Three documents, three different readers.

If you use ClockIn Dock at work

Staff and managers sign in under the Terms of Service. They are short and they are served where you can read them before you agree — the whole point of a consent line on a sign-in screen is that the documents can be read first, without an account.

• Your account is yours alone: no sharing a code, no clocking in for anyone else.
• Your attendance record is a business record. Decisions recorded against you are made by a named person, carry a reason where one is required, and are kept in an audit trail you can ask to see.
• A dock, a chip or a network failing never means you lose pay for time worked. There is always a manual route.
• Nothing in them reduces your statutory employment rights, including your right to be paid for time you worked.
• They carry a date, and your acceptance is recorded against the version you were shown. Signing in after a change is how the new version is accepted — the sign-in screen links both documents so you can read them first — and a material change is announced through the notice board or your manager rather than only moving the date. It is not a pop-up, so if you stay signed in you may not see a revision until you next sign in.

Read the Terms of Service →
Acceptable use · Staff privacy notice · Support

If you are buying ClockIn Dock for your venues

ClockIn Dock is sold to businesses, so every order is a business purchase. Your agreement is the customer terms, and there are two ways to buy: the NFC tap plan online, by card, from the basket on our home page, and the Dock plans (the 8-bay and 16-bay lockers) on an order form. These hold either way:

• Monthly, per venue, no minimum term unless something else is expressly agreed in writing.
• Cancel at any time — no notice period, no tie-in. Your service runs to the end of the month you have already paid for, or to the end of your free months if you are in them, and you are not charged again. Part months are not refunded, unless you signed an order form before 23 October 2026 (below).
• The NFC chip is sold, not leased. Once its joining fee is paid, or taken off by a discount code, it is yours, and nothing is returned when you cancel.
• The locker is leased, never sold. It stays our property throughout and comes back to us when the subscription ends. Loss and damage beyond fair wear and tear are charged at the reasonable repair or replacement cost — there is no fixed penalty fee.
• You decide about your staff, not us. ClockIn Dock supplies records and technical checks; it makes no employment decisions, and a location result must never by itself decide someone's pay or discipline.

Buying the NFC tap plan online. These terms are dated 23 October 2026. You choose how many venues in the basket and pay on Stripe's own secure payment page. When you tick "I agree to the customer terms" and pay, these are the terms you agree to, as well as the ones above that hold either way:

• £49 per venue per month, plus a one-off £19.99 joining fee per venue, both including VAT. The joining fee covers that venue's NFC chip and its postage.
• Your first payment is taken when you pay: the first month for each venue, plus the joining fees. After that, the same card is charged on the same day every month until you cancel: the day you pay or, with free months, the day they end. If that day is the 29th, 30th or 31st, a shorter month is charged on its last day. Before you pay, the checkout shows what you pay today, what you pay next and on what date.
• One discount code per order. A code can take a percentage or an amount off the monthly price, take off the joining fee, or give you free months. The basket shows what your code changes before you pay. With free months, the joining fee is still taken when you pay unless the code takes it off, and the first monthly payment is taken when the free months end, on the date the checkout shows.
• Card or a digital wallet such as Apple Pay or Google Pay, handled by Stripe. Your card details go to Stripe and never reach ClockIn Dock: we never see or store your card number. Stripe emails you a receipt for each payment, with the VAT shown.
• To cancel, use the Billing button in your ClockIn Dock dashboard, which opens Stripe's billing page, or email us at hello@clockindock.com. The same button lets you change your card and download your receipts.
• Once Stripe confirms your payment, your account is set up and you choose your password. We set up each venue for you, pair its NFC chip to it and post the chip to the address you gave. If your email address already signs in to ClockIn Dock, no second account is made with it, and we get in touch to set up the new one.

Buying on an order form. The Dock plans, and anything else agreed with us directly, are bought on an order form. It carries the things that differ per customer — the plan and price for each site, the hardware on lease, the warranty terms — and the customer terms carry the rest. Your signed order form and the customer terms are your agreement.

• Bank transfer, invoiced monthly, unless your order form says otherwise.
• To cancel, email us at hello@clockindock.com. No notice period applies here either.
• Signed your order form before 23 October 2026? You keep the cancellation and refund term in the agreement you signed.

Your staff's data

Two roles, and the distinction matters. For your workforce data — attendance, shifts, location evidence — you are the data controller and we are the processor, acting on your instructions. A Data Processing Agreement — the Article 28 terms — sets out how we handle that data for you. On an order form it is completed with you and forms part of the agreement you sign; if you bought online, ask us for it at privacy@clockindock.com. For our own records — your contact details, billing, support correspondence, security logs — we are the controller.

• Employee data is never sold, never used for advertising, and never used to train AI models.
• Every third party that touches personal data in the running service is recorded in a subprocessor register. It names each one, what it receives and where it sits, and it carries the date it was last checked. Ask for it.
• Before you roll it out, your staff need to be told what it does. The privacy notice and the DPIA exist so you are not writing that yourself.

Company privacy policy · What the app reads

Found a security problem?

We would rather hear about it. The disclosure policy sets out what to send, what we do with it, and the safe-harbour expectations for researchers — including the one that matters most here: this system pays real people, so please do not alter an attendance or pay record to prove a point.

Vulnerability disclosure policy →