Privacy notice

Overview

This notice describes information handled through the Docket website and service when you visit the site, request a demonstration, communicate about the product or use Docket.

Docket is designed around data minimisation. The service holds only what a bell desk needs in order to return the right item to the right person, and is built so that the smallest possible amount of guest information exists in the first place.

Information we collect

Website and enquiries

The demo form collects your name, work email and hotel or group. The submission also stores the referring page and browser user agent with the enquiry.

Product accounts and operations

If your property uses Docket, the service processes account details and operational information entered by authorised users. Depending on the workflow, that can include staff identity, guest name and room context, hotel tag IDs, bag counts, storage locations, timings, vehicle details, operational notes and status history.

Docket is not intended to receive reservation records, loyalty information, guest contact details, payment or card data, or identity documents. Properties should enter only the operational information needed for the selected bell-desk workflow.

Usage and device information

We may collect basic website traffic and diagnostic information, such as page views and device or browser details, to operate and improve the service.

How information is used

• To respond to demonstration requests and product enquiries.
• To provide, secure, maintain and improve the Docket service.
• To authenticate users and apply configured access controls.
• To understand product usage and diagnose technical issues.
• To prevent misuse and comply with applicable legal obligations.

Docket does not sell personal information, share it for advertising, or use it to train any model. A property owns the data it enters. Managers can export operations reports as PDF or CSV at any time.

How information may be shared

Information is processed by a small, named set of service providers:

• Vercel — application hosting, with compute region-pinned to Sydney.
• Supabase, running on AWS — database, authentication and file storage in Asia Pacific (Sydney).
• Resend — staff account email such as invitations and password resets. No guest data is sent by email.
• Vercel Analytics — public marketing pages only.

No guest data is sent to any artificial-intelligence, machine-learning or advertising provider. Uploaded documents are stored and served back to authorised staff only; they are never parsed, indexed or summarised. Information may also be disclosed where required by law, to protect rights and safety, or in connection with a legitimate business transaction.

Cookies and analytics

Docket uses cookies and browser storage for authentication and service functionality. No guest or operational data is written to browser storage. Website analytics are collected only on public marketing pages; signed-in application pages are excluded and query strings are removed before submission.

Data location

Current production deployment records place the primary database in Australia. Some service providers may process technical, account or support information in other locations according to their service configuration. Deployment-specific location information is provided during evaluation and contracting.

Public website assets such as images and stylesheets are delivered through a global content network for performance. Those files contain no personal or operational information.

Security

Docket uses authenticated access, role-aware application logic and live guest-identity encryption in supported product areas. No service can guarantee absolute security. For a current overview of technical controls, see the security page. If you are evaluating Docket for a property, contact Docket for a deployment-specific discussion rather than relying on assumed controls.

Retention

Guest records

Docket keeps guest records for 12 months after the stay or record is closed. This covers baggage, valet and diary records and the files attached to them.

A hotel can agree a different period in its contract. Automatic archiving and deletion is being introduced; until it is in place, a hotel can ask us to delete records that have passed their retention period.

Enquiries and accounts

We keep enquiry and account information for as long as reasonably needed to respond to enquiries, provide Docket and meet contractual or legal obligations. You can ask about or request action on retained personal information using the contact details below.

Your choices and rights

Depending on your location, you may have rights to request access to, correction of or deletion of personal information, or to object to certain processing. We may need to verify your identity before acting on a request.

Where a property uses Docket, that property controls the guest information entered into the service. Docket will support a property in responding to a request made to it, including deletion of an individual's data.

Changes to this policy

We may update this policy as the website, service or legal requirements change. The date at the top of this page identifies the latest published version.

Contact

Questions or privacy requests can be sent to hello@docket.net.au.

Docket is a registered business name held by Campbell James Myott (ABN 13 549 178 997), who operates this website and is responsible for the handling of personal information described in this notice.