Your privacy matters to us. This page explains what information DCKAP collects, why we collect it, how long we keep it, and what say you have in the matter. We’ve tried to write it the way we’d actually explain it to you in person, not in dense legal-speak. If anything here is unclear, email us at privacy@dckap.com, and we’ll walk you through it.
Two different roles we play
Depending on how you’re interacting with us, DCKAP wears two different hats, and it matters which one applies to you:
When you visit our website, fill out a form, subscribe to our blog, or attend one of our events — we decide why and how your data gets used. In legal terms, that makes us a “data controller,” and this policy covers that relationship in full.
When you’re a customer using DCKAP Integrator or DCKAP EDI to move data between your own systems — we’re the pipe, not the source. You control what data flows through our platform, and we process it strictly on your instructions, acting as a “data processor.” That relationship is governed by our Data Processing Agreement (DPA) and your services agreement, not this page. If that’s what you’re looking for, reach out to your account manager or email privacy@dckap.com.
Everything below relates to the first role – our handling of your data when you interact with DCKAP directly as a website visitor, prospect, customer contact, or job applicant.
What information we collect
We collect information you give us directly, information we gather automatically as you use our website, and occasionally information from other sources. Here’s the breakdown:
Basic identification and contact details
Your name, company, job title, phone number, email address, and anything else you choose to share with us.
Account and website visitor information
When you visit our website or social media pages, this can include your name, company, business address, phone number, email address, and any other details you provide.
Your relationship with us as a customer
If you purchase our products or services, we collect information tied to that relationship – your purchase history, billing details, events you’ve attended, and any feedback you’ve given us.
How you use our website
We use cookies and similar tools to understand how people use our site: which pages you visit, how long you stay, what you click on, and your IP address. More on this in the Cookies section below.
Specific forms on our site
- Product/support inquiries: Name, company, phone, email, current ERP, eCommerce platform, and your message.
- Contact us: Name, phone, company, email, and your message.
- Blog, newsletter, and careers subscriptions: Just your email address and name.
- Direct emails: Whatever’s in the message, plus any information collected through the email itself.
Information from other sources
Occasionally, we supplement what we know about you using third-party data providers or information from website visitors, mainly to keep our records accurate and relevant.
Why we collect it
Generally speaking, we use your information to:
- Sell and deliver our products and services to you
- Provide support for what you’ve purchased
- Run surveys and marketing events
- Keep our website secure and running smoothly
- Send you marketing communications you’ve opted into
- Give you access to webinars, whitepapers, and other resources you’ve requested
If you subscribed to marketing newsletters or job alerts, we use your email address specifically to send you those alerts, and you can unsubscribe anytime using the link in the email.
How we use AI
We don’t use your data, whether it’s website form data or data flowing through DCKAP Integrator, to train AI models, ours or anyone else’s. If you use AI-powered features within our products, your inputs and outputs stay within our environment and are not shared with third-party AI providers for training purposes.
If any part of our platform sends data to a third-party AI service for processing (not training), we’ll disclose that here and in your services agreement.
Who we share your data with
We work with service providers and partners who help us run our business. Think database vendors, marketing platforms, and campaign tools. These companies only get access to what they need to do their specific job, and they’re contractually required to keep your data confidential, secure, and use it only for the purpose we’ve hired them for.
We may also share your data within the DCKAP group of companies.
Because DCKAP operates both inside and outside the European Union, your data may be transferred internationally as part of this. When that happens, we make sure there’s a proper legal basis for the transfer – through Standard Contractual Clauses (SCCs) or an equivalent mechanism and that the receiving party is bound to protect your data to the same standard.
We do not sell your personal information to anyone. Period.
If you’d like more detail on which third parties have access to your data, or how international transfers work, please feel free to email us.
Security — how we protect your data
We take data security seriously, and we back that up with real controls, not just a promise:
- SOC 2 (in progress): DCKAP is completing its SOC 2 Type II audit, with the final report expected in December 2026. Our security controls covering [security/availability/confidentiality] have already been built to meet SOC 2 requirements; we’re now in the final stage of independent audit verification. Once the report is issued, we’ll update this page and can share it directly with customers under NDA.
- Access to personal data is restricted to employees and contractors who need it to do their job, on a strict need-to-know basis.
- All staff, contractors, and board members go through privacy and security training and are contractually bound to confidentiality.
- We maintain internal controls governing how data is stored, transmitted, and ultimately destroyed.
How long we keep your data
We don’t hold onto your data longer than we actually need it. How long that is depends on why we collected it:
- Contact, demo, or “learn more” form submissions: Kept for 24 months from your last interaction with us, or until you ask us to delete it, whichever comes first.
- Blog, newsletter, or job alert subscriptions: Kept until you unsubscribe using the link in any email we send.
- Customer data processed through DCKAP Integrator or DCKAP EDI: This data belongs to you, not us. We process it only while your account is active or as specified in your services agreement, and we delete it within 60 days of contract termination unless we’re legally required to retain it longer.
- Website usage and analytics data: Kept for 14 months, then automatically deleted or anonymized.
- Event and webinar registrations: kept for 24 months after the event, mainly so we can follow up with related resources.
Once we no longer need your data for the reason we collected it, we delete it or anonymize it so it can no longer be tied back to you.
Want it deleted sooner? Email privacy@dckap.com with “Delete My Data” in the subject line, and we’ll take care of it within 30 days. If there’s a legal reason we can’t delete something right away, for example, we’re required to keep billing records for tax purposes, we’ll explain why.
To protect your personal information from unauthorized access, disclosure, alteration, or destruction, DCKAP uses a combination of technical and organizational safeguards, including encryption of data in transit and at rest, strict access controls, and regular security assessments. For more detail on our security practices, visit our Trust Center.
Cookies and web beacons
Like most websites, we use cookies (small files stored on your device) and web beacons (invisible tracking images) to understand how visitors use our site, including during chat sessions with our team. This includes your IP address, when you visited, and what pages you viewed.
If you arrive at our site through an affiliate or promotional link, we store that in a session cookie so we know where you came from.
You don’t need cookies enabled to browse our site, and you can turn them off in your browser settings. That said, some pages that require login won’t work properly without a mandatory session cookie – you’re free to delete that cookie once you’re done. Web beacons, used by a third-party analytics provider on our behalf, can’t be turned off individually, but blocking cookies limits what they can collect.
Do Not Track signals: Some browsers let you send a “Do Not Track” signal. There’s no consistent industry standard for how websites should respond to this yet, so our site doesn’t currently act on those signals.
Children’s privacy
Our website and products aren’t directed at anyone under 16. We don’t knowingly collect personal information from children. If you believe a child has given us personal data, email privacy@dckap.com and we’ll delete it.
Third-party links
Our site sometimes links to other websites or features third-party products and services. Those sites have their own, separate privacy policies, and we’re not responsible for their content or practices. If you spot something concerning on a linked site, we’d appreciate you letting us know.
Your rights
Wherever you’re located, you generally have the following rights over your personal data, and we honor them regardless of jurisdiction:
- Right to be informed: This policy is meant to give you full visibility into how we handle your data.
- Right of access: You can ask what personal data we hold on you, free of charge, and we’ll respond within one month.
- Right to rectification: If something’s inaccurate or incomplete, we’ll fix it.
- Right to erasure: You can ask us to delete your data where there’s no compelling reason for us to keep it.
- Right to restrict processing: You can ask us to pause how we use your data.
- Right to data portability: You can request your data in a format that lets you take it elsewhere.
- Right to object: To processing based on legitimate interest, to direct marketing, or to processing for research/statistical purposes.
- Rights related to automated decision-making and profiling, where applicable.
To exercise any of these, email privacy@dckap.com.
California residents
If you live in California, the California Consumer Privacy Act (CCPA) gives you some additional, specific rights:
- Right to know what personal information we’ve collected, used, and disclosed about you in the past 12 months, and to request a copy of it.
- Right to delete your personal information, subject to certain legal exceptions.
- Right to opt out of sale or sharing of your personal information. To be clear — we do not sell your personal information, and we don’t share it for cross-context behavioral advertising either.
- Right to correct inaccurate personal information.
- Right to non-discrimination — we won’t charge you more or give you worse service for exercising any of these rights.
To exercise any of these rights, email privacy@dckap.com with “CCPA Request” in the subject line, along with your name and enough detail for us to locate your information. We’ll respond within 45 days. If we need more time, we’ll tell you why and give you a revised timeline.
Changes to this policy
We update this policy from time to time as our practices, products, or the law changes. When we do, we’ll post the revised version here with an updated “Last Updated” date, and for material changes, we’ll do our best to notify you directly. We’d encourage you to check back periodically.
Questions or concerns
If anything in this policy doesn’t make sense, or you want to exercise any of the rights above, reach out:
Email: privacy@dckap.com, General inquiries: info@dckap.com, Support: support@dckap.com
We’ll do our best to sort out any concern you raise.
Last Updated: August 7, 2026.
