Privacy Policy

Dock Software is a software development company. This policy explains how we handle personal information collected through our website and the data we process on behalf of our clients during software engagements.

Last Updated: May 21, 2026

1. Introduction

Dock Software ("we", "us", or "our") is a custom software development company headquartered in Dubai, UAE, specializing in web and mobile applications, AI and machine learning solutions, cloud architecture, and DevOps services. We respect your privacy and are committed to protecting your personal data. This Privacy Policy describes how we collect, use, store, and share information when you visit dock-software.com, communicate with us, or engage our services. By using our website or services, you agree to the practices described in this policy.

2. Scope and Roles

This policy covers two distinct contexts: • Website visitors and prospects: We act as a Data Controller for the personal information you submit through our forms, marketing channels, and analytics. • Client engagements: We act as a Data Processor (or sub-processor). We handle information—including personal data, source code, or business data—strictly on behalf of, and in accordance with the documented instructions of, our clients under a separate Master Services Agreement, Statement of Work, or Data Processing Addendum.

3. Information We Collect

Information you provide to us: Your name, email address, phone number, company name, role, country, project requirements, budget range, message content, and any attachments you submit through our contact forms or via email. Technical and usage data collected automatically: Your IP address, browser type and version, device identifiers, operating system, referring URL, pages viewed, session duration, and the date/time of your visit. This data is collected through cookies, server logs, and analytics tools such as Google Analytics and Google Tag Manager. Business and project data during engagements: Requirements documents, designs, business workflows, repository access credentials, API keys, environment configurations, test data, and any personal data contained in datasets you ask us to process. We treat all such material as strictly Confidential Information.

4. How We Use Your Information

We use the information we collect to respond to inquiries, prepare proposals, scope and deliver software development work, communicate project status, and issue invoices. We also use this data to operate and secure our website, debug and improve our products, analyze website traffic, comply with legal and tax obligations, defend legal claims, and—where you have opted in—send marketing communications about our services. We never use client project data for advertising, profiling, or training third-party AI models.

5. Client and Project Data

When engaged on a software project, we may be granted access to source code repositories, cloud accounts, staging and production systems, customer datasets, design files, and other business information. We handle this material according to the following principles: • Access is limited on a strict need-to-know basis to team members assigned to the engagement. • All engineers operate under written confidentiality agreements. • Credentials and secrets are stored in dedicated secret managers and never in plain text. • Production access is logged and remains read-only by default unless specific modifications are required. • Upon project completion or written request, we return or securely delete all client materials in line with the relevant agreement and applicable retention obligations.

6. Sub-processors and Sharing

We do not sell personal data. We share information only with trusted third parties that help us run our business and deliver client engagements, bound by contracts that require appropriate confidentiality and data protection commitments. These categories include: • Cloud and hosting providers (e.g., AWS, Microsoft Azure, Google Cloud, DigitalOcean). • Source-code and CI/CD platforms (e.g., GitHub, GitLab, Bitbucket). • Productivity and communication tools (e.g., Google Workspace, Microsoft 365, Slack). • Analytics and tag management (e.g., Google Analytics, Google Tag Manager). • Form and email delivery services. • Payment and invoicing providers. • Professional advisers (legal, accounting, tax). We may also disclose information when required by law, regulation, court order, or to protect our rights and the safety of our staff or clients, or to a successor entity in connection with a corporate merger, acquisition, or sale of assets.

7. International Data Transfers

Dock Software is based in the United Arab Emirates and may store or process data in jurisdictions where our team, clients, or sub-processors operate. When personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses, equivalent contractual protections, or your explicit consent. We apply rigorous technical measures, including encryption in transit and at rest, to maintain a comparable level of data protection.

8. Cookies and Tracking Technologies

We use cookies and similar technologies for essential site functionality (such as remembering your language preference), performance analytics, and—where applicable—to remember your marketing preferences. You can control or disable non-essential cookies through your browser settings or our cookie banner. Please note that certain features of the site may not function correctly without them.

9. Security

We apply technical and organizational security measures appropriate for a modern software engineering firm. These include TLS encryption in transit, encryption at rest for sensitive data, role-based access control with least-privilege defaults, multi-factor authentication (MFA) on critical systems, secrets management for credentials, mandatory code reviews, automated security scanning in our development pipelines, vulnerability monitoring, and ongoing staff training on secure coding and confidentiality. While no system is perfectly secure, we continuously review and harden our safeguards and will notify affected parties of any confirmed breach in accordance with applicable laws.

10. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, update, or delete your personal information; object to or restrict certain processing; receive your data in a portable format; withdraw your consent at any time; and lodge a complaint with a supervisory authority. For data we process on behalf of a client, please direct your request to that client, and we will support them in responding. To exercise any of these rights directly regarding data we control, please contact us using the details below.

11. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, deliver the services you have engaged us for, comply with our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Client project data is retained for the specific period set out in the relevant engagement agreement and is subsequently returned or securely deleted.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable laws. Updated versions will be posted on this page with a revised "Last Updated" date. Material changes will be prominently highlighted, and where required by law, we will obtain your renewed consent.

13. Contact Us

If you have questions or concerns about this Privacy Policy, our data-handling practices, or wish to exercise any of your rights, please contact us at: Dock Software Court Tower 506, Business Bay, Dubai, UAE Email: [email protected] Phone: +971 581 250 616