Privacy Policy

This Privacy Policy explains how PDFMadeSimple ("we", "us", "our") collects, uses and protects your personal data when you use our website at pdfmadesimple.com. We are committed to protecting your privacy and complying with the UK GDPR and the Data Protection Act 2018.

1. Data Controller

PDFMadeSimple is the data controller for personal data collected through this website. You can contact us at support@pdfmadesimple.com with any privacy-related questions.

2. What Data We Collect

We collect the following types of personal data:

• Account and billing data: your name, email address and payment information when you subscribe to our service. Payment card details are handled directly by our payment processor and are not stored on our servers.
• Usage data: IP address, browser type, device type, pages visited and actions taken on the site, collected automatically via server logs and analytics tools.
• Communications: if you contact us by email or through our contact form, we retain those messages in order to respond to your enquiry.
• Cookies: we use cookies and similar technologies as described in our Cookie Policy.

Files you upload: documents and images you upload to our conversion tools are processed solely to perform the requested conversion. We do not read, analyse or retain your files beyond what is necessary for the conversion. All uploaded files and converted output files are automatically and permanently deleted from our servers within 24 hours.

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide and operate our PDF conversion services
• To process payments and manage your subscription
• To send you transactional emails such as payment confirmations and subscription notices
• To respond to your support enquiries
• To improve our website and tools through anonymised usage analytics
• To comply with our legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance: processing necessary to provide the service you have paid for
• Legitimate interests: fraud prevention, security monitoring, and improving our services
• Legal obligation: where we are required by law to retain certain records
• Consent: for non-essential cookies, where you have given your consent via our cookie banner

5. Data Sharing

We do not sell your personal data. We share data only with trusted third-party service providers who help us operate our business, including:

• Our payment processor, for billing and fraud prevention
• Our hosting provider, for server infrastructure
• Analytics services, using anonymised or aggregated data

All third-party providers are contractually required to process data only as instructed and to maintain appropriate security standards.

6. Data Retention

We retain personal data for as long as necessary for the purposes described in this policy:

• Uploaded files: deleted automatically within 24 hours of processing
• Account and billing records: retained for 7 years to meet legal and accounting obligations
• Support communications: retained for 2 years
• Usage logs: retained for 90 days

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access: the right to obtain a copy of the personal data we hold about you
• Rectification: the right to have inaccurate data corrected
• Erasure: the right to request deletion of your data in certain circumstances
• Restriction: the right to request that we limit processing of your data
• Portability: the right to receive your data in a structured, machine-readable format
• Objection: the right to object to processing based on legitimate interests
• Withdraw consent: where processing is based on consent, the right to withdraw it at any time

To exercise any of these rights, contact us at support@pdfmadesimple.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss or misuse. All data transmitted to and from our service is encrypted using SSL/TLS. File uploads are processed securely and permanently deleted from our servers within 24 hours of conversion.

9. International Transfers

Your data may be processed by service providers located outside the UK. Where this occurs, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements, including standard contractual clauses.

10. Cookies

We use cookies on our website. For full details of the cookies we use and how to manage your preferences, please read our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised. We encourage you to review this policy periodically.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@pdfmadesimple.com.