Privacy policy
Last updated 29 August 2026
This policy explains how Docko Ltd ("Docko", "we") handles personal data in the Docko workforce management platform, including the Docko driver app.
Who is responsible for your data
Docko supplies software to client companies, typically delivery service partners, who use it to administer their own drivers and contractors. For that operational data, the client company is the data controller and decides what is collected and why. Docko is the data processor, acting on that company's instructions.
Docko is the controller for its own account and billing records, and for the enquiries people send us directly.
1. What we process
Where a client company uses Docko to manage its workforce, the platform may hold:
| Category | Examples |
|---|---|
| Identity | Name, date of birth, nationality, photograph |
| Contact | Email address, telephone number, home address, next of kin |
| Right to work | Passport or identity document, share code, Home Office document |
| Driving | Licence details and images, DVLA check code, endorsements, categories |
| Business & tax | Company or sole-trader details, UTR, VAT status, National Insurance number |
| Financial | Bank account name, sort code and account number for payment |
| Work records | Rota, routes completed, vehicle allocation, inspections, incidents, invoices |
| Agreements | Signed contracts and policies, with the name, date and time of signature |
| Technical | Sign-in records, device push token, app version, error logs |
Docko does not use tracking cookies or advertising identifiers, and does not sell personal data to anyone.
2. Why it is processed
- To perform a contract. Administering an engagement, allocating work, and paying for it.
- To meet legal obligations. Right to work verification, driver licensing checks, tax reporting.
- Legitimate interests. Keeping the platform secure, preventing fraud, and improving the service.
- Consent. Where a specific feature asks for it, such as push notifications, which can be withdrawn at any time in your device settings.
3. Who it is shared with
Data is shared only where it is necessary to run the service:
- The client company that engaged you, and its authorised office staff
- Google Cloud Platform and Firebase (Google Ireland Limited), which host the platform
- The DVLA, for driving licence and vehicle status checks
- Regulated payment providers, to make payments to you
- Government bodies or authorities where the law requires it
Docko does not share personal data with advertisers or data brokers, and does not use it to train machine-learning models.
4. Where it is stored
Platform data is stored in Google Cloud data centres in the United Kingdom (europe-west2, London). Where a provider processes data outside the UK or EEA, it is covered by an adequacy decision or by standard contractual clauses.
5. How long it is kept
- Records are kept for as long as the client company's account is active.
- After an engagement ends, records are retained for up to 7 years to meet tax, employment-status and regulatory obligations, unless the client company instructs otherwise.
- Backups are kept for up to 98 days and then expire automatically.
- Deleted files remain recoverable for up to 90 days before being permanently removed.
6. How it is protected
- Encrypted in transit and at rest
- Access limited by role, so office staff see only what their role requires
- Two-factor authentication available, and required for the highest-privilege accounts
- Each driver's own record is readable only by that driver and by their client company
- Point-in-time recovery and nightly backups, with a daily automated integrity check
7. Your rights
Under UK GDPR you can ask to:
- access a copy of your personal data
- correct anything inaccurate
- erase data, where there is no legal reason to keep it
- restrict or object to certain processing
- receive your data in a portable format
Because your engagement is with a client company, requests are usually quickest through them. You can also contact us at admin@docko.co and we will pass the request on and support it.
Deleting your account
You can ask for your Docko account and its data to be deleted at any time by emailing admin@docko.co from your registered address, or by asking your client company's office. Deletion removes your sign-in, your record and your uploaded documents. Records the client company must retain for tax or regulatory reasons, for example issued invoices, are kept for the period the law requires.
Complaints
If you are unhappy with how your data has been handled, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather hear from you first so we can put it right.
8. Children
Docko is a workplace tool and is not intended for anyone under 18.
9. Changes
If this policy changes materially, we will update the date above and notify client companies. Continuing to use the platform after a change means the updated policy applies.
10. Contact
Data protection enquiries: admin@docko.co