This policy is designed to be accessible, understandable, and easy to read
without legal and other jargon. If you have any comments, questions, or
concerns about this policy, please get in touch with us by emailing
hello@pdfblaze.com. This document will have slight changes made to it
occasionally. Please refer back to it from time to time.
Data Protection
This policy governs the use and protection of personal data of people
(‘users’, ‘you’, etc.) using PDFBlaze. Data protection refers to the
responsible security of personal data and transparency in the way we
handle and process such data. Personal data is information that - on its
own or in conjunction with other data - can be used to identify an
individual person.
Complaints
If you would like to complain about this policy, or how we may have
treated a request from you with respect to data protection, then please
get in touch with us in the first case so that we can help rectify the
problem. In other cases, you may also want to get in touch with the
Information Commissioner's Office (ICO), who may be able to provide you
with more information and support. Their website is at https://ico.org.uk.
What data does PDFBlaze collect?
When visiting and browsing our website
When you visit us using a web browser, we collect some data about your
computer and the way our services are used by you, even if you don't have
an account. We do not collect your name or other personal details about
you at this stage, but we may process information such as your computing
device’s country, and details about your browser and where you visited us
from. We process this data for observing aggregated use of our services,
so that we can better understand how to improve our services for their
audiences. The legal basis for processing this data is a legitimate
interest in recording aggregated analytics data for improvement purposes
and to see how often people visit our website.
When sending us an email
Sometimes you may wish to send an email to us or reply to an email we have
sent you. Any emails received will be treated in confidence and kept
securely. Strong passwords and multi-factor authentication is implemented
on all email accounts that can receive such emails.
When signing-up for a PDFBlaze account
PDFBlaze allows you to register for an account. This is the primary way by
which we collect personal data from you, since such data is needed in
order to identify you when you want to login and use these services. We
may also use your email address to update you on platform updates and
notifications, which you can control. When signing-up we may collect an
email address, username, and password. Once registered, you can choose to
fill in additional profile data, such as social media links, a bio, and
more. We ask for consent to this policy when creating an account, and the
legal basis for processing this data is a legitimate interest in being
able to provide services to you.
When using PDFBlaze
Content and any other data you add to or upload to PDFBlaze as part of its
standard use are also collected. This is for the purposes of providing
services to you. To use PDFBlaze, you will have provided consent to this
policy during the registration process, and the legal basis for processing
this data is a legitimate interest in being able to provide core services
to you.
Who has access to your data?
Staff operating PDFBlaze can view accounts and account data. This is with
the exception of passwords, which are fully encrypted. In order to provide
access to our services to users, we also sometimes need to pass pieces of
your personal data to third-party services (known as ‘data processors’ for
the purposes of the GDPR). We only ever do this when we need to, and only
send the minimum amount of information required. We ensure that the
processors' own privacy policies follow suitable data protection
practices. Our current data processors are: Mailgun (for sending mail). We
provide Mailgun with your email address so that the mail can be delivered.
How long do we keep your data for?
We keep your account data (email and/or username) and content produced by
your account (e.g. content, projects) for as long as your account is
active. You can fully and irreversibly delete your account (and its
associated data) at any time. Please note that data held in backup systems
may be held for up to 30 days after such an event before it too is
deleted.
Where is your data stored?
Our databases and servers are all based in the UK, and so your data will
be stored and processed within the UK. We use Mailgun's EU based servers
for transmitting mail.
How do we protect your data?
All data is encrypted during transmission (e.g. between your device and
our servers, and between our servers), and when stored ("encrypted at
rest"). Our servers are well-protected with industry standard security
measures.
Child safety
Children under the age of 16 are not allowed to use PDFBlaze or to
directly provide us with personal data. As such, we do not knowingly store
or process personal data relating to children under the age of 16.
Your rights
We take the handling of personal data very seriously, and we want to make
sure that you are aware of your rights under this policy. If your wish to
invoke your rights requires us to complete some action on your behalf (for
example, to stop processing your data), then we will always deal with your
request in total confidence, at no cost, and as soon as we can (within 30
days of receiving your request).
Right to be informed
You have a right to know about how we handle and process your personal
data. This Privacy Policy aims to fulfil this Right, but please email us
if you have further questions or concerns.
Right of access
You have a right to know if we store or process your personal data and to
obtain access to the personal data about you that we, or any data
processors that process data on our behalf, have about you. To obtain this
information, please email us.
Right to rectification
You have a right to have personal data we keep or process about you
rectified. If data we have about you is incorrect or incomplete, then
please email us with details of any corrections to be made.
Right to erasure
You have the right to have all of your personal data erased, which will
prevent any further storage or processing any of your personal data on our
behalf, and will sometimes result in a necessary deletion of any accounts
you hold with us. In many cases, deleting any accounts you hold with us
will erase your details. However, if you wish to make sure of this, then
please email us with details of your request.
Right to restrict processing
You have the right to halt the processing of your personal data in the way
that you choose. For example, you may wish to maintain an account with us
but no longer want us to use one of our data processors to process your
data. To restrict the processing of your personal data, please email us
with details of your request.
Right to data portability
You have the right to obtain personal data we have or process about you in
a format that is useful to you or to another service you would like to use
with your data. We are happy to provide data to you in formats including
CSV, JSON, PDF, Microsoft Word, and more. Please email us with details of
your request.
Right to object
You have a right to object to the processing of your personal data in
particular ways. For example, for marketing or profiling purposes. If you
would like to object to our processing of your data, then please email us.
Rights related to automated decision making including profiling
We do not use personal data for automated decision making, and does not
use such data for profiling users. Additionally, any processing done for
analytics and reporting is done on an entirely anonymous basis. For more
information or if you have any concerns, please email us.
