Privacy Policy

This policy explains how [COMPANY NAME] ("we", "us") handles information when you use PDFCentral. We follow the Data Protection Act, 2019 (Kenya) and its regulations.

1. Who is responsible for your data

The data controller is [COMPANY NAME], [ADDRESS], Kenya. Email: [EMAIL]. [Insert registration number with the Office of the Data Protection Commissioner, if applicable.]

2. Your documents

• Most tools never upload your files. Merge, Split, Re-organize, Rotate, Compress, Watermark, Add Page Numbers and Protect/Unprotect run entirely inside your web browser, on your device. Your files are never sent to us or anyone else.
• The Convert tool is the only exception. To turn a PDF into Word, Excel or PowerPoint, the file is sent over an encrypted connection to a third-party conversion provider, [PROVIDER NAME]. The file is processed in memory, the converted file is returned to you, and both are deleted immediately afterwards. We do not keep a copy, and we do not record file names or contents.
• We do not store, read or share your documents. We have no access to files processed in your browser. Files sent through Convert are not viewed by any person and are not used for any other purpose.
• Passwords you type into the Protect tool stay in your browser's memory and are never stored or sent anywhere.

3. Analytics and cookies

PDFCentral does not use analytics, advertising or tracking cookies, and does not build profiles of visitors. Our hosting provider may keep standard technical server logs (such as IP address, time and page requested) for a short period for security and to keep the service running. [Update this section if analytics are added.]

4. Personal data we may process

• Technical data (IP address, browser type) in server logs — lawful basis: our legitimate interest in keeping the service secure.
• For the Convert tool, your IP address may be used briefly to prevent abuse (for example, limiting the number of conversions per hour).
• If you email us, your name, email address and message — used only to reply to you.

We do not sell personal data. Where a provider processes data outside Kenya, we only do so with appropriate safeguards as required by the Act.

5. How long we keep it

Documents: not kept at all. Server logs: no longer than [NUMBER] days. Emails: as long as needed to deal with your request.

6. Your rights under the Data Protection Act, 2019

You have the right to:

• be informed of how your personal data is used;
• access your personal data held by us;
• object to the processing of all or part of your personal data;
• correct false or misleading data;
• delete false, misleading or unlawfully processed data;
• restrict processing, and request data portability where applicable;
• not be subject to decisions based solely on automated processing.

To use any of these rights, email [EMAIL]. We will respond within the period required by law.

7. Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya — see www.odpc.go.ke.

8. Security

All connections use HTTPS. Because most processing happens on your device, keep your device and browser up to date.

9. Changes

We may update this policy. The "last updated" date above shows the latest version.