Privacy Notice
This notice explains how DataDocket handles personal data in connection with this website, purchases and support, and relevant business-to-business outreach.
Direct marketing objection: if you do not want DataDocket to use your personal data for direct marketing, email datadocketuk@gmail.com or reply “no thanks” to an outreach email. DataDocket will stop using your personal data for direct marketing and may keep a minimal suppression record so your preference is respected.
1. Who is responsible for your personal data?
DataDocket is the controller for the personal data described in this notice where DataDocket decides why and how that data is used.
Privacy enquiries, rights requests and direct-marketing objections can be sent to datadocketuk@gmail.com.
Website: datadocket.co.uk.
2. What personal data do we use?
Website and demo
The demo does not require an account. Information entered into the interactive demo fields is processed in your browser and is not sent to DataDocket by the demo page itself. DataDocket does not use advertising trackers or tracking pixels on the demo.
The hosting provider may process limited technical request and security data needed to deliver and protect the website, such as IP address, browser/device information, request time and requested page.
Purchases, enquiries and support
This may include your name, business name, business contact details, order information, correspondence, support history and records needed to deal with access, refunds, licensing or other purchase-related issues.
Checkout is hosted by Stripe. Payment-card details are entered into Stripe’s checkout environment; DataDocket does not receive your full card number.
Business-to-business outreach
This may include a business contact’s name, job title or role, employer, business email address, business telephone number where relevant, company information, the public source of the information, outreach dates/status, and minimal notes needed to keep communications relevant and respect objections.
3. Why do we use personal data, and what is the lawful basis?
| Purpose | Typical data | Lawful basis |
|---|---|---|
| Send relevant B2B information about DataDocket to corporate organisations and manage outreach. | Public business-contact and company data, outreach history. | Legitimate interests — promoting and growing DataDocket through targeted, proportionate B2B outreach where the contact is acting in a business capacity and the privacy impact is limited. |
| Respect opt-outs and objections. | Minimal identifier such as business email address, date and suppression status. | Legitimate interests and compliance with data-protection/direct-marketing obligations — keeping only enough information to avoid contacting you again. |
| Provide purchased digital products, respond to order questions and provide support. | Contact, order and correspondence data. | Contract where processing is necessary to provide what you bought or requested; legitimate interests for related customer support and service administration. |
| Handle accounting, fraud prevention, disputes and legal/regulatory requirements. | Transaction, contact and correspondence records. | Legal obligation where applicable and legitimate interests in protecting the business and establishing, exercising or defending legal claims. |
| Operate, secure and troubleshoot the website and related services. | Limited technical and security data. | Legitimate interests in maintaining a secure and reliable service. |
Where DataDocket relies on legitimate interests for B2B direct marketing, the activity is intended to be targeted to relevant corporate organisations, use limited business-context data and provide a simple way to object.
4. Where does business-contact data come from?
DataDocket may obtain business-contact information from publicly available business sources, including:
- the organisation’s own website;
- Companies House;
- public business directories and search results;
- public professional or business profiles; and
- other public sources that identify the organisation, its services or an appropriate business contact.
DataDocket may also receive personal data directly from you when you email, purchase, request support or otherwise contact DataDocket.
5. Who may receive personal data?
Personal data is shared only where reasonably necessary for the purposes above. Categories of recipient may include:
- Website/hosting providers used to deliver and secure datadocket.co.uk;
- Stripe for hosted checkout and payment processing;
- Email and productivity providers used to send, receive and organise business communications;
- Software/AI productivity providers used to help organise public business information and prepare relevant B2B outreach;
- professional advisers, service providers, regulators, courts or public authorities where reasonably necessary or legally required.
DataDocket does not sell business-contact lists.
6. International transfers
Some service providers used for hosting, payments, email or productivity may process personal data outside the UK. Where UK data-protection law treats that as a restricted transfer, DataDocket relies on the provider’s applicable transfer mechanism and safeguards, such as UK adequacy regulations or approved contractual safeguards.
7. How long do we keep personal data?
- B2B prospect and outreach records: kept only while they remain relevant for targeted outreach and campaign administration, and reviewed periodically. Records that are no longer needed are deleted or anonymised.
- Suppression records: a minimal record may be retained for as long as reasonably needed to ensure an objection or opt-out continues to be respected.
- Purchase, accounting and dispute records: retained for the periods required by applicable tax/accounting law and for as long as reasonably necessary to deal with contractual or legal claims.
- Support and enquiry correspondence: retained only while reasonably needed to answer the enquiry, provide support, keep an appropriate business record or deal with a dispute.
8. Your data-protection rights
Depending on the circumstances, you may have rights to request access to your personal data, ask for inaccurate data to be corrected, ask for deletion, request restriction, receive certain data in a portable format, and object to processing based on legitimate interests.
You have the right to object to direct marketing at any time. If you object, DataDocket will stop using your personal data for direct marketing. You can object by replying “no thanks” to an outreach email or contacting datadocketuk@gmail.com.
If DataDocket ever relies on your consent for a particular activity, you can withdraw that consent at any time. Withdrawing consent does not affect processing that was lawful before withdrawal.
DataDocket does not use your personal data to make solely automated decisions that produce legal or similarly significant effects on you.
9. Questions, rights requests and complaints
Please contact DataDocket first if you have a question or concern about how your personal data is used: datadocketuk@gmail.com.
You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO). Information about raising a concern is available at ico.org.uk/make-a-complaint/.
10. Changes to this notice
This notice will be reviewed and updated when DataDocket’s processing, service providers or legal obligations materially change. The current version will be published at datadocket.co.uk/privacy/.