HR Dock ("we", "us", "our") is an HR management platform built for organisations operating in Egypt, provided by:

HR Dock
Egypt
hello@hr-dock.com

For privacy-related enquiries, email us and identify the request as a privacy enquiry.

• Account Data: Information you provide to create and manage your HR Dock workspace (company name, admin name, email, billing details).
• Employee Data: Personal data about your employees that you upload or generate through the platform (names, national IDs, salaries, attendance records, leave balances, performance data, etc.).
• Usage Data: Technical data about how you interact with the platform (page visits, feature usage, device info, IP address, browser type).
• Controller: The Organisation that determines the purposes and means of processing Employee Data — that's you, not HR Dock.
• Processor: HR Dock acts as a data processor on your behalf for Employee Data.

3.1 Account, Billing & Payment Data

When you register or subscribe, we collect company name, administrator name, work email address, phone number, billing address, invoices and payment records.

Online payments are processed by our licensed payment provider Paymob (Accept for Technology and Electronic Payment Services). Card details are entered only on Paymob's secure page; HR Dock never receives or stores full card numbers. We receive only the payment result, the transaction reference, the card brand and the last four digits, which we keep with the invoice. We share with Paymob only the details needed to process and verify the payment (payer name, email, phone and invoice amount).

3.2 Employee Data (on your behalf)

As the data controller, you are responsible for the Employee Data you enter into HR Dock. This may include: full names, national ID numbers, dates of birth, job titles, departments, salary and compensation details, attendance and leave records, performance evaluations, disciplinary records, benefit enrolments, and contract documents.

We process this data only on your documented instructions.

3.3 Usage & Technical Data

We automatically collect: IP addresses, browser and device information, pages visited, features used, session durations, and error logs. This helps us maintain platform stability and improve the Service.

3.4 Communications Data

If you contact our support team, we retain those communications to resolve your enquiry and improve our service quality.

3.5 Mobile App Data

The HR Dock mobile app lets employees and managers use the platform from a phone. In addition to the data described above, the app handles the following:

• Location (only at clock-in and clock-out): When an employee clocks in or out, the app asks for permission to read the device's location once, converts it to a readable place name using the device's operating-system location services, and sends the coordinates and place name to HR Dock, where they are stored with that attendance record and made available to the employer. The app does not track location in the background or between clock-in and clock-out events. If location permission is declined, the employee can still use the rest of the app.
• Push notification token: A device token is stored against the user account so that notifications (for example leave decisions and announcements) can be delivered. It is removed when the user signs out.
• Biometric unlock: If the user turns it on, fingerprint or face unlock is performed by the device's operating system. HR Dock does not receive, collect, or store biometric data.
• Session data: A sign-in token and basic profile details are kept in the device's secure storage to keep the user signed in, and are deleted on sign-out.

The employer remains the data controller for data processed through the mobile app. Requests to access, correct, or delete that data follow Section 9.

We use collected data to:

• Provide, maintain, and improve the HR Dock platform.
• Process payroll calculations and Egyptian NOSS & tax compliance on your behalf.
• Issue invoices, process payments and send payment receipts.
• Send service-related notifications (downtime alerts, security notices, billing reminders).
• Respond to support requests and troubleshoot issues.
• Detect and prevent fraud, security breaches, and abuse.
• Comply with legal obligations under Egyptian law.
• Send product updates and marketing communications — only with your consent, and you may opt out at any time.

We do not use Employee Data for marketing, profiling for our own benefit, or any purpose outside providing the Service to you.

HR Dock processes Employee Data as a data processor under your instructions as the data controller. This means:

• You are responsible for having a lawful basis (e.g. employment contract, legal obligation) to process your employees' personal data.
• You are responsible for informing your employees that their data is processed on the HR Dock platform.
• HR Dock will assist you in responding to data subject requests (access, correction, deletion) within the platform.
• We will notify affected customers of a qualifying personal data breach as required by applicable law and the relevant customer agreement.

Certain categories of Employee Data may be considered sensitive (e.g. health-related leave, disciplinary records). You must ensure you have the appropriate legal basis before entering such data into the platform.

Data is processed using managed cloud hosting and database providers. Hosting providers and regions may change as the Service evolves, subject to applicable contractual and legal safeguards. Current sub-processor information is available to customers on request.

• Encrypted HTTPS connections for data in transit.
• Role-based access controls and tenant-level data isolation.
• Restricted administrative access and security logging.
• Managed backups and recovery procedures appropriate to the subscribed service.

Despite these measures, no system is completely secure. We encourage you to use strong passwords and enable MFA.

• Active accounts: Data is retained for the duration of your subscription.
• After termination: Export and deletion periods follow the signed customer agreement, applicable law, and technically necessary backup-retention cycles.
• Invoices and payment records: Retained for at least 18 months from the transaction and for as long as tax, accounting and payment-network rules require.
• Security and usage logs: Retained only as long as reasonably necessary for security, support, and service operation.

We do not sell your data. We share data only with:

• Sub-processors: Third-party services we use to operate the platform — cloud hosting, payment processing (Paymob), error monitoring and email delivery. All sub-processors are bound by data processing agreements and provide equivalent data protection guarantees.
• Legal authorities: When required by Egyptian law, court order, the Central Bank of Egypt or card networks, or to protect HR Dock's legal rights.
• Business transfers: In the event of a merger or acquisition, your data may be transferred. We will notify you in advance and you retain the right to export your data.

Under the Egyptian Personal Data Protection Law No. 151 of 2020 and applicable regulations, you and your employees have the following rights regarding personal data:

• Access: Request a copy of personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your data (subject to legal retention obligations).
• Portability: Export your data in a machine-readable format (CSV/Excel) at any time from within the platform.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email us and identify the request as a privacy enquiry. We will respond within the period required by applicable law.

• Essential cookies: Required for authentication and session management. Cannot be disabled.
• Optional cookies: If analytics or marketing cookies are introduced, the website will provide an appropriate notice and consent choices before they are used where required.

The HR Dock platform is intended for use by businesses and is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes via email or in-platform notice at least 14 days before they take effect. The updated policy will be posted on this page with the revised effective date.

HR Dock
Egypt
hello@hr-dock.com