Legal
Privacy Policy
Last updated: 19 June 2026
1. What this policy covers
This policy explains what personal data we collect when you use agridocker.co.uk and the AgriDocker platform (the “Service”), why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy applies to account holders, drivers using the AgriDocker driver app, and visitors to our website.
2. Data we collect
Account and contact information
When you sign up, we collect your name, email address, business name, and billing details. We use Stripe to process payments — we never store full card numbers on our servers.
Driver and operational data
When drivers use the app, we collect name, job records, GPS co-ordinates at sign-on and sign-off, vehicle registration, pre-start check responses, field and site details, spreading material types and quantities, and digital signatures.
This data forms the compliance record for each spreading job and is the core purpose of the Service.
Usage and technical data
We automatically collect device type, operating system, browser type, IP address, pages visited, and actions taken in the platform. This helps us improve the Service and diagnose problems.
Communications
If you contact us by email or through any support channel, we retain those communications to resolve your query and improve our service.
3. Legal basis for processing
We rely on the following legal bases under UK GDPR:
- Contract (Article 6(1)(b)): processing necessary to deliver the Service you have subscribed to, including account management, job records, and billing.
- Legal obligation (Article 6(1)(c)): retaining spreading compliance records that may be required by NVZ regulations, FACTS recommendations, or RPA inspections.
- Legitimate interests (Article 6(1)(f)): platform security, fraud prevention, service improvement, and product analytics where these do not override your rights.
- Consent (Article 6(1)(a)): marketing emails, where you have opted in. You can withdraw consent at any time.
4. How we use your data
- Providing and maintaining the AgriDocker platform and driver app
- Processing payments and managing your subscription
- Generating and storing compliance records on your behalf
- Sending transactional emails (account confirmations, invoices, password resets)
- Responding to support enquiries
- Monitoring platform performance and fixing bugs
- Sending product updates and marketing emails (with consent)
5. Data sharing
We do not sell your personal data. We share data only with the following categories of third parties:
- Stripe Inc: payment processing. Stripe is PCI-DSS compliant. See stripe.com/gb/privacy.
- Cloud infrastructure providers: hosting and data storage, operating within the UK or EEA under appropriate data processing agreements.
- Email delivery providers: transactional email sending only.
- Analytics providers: aggregated, anonymised usage data only.
We may disclose data if required by law, regulation, or a valid request from a UK authority. We will notify you where legally permitted to do so.
6. Data retention
We retain your account data for as long as your subscription is active and for 6 years after account closure, in line with our legal and tax obligations.
Spreading compliance records (GPS job data, signatures, field records) are retained for a minimum of 5 years to satisfy NVZ and RPA record-keeping requirements. You may request export of your records at any time.
Driver usage data and technical logs are retained for 12 months.
7. Cookies
We use the following types of cookies:
- Strictly necessary: session authentication, security tokens. These cannot be disabled.
- Analytics: anonymised usage statistics to understand how the platform is used. You can opt out.
We do not use advertising or third-party tracking cookies.
8. Your rights
Under UK GDPR, you have the right to:
- Access: request a copy of the personal data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: request deletion of your data where there is no legal obligation to retain it.
- Restriction: ask us to pause processing of your data in certain circumstances.
- Portability: receive your data in a structured, machine-readable format.
- Object: object to processing based on legitimate interests.
- Withdraw consent: where processing is based on consent, you can withdraw it at any time without affecting prior processing.
To exercise any right, email privacy@agridocker.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the ICO at ico.org.uk.
9. Data security
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. We operate a responsible disclosure policy for security vulnerabilities.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and affected individuals without undue delay.
10. International transfers
Our primary data storage and processing is within the UK. Where any third-party processor operates outside the UK, we ensure appropriate safeguards are in place (such as the UK International Data Transfer Agreement or equivalent adequacy decisions).
11. Changes to this policy
We may update this policy from time to time. We will notify you of material changes by email or via an in-app notice at least 14 days before the change takes effect. The “last updated” date at the top of this page always reflects the current version.
12. Contact us
For any privacy-related queries or to exercise your rights:
Email: privacy@agridocker.co.uk
Post: AgriDocker Ltd, [REGISTERED ADDRESS]