Privacy Policy

Last updated: February 2026

Dokk (Pty) Ltd ("Dokk", "we", "us", or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Dokk On Call platform ("Service").

This policy complies with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African data protection legislation.

1. Information We Collect

1.1 Information You Provide

  • Account information: name, email address, and profile details when you register.
  • Organisation information: practice or facility name, address, and team member details.
  • Scheduling data: on-call rosters, shift preferences, leave requests, and availability.
  • Billing information: payment details processed securely through Paystack (we do not store card numbers).
  • Communications: messages you send through the Service or to our support team.

1.2 Information Collected Automatically

  • Usage data: pages visited, features used, and interactions with the Service.
  • Device information: browser type, operating system, and device identifiers.
  • Log data: IP addresses, access times, and referring URLs.

2. How We Use Your Information

We use your personal information to:

  • Provide, operate, and maintain the Service.
  • Process subscriptions and payments.
  • Send transactional communications (e.g. shift notifications, billing receipts).
  • Provide customer support.
  • Improve and develop new features.
  • Ensure the security of the Service.
  • Comply with legal obligations.

3. Legal Basis for Processing (POPIA)

We process your personal information on the following grounds:

  • Consent: where you have given us clear consent (e.g. marketing communications).
  • Contract: where processing is necessary to fulfil our contract with you.
  • Legal obligation: where processing is required by law.
  • Legitimate interest: where processing is in our legitimate interest and does not override your rights (e.g. fraud prevention, service improvement).

4. Data Sharing & Third Parties

We do not sell your personal information. We share data only with:

  • Paystack: for payment processing (PCI DSS compliant).
  • Clerk: for authentication and user management.
  • Neon (PostgreSQL): for secure database hosting.
  • Resend: for transactional email delivery.
  • Sentry: for error monitoring and service reliability.
  • Vercel: for application hosting.

All third-party processors are contractually required to protect your data and only process it on our instructions.

5. Data Storage & Security

  • Your data is stored on servers hosted by Neon and Vercel.
  • All data is encrypted in transit (TLS) and at rest.
  • We implement access controls, audit logging, and regular security reviews.
  • Payment card data is handled entirely by Paystack and never touches our servers.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you cancel your account, we will delete or anonymise your personal data within 90 days, unless we are required by law to retain it for longer (e.g. financial records for SARS compliance).

7. Your Rights Under POPIA

You have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of your personal information.
  • Object to the processing of your personal information.
  • Withdraw consent at any time (where processing is based on consent).
  • Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, email us at hello@dokk.app. We will respond within 30 days.

8. Cookies

We use essential cookies required for the Service to function (e.g. authentication session cookies). We do not use third-party advertising or tracking cookies. No cookie consent banner is required as we only use strictly necessary cookies.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Information Officer

For privacy-related queries or POPIA requests, contact our Information Officer:

  • Email: hello@dokk.app
  • Address: 30 Goshawk Road, New Germany, 3610, South Africa