Privacy notice

Last updated: 9 November 2026

Who we are

Dockyd is a warehouse management service made by A&A Technologies LTD, company number 17315555, registered office Suite A, 82 James Carter Road, Mildenhall, IP28 7DE ("we", "us"). We are registered with the Information Commissioner's Office, registration number ZC287555.

This notice covers

Dockyd, the warehouse management service at each customer's own address (such as yourcompany.dockyd.com), and this website, dockyd.com. The section "This website" below covers dockyd.com on its own.

Our role

Dockyd is used by businesses ("our customers") to run their warehouses. When you use Dockyd at work, your employer or the business you work for is the controller of the personal data about you and their own customers that is kept in Dockyd. We are their processor: we only use that data to run Dockyd for them, under our contract with them. If you have a question about that data, or want to use your rights, please contact the business that gave you your Dockyd login first. We will help them answer you.

We are the controller only for the small amount of data we use to run our own business, such as the names and contact details of the people at our customers we deal with, and support requests sent to us.

What Dockyd keeps

• Your login: your name, work email, user code, role and which warehouses you can use. Your password and handheld PIN are kept only as a one-way hash, never as typed. If you use two-step sign-in, the key for your authenticator app and your recovery codes.
• What you do in Dockyd: an audit log of changes you make (for example stock moved, orders picked or settings changed), with your name and the time, so your employer can see who did what.
• Sign-ins: each sign-in, sign-out and failed sign-in is written to the audit log with the user and the time. Your IP address is used for a few minutes to slow down anyone guessing passwords, and is not stored.
• Warehouse data: orders, deliveries and addresses your employer puts into Dockyd, which can include names, addresses and phone numbers of the people goods are sent to.
• Cookies: only the ones Dockyd needs to work. See our cookie note.

Why we use it, and our legal basis

For data we process for our customers, the customer decides the legal basis. We use it only to provide, support and secure Dockyd, as our contract with them allows. For data we control ourselves, our legal basis is our legitimate interest in running and supporting our business and keeping Dockyd secure.

Where it is kept, and who else sees it

Dockyd is hosted on Microsoft Azure in the UK (UK South). Data is stored in the UK. The companies that help us provide Dockyd (our sub-processors) are:

• Microsoft Ireland Operations Ltd (Azure): hosting, databases, file storage and backups.
• Cloudflare, Inc.: hosts this website and the dockyd.com domain names. It handles the IP address and browser details of people who visit dockyd.com. Cloudflare is based in the United States, and its data processing terms cover this transfer.
• Brevo (Sendinblue SAS, France): sends Dockyd's emails, so it handles the name and email address of the person each email goes to. The EU is covered by UK adequacy rules for data protection.

We do not sell personal data or use it for advertising. We only share it when the law requires us to.

This website

dockyd.com has no forms, accounts, analytics or advertising. Like any website, the servers that deliver it see your IP address and browser details for each page you open; Cloudflare uses these to deliver the site and protect it from attacks, and we do not use them to identify you. If you email us, we use your email to reply and keep it for as long as we deal with you, as part of running our business (legitimate interest).

How long we keep it

We keep a customer's data, including the audit log, for as long as they use Dockyd, so they keep a full history of their stock, orders and who did what. When their subscription ends, they can export it for 30 days, then we delete it. Backups are kept for 7 days and then deleted. Your employer can remove your login at any time; the audit log keeps your name against the changes you made.

Keeping it safe

All connections to Dockyd are encrypted. Each customer's data is kept in its own database. Passwords are hashed, two-step sign-in is available (and required for admins), and access to the servers is limited to the few people who need it.

Your rights

You have the right to ask for a copy of your personal data, to have it corrected or deleted, to object to or limit how it is used, and to have it moved. For data held for your employer, ask them first. For data we control, email us. You also have the right to complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

Contact us

Email info@aatech.uk, or write to A&A Technologies LTD, Suite A, 82 James Carter Road, Mildenhall, IP28 7DE.

Changes

We will update this notice when how we handle data changes, and show the date at the top.