Skip to content

Privacy Policy

Last updated 26 June 2026

1. Who we are

DockDocs is a management platform for marine technicians, trades, and fleet operators, operated by Veridus ("we", "us", "our"). For the purposes of the EU General Data Protection Regulation (GDPR) and Belgian data protection law, the data controller for this website and your account data is:

  • Veridus
  • Van de Weyngaertplein 5 2180, Ekeren
  • BE1020.365.368 · VAT BE1020.365.368
  • privacy@docksdocs.com

2. Scope of this policy

This policy covers personal data we handle in connection with:

  • our public website at docksdocs.com;
  • enquiries you send us (for example, by emailing our sales team); and
  • the DockDocs portal and service provided to customers under a subscription.

The portal is hosted on a separate subdomain (portal.docksdocs.com) and sign-in is handled by our identity provider (auth.docksdocs.com).

3. Our role: controller and processor

We act in two different capacities depending on the data:

  • As a controller for personal data relating to website visitors, sales enquiries, and the account holders and team members who use the service (for example, their name and work email). This policy governs that processing.
  • As a processor for the business data that a customer enters into the service — such as records about their own boats, customers, and service jobs. The customer is the controller of that data and decides how it is used; we process it only on their instructions, under the data processing terms in our customer agreement.

4. Data we collect

Website visitors

When you visit the website, our hosting and security provider automatically processes technical data needed to deliver and protect the site — such as your IP address, browser type, and the pages requested. The website does not run analytics or advertising scripts.

When you contact us

If you email our sales team or otherwise get in touch, we receive the contact details and any information you choose to include in your message, and we keep our correspondence with you.

Account & team members

For customers, we process the identity and contact details of the people authorised to use the service (name, work email, role) and authentication data managed by our identity provider, together with basic usage and security logs.

Customer business data

The service stores the records a customer enters — for example boats, owners, contacts, and service jobs. Where these include personal data, we process it as a processor on the customer's behalf (see section 3).

5. Why we use it & legal bases

As a controller, we rely on the following legal bases under Article 6 GDPR:

  • Performance of a contract — to provide the service to customers, manage accounts, and provide support.
  • Legitimate interests — to respond to enquiries, secure and improve the website and service, and prevent fraud and abuse, in a way that is balanced against your rights.
  • Legal obligation — to meet accounting, tax, and other legal requirements.
  • Consent — where we ask for it, for example before sending optional marketing communications. You can withdraw consent at any time.

6. Cookies & tracking

The website does not use cookies or similar technologies for analytics, advertising, or tracking, and it does not build profiles of visitors. Our hosting and security provider may set strictly necessary cookies to deliver and protect the site; under the ePrivacy rules these do not require consent.

If we introduce analytics or other non-essential cookies in future, we will update this policy and, where the law requires it, ask for your consent through a cookie banner first. The portal may use cookies that are strictly necessary for sign-in and security.

7. Who we share data with

We do not sell your personal data. We share it only with service providers (processors) that help us run DockDocs, and only as needed. These include:

  • Hosting & CDN — our website is served through Cloudflare Pages and its global network.
  • Application hosting — the portal runs on our hosting infrastructure, with sign-in handled by our self-managed identity provider (Keycloak).
  • Email — our email provider, for correspondence with you.

We may also disclose data where required by law, or to establish, exercise, or defend legal claims. A current list of sub-processors is available on request.

8. International transfers

Some of our providers (such as our CDN) may process data outside the European Economic Area. Where that happens, we rely on an appropriate safeguard under Chapter V GDPR — typically the European Commission's Standard Contractual Clauses — so your data keeps an equivalent level of protection.

9. How long we keep data

We keep personal data only as long as necessary for the purposes above: account data for the life of the subscription and a reasonable period afterwards; enquiry correspondence for as long as needed to deal with your request and our records; and data we must retain to meet legal obligations for the period the law requires. Customer business data is retained and deleted in line with the customer agreement.

10. Security

We apply appropriate technical and organisational measures to protect personal data, including encryption of data in transit (HTTPS), authentication managed by a dedicated identity provider, access controls, and logging. No system is perfectly secure, but we work to keep risks low and to respond promptly to any incident.

11. Your rights

Subject to conditions in the GDPR, you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased ("right to be forgotten");
  • restrict or object to certain processing;
  • data portability;
  • withdraw consent where processing is based on it.

To exercise any of these, email privacy@docksdocs.com. If your data is held by a customer using the service (where we act as processor), please contact that customer directly; we will assist them as needed.

You also have the right to lodge a complaint with your local supervisory authority. In Belgium this is the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), dataprotectionauthority.be.

12. Children

DockDocs is a business tool and is not directed at children. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "last updated" date above and, for material changes, take reasonable steps to let you know.

14. Contact us

Questions about this policy or how we handle your data? Email privacy@docksdocs.com, or reach our team at sales@docksdocs.com.