you enter details into the checkout (such as your name, business email, company, and application name) but do not complete the purchase, we may retain what you entered so we can understand and improve the checkout process. We do not use these details for marketing without your explicit opt-in.
- Payment metadata from our payment processor: transaction identifier, billing country, amount, currency, and the last four digits of the payment card. Full card details are collected directly by our payment processor and are never seen or stored by us.
- Licence and account records generated when a licence is issued: the issued licence key, plan, quantity, issue date, term dates, and a hash of the key for verification.
- Email correspondence: when you contact us, we receive the message and any information you choose to include.
- Technical data: IP address, browser type, and request timing collected by our hosting and payment providers for security, fraud prevention, and basic operational logging.
- Analytics data (only with your consent): pages viewed, referring pages, approximate location, and device and browser information, collected via Google Analytics to measure site usage.
With your consent, the Service uses Google Analytics to measure site usage (see the Cookies and analytics section); it does not use advertising trackers. Wizard state during checkout is held in your browser's sessionStorage and is cleared when the browser session ends; any contact details you enter may also be recorded on our servers as described above.
3. How we use personal data and lawful bases
- To deliver the licence you purchased (issuing the licence key, sending the receipt, providing support). Lawful basis: performance of a contract with you (UK GDPR Article 6(1)(b)).
- To meet legal and tax obligations (retaining transaction records for the periods required by UK tax and company law). Lawful basis: legal obligation (Article 6(1)(c)).
- To secure the Service and prevent fraud (monitoring for abuse, validating licence usage). Lawful basis: legitimate interests (Article 6(1)(f)), namely protecting the Service and our customers from misuse.
- To understand and improve the checkout (measuring where purchases are abandoned and retaining incomplete checkout details). Lawful basis: legitimate interests (Article 6(1)(f)), namely operating and improving our sales process. You can object to this at any time.
- To respond to your enquiries. Lawful basis: legitimate interests (Article 6(1)(f)) or, where applicable, performance of a contract.
- To measure site usage (analytics). Lawful basis: consent (Article 6(1)(a)), which you can withdraw at any time.
We do not use your personal data for marketing without your explicit opt-in.
4. Who we share personal data with
We share personal data with service providers ("subprocessors") who process it on our behalf under written contracts requiring appropriate safeguards, in the following categories:
- payment processing and fraud prevention;
- transactional email delivery (receipts and licence keys);
- hosting, database, and edge-security infrastructure;
- website analytics (see the Cookies and analytics section below).
We may also disclose personal data where required to do so by law, or to establish, exercise, or defend our legal rights. We do not sell personal data.
5. Cookies and analytics
The Service uses strictly necessary cookies and similar storage that are required for it to work, for example to keep your checkout session and to remember your cookie choice. These do not require consent.
With your consent, the Service also uses Google Analytics, which sets analytics cookies to measure how the site is used. Google Analytics is not loaded until you accept analytics cookies through our cookie banner, and you can change or withdraw your choice at any time from the banner or using the button below. Analytics data is processed by Google and may be transferred to the United States under the safeguards described in the International transfers section. You can also opt out using Google's browser add-on at tools.google.com/dlpage/gaoptout.
6. International transfers
Some of our subprocessors are based outside the United Kingdom and the European Economic Area. Where personal data is transferred to such a jurisdiction, we rely on appropriate safeguards under UK GDPR Article 46, including the UK International Data Transfer Agreement or Addendum, and/or the European Commission's Standard Contractual Clauses, with additional measures where required.
7. How long we keep personal data
- Licence and purchase records: retained for the duration of the licence and for at least six (6) years after the end of the related accounting period, to meet UK tax and company law obligations.
- Email correspondence: typically retained for up to two (2) years from the last interaction, then deleted unless an ongoing matter requires longer retention.
- Incomplete checkout details: retained for no longer than is necessary to understand and improve the checkout, and deleted when no longer needed for that purpose. If the purchase is completed, the details form part of the licence and purchase records above.
- Operational logs: retained by our hosting and payment providers in line with their own retention schedules, typically 30 to 90 days for request logs.
8. Your rights
Under UK GDPR you have the right to: access the personal data we hold about you; have inaccurate data corrected; request erasure (subject to our legal and tax retention obligations); restrict or object to certain processing; and request portability of data you provided to us. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).
To exercise any of these rights, email us at enterprise@dockview.dev. We will respond within one calendar month.
9. Security
We use technical and organisational measures appropriate to the risk to protect personal data, including TLS in transit, access controls on administrative interfaces, and minimisation of the personal data we collect.
10. Children
The Service is intended for use by businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18.
11. Changes to this Policy
We may update this Policy from time to time. The current version is identified at the top of this page; material changes will be highlighted by updating the effective date and, where appropriate, notifying affected customers by email.
12. Contact
Questions about this Policy or about how we handle personal data can be sent to enterprise@dockview.dev.