Privacy Policy

Last updated: 8 September 2025

Controller: NEW IT INVESTMENTS LTD (company no. 11140360), registered office: 5 Stratford Place, London, W1C 1AX, United Kingdom. The Company is the controller of personal data processed via the Website and Services.

Contact: info@newitinvestments.com, postal address as above.

Scope

This Policy explains how we collect, use, disclose and protect personal data of visitors and users of our pdfgo.online and related services for converting, compressing and transforming files (the "Services").

Data We Process

  • Account & Contact Data (if you register or contact us): name, email, password hash, company, role, phone, communication history.
  • Operational Data (Uploaded Files): files and their metadata you upload to use the Services; output files generated by the Service.
  • Usage & Technical Data: IP address, device identifiers, browser/OS, time zone, language, pages viewed, links clicked, performance events, crash logs.
  • Payments Data (if applicable): order ID, subscription plan, status. Card data is processed by our payment providers; we do not store full card numbers.
  • Cookies & Similar Technologies: essential cookies for sign‑in and security; optional analytics/advertising cookies (only with consent where required).

Purposes and Legal Bases (UK GDPR)

  • Provide the Services (create/convert/download files, account management, support): performance of a contract.
  • Security & Abuse Prevention (fraud detection, rate limiting, incident response): legitimate interests (ensure security and integrity).
  • Analytics & Product Improvement (aggregate usage metrics, A/B tests): legitimate interests and/or consent where required.
  • Payments & Billing: performance of a contract and legal obligation.
  • Compliance & Enforcement (respond to lawful requests, enforce Terms): legal obligation and legitimate interests.
  • Marketing Communications (newsletters, offers): consent (you can opt out at any time).

Processing of Uploaded Files

Ephemeral Processing by Default. Uploaded files are processed automatically and deleted within 24 hours after conversion; output files are stored for 48 hours for your download, then deleted. You can delete files earlier via the delete button on your dashboard.

No Manual Review unless you ask our support to assist with a file (then we may access it only with your explicit request and for a limited time).

Malware & Abuse Scans may be performed automatically. Files suspected of abuse may be retained longer to investigate incidents.

Sharing of Personal Data

We share data with:

  • Service Providers / Sub‑processors: hosting (e.g., AWS/Google Cloud), CDN, email service, analytics, payments. We contractually require appropriate safeguards and confidentiality.
  • Affiliates (if any) for internal administration on a need‑to‑know basis.
  • Authorities/Third Parties where required by law, to protect rights, safety and property, or in connection with a merger/acquisition.

We do not sell personal data.

International Transfers

Where data is transferred outside the UK/EEA, we rely on adequacy regulations, standard contractual clauses and additional safeguards as needed. Copies of relevant safeguards are available on request.

Retention

  • Account data: while your account is active and for 2 years after closure for tax/audit/legal purposes.
  • Support communications: 3 years.
  • Logs/analytics: 24 months.
  • Files: see Processing of Uploaded Files above. We delete or anonymise data when no longer needed.

Your Rights (UK GDPR/Data Protection Act 2018)

You have the right to access, rectify, erase, restrict, object, data portability, and to withdraw consent (where applicable). You can also lodge a complaint with the ICO (ico.org.uk) or your local authority. To exercise rights, contact info@newitinvestments.com.

Children

The Services are not intended for children under 16. We do not knowingly process children's data.

Security

We apply administrative, technical and physical safeguards, including encryption in transit, encryption at rest for stored files, access controls, least‑privilege policies, secure development practices and regular vendor reviews. No system is 100% secure.

Cookies

We use:

  • Strictly Necessary Cookies (authentication, security, load balancing) – always on.
  • Analytics Cookies – used only with consent.
  • Advertising Cookies (if any) – used only with consent.

Manage settings via our Cookie Banner/Preferences Center.

Third‑Party Links

Our Site may contain links to third‑party sites. Their privacy practices are governed by their own policies.

Changes to this Policy

We may update this Policy periodically. Material changes will be notified via the Site or email.