Privacy Policy
Last updated: June 2026
Who we are
Docket (getdocket.com.au) provides point-of-sale and back-office software for Australian hospitality venues. This policy covers personal information we handle both for our business customers (venues) and for the individuals whose details venues record in Docket (staff and loyalty customers).
What we collect
Venue account data: business name, ABN, contact name, email, phone, billing details. Venue-entered data: staff details (name, contact, employment type, pay rate), and customer loyalty profiles (name, contact details, birthday month, purchase history). We collect this to operate the service — we do not sell personal information.
How venue customer data is handled
Loyalty and customer records are entered and owned by the venue. Docket processes this data on the venue's behalf, scoped to that venue, and does not use it for Docket's own marketing. Venues are responsible for telling their customers how their details are used.
Storage and security
Data is stored in Australia (Sydney region) with our hosting provider. Access is restricted by role-based permissions; staff PINs and passwords are stored hashed. Docket support staff access a venue's data only in connection with a support request, and that access is logged.
Disclosure
We disclose personal information only to service providers needed to run Docket (hosting, email and SMS delivery, payment processing), under their own privacy obligations, or where required by law. Venues may configure outbound webhooks to their own systems; data sent to those endpoints is under the venue's control.
Access and correction
You can request access to or correction of personal information we hold by emailing hello@getdocket.com.au. Venue owners can export or correct their venue's data in the admin portal or by contacting support.
Data breaches
We maintain a data breach response plan consistent with the Notifiable Data Breaches scheme. If a breach is likely to result in serious harm, we will notify affected venues and the OAIC as required.
Retention and deletion
Account data is retained while a venue subscription is active and for a reasonable period afterwards for legal and tax purposes. Venues may request deletion of customer loyalty records at any time.
Contact
Privacy questions or complaints: hello@getdocket.com.au. If unresolved, you may contact the Office of the Australian Information Commissioner (oaic.gov.au).