Privacy Policy

This Privacy Policy explains what personal data SuperFastFiles ("SuperFastFiles", "we", "us" or "our") collects when you use the website at superfastfiles.com and its tools, why we collect it, who else receives it, where it is processed, how long it is kept, and what rights you have over it. It is intended to give you the information that data protection laws require, including the EU General Data Protection Regulation (the "GDPR").

Words such as "Service", "Site", "Tool", "File", "Output" and "Account" have the meanings given to them in our Terms & Conditions.

1. Summary
2. Who We Are
3. How Tools Handle Your Files
4. What We Collect and Why
5. Legal Basis for Processing
6. Who Receives Your Data
7. International Transfers
8. How Long We Keep Data
9. Cookies and Similar Technologies
10. Your Rights
11. Deleting Your Account
12. Children's Privacy
13. Security
14. Changes to This Policy
15. Contact Us

1. Summary

Your Files are used only to run the Tool you choose. Processing is automated. We do not sell your Files or your personal data, and we do not use your Files for advertising or to train AI models. Section 3 explains how each Tool handles Files, including what the translation provider used by Translate Document may do with text.
An Account is optional, except for Translate Document. If you create one, we keep your email address and what is needed to sign you in (Section 4.2).
The Site uses Google's analytics and advertising services, which use cookies, if you accept advertising cookies (Sections 4.5 and 9).
Personal data is processed in several countries, including in the European Union and the United States (Section 7).
You have rights over your personal data, and you can exercise them by email (Section 10).

2. Who We Are

SuperFastFiles operates the Site and is the data controller for the personal data described in this policy. You can contact us about anything in this policy at support@superfastfiles.com.

The providers described in Section 6 process personal data on our behalf, as our service providers. Some of them, such as Google, Dropbox and the machine translation provider, also use certain data for their own purposes, as independent controllers under their own privacy policies.

3. How Tools Handle Your Files

Each Tool handles Files in one of the three ways below. If the way a Tool works changes, we will update this section.

3.1 Tools that run in your browser

PDF Merger, File Organizer (for PDF and spreadsheet files), Sign PDF, PDF to Excel, PDF to JPG, PDF to PNG, JPG to PDF, PNG to PDF, JPG to PNG, PNG to JPG and WebP to PNG process your File in your web browser, on your device. The File is not uploaded. This also applies to the signature, date and image you add with Sign PDF, and to its Signature Certificate.

Some of these Tools download program code from a public content delivery network (Section 6). Your File is not part of that download.

3.2 Tools that use our servers

Video Converter, Audio Extractor, Archive Converter, Repair PDF, Redact PDF and Translate Document upload your File over an encrypted (HTTPS) connection to servers we rent in Amsterdam, the Netherlands, where it is processed automatically. The File is kept while the page is open, so that you can download the Output. The File and the Output are deleted automatically about five minutes after the page is closed (Section 8). For Translate Document, this includes your edits to the translation.

3.3 Tools that use other services

Document conversion. PDF to Word, Word to PDF, Excel to PDF, PowerPoint to PDF, PDF to PowerPoint, Compress PDF, Password Protect PDF, Unlock PDF and Word files in File Organizer send your File to a document conversion provider, through our website hosting provider, which does not store it. The Output comes back to you through our servers in Amsterdam, or, if they cannot take it, through our website hosting provider (Section 8). Translate Document also uses this provider to turn a PDF or .doc file into a Word document. A password you enter in Password Protect PDF or Unlock PDF is sent with the File and used only for that File; we do not keep it. The provider may process the File in the European Union, the United Kingdom, the United States, Canada, Singapore, Japan or Australia, and states that it deletes the File and the Output within three hours.

Machine translation. Translate Document sends the text of your document, not the file, to a machine translation provider in Europe. The provider may keep the text and use it for its own purposes, such as improving its services. If you do not want this for a document, do not use this Tool for it.

Google Drive and Dropbox. A File you import from Google Drive or Dropbox is downloaded into your browser and then handled like any File chosen from your device (Section 4.3).

4. What We Collect and Why

We collect personal data by automated means, through the Site, the Tools, our servers and the third-party services described in this policy, and directly from you when you create an Account or write to us. Section 5 sets out the legal basis for each purpose.

4.1 Files and what you enter into the Tools

What: the Files you choose, and what you enter into a Tool, such as a password, a signature, the areas you mark for redaction or your edits to a translation. A File may contain personal data about you or about other people. If it contains personal data about other people, you are responsible for having a lawful basis for processing it with the Service (Section 11.1 of our Terms & Conditions).

Why: only to perform the Tool you have chosen and to give you the Output. Processing is automated, and nobody at SuperFastFiles views, reads or listens to your Files. We do not use them for advertising or profiling, we do not use them to train AI models, and we do not sell them. We do not ask for special categories of personal data, such as health information. If a File contains any, they are processed only as needed to perform the Tool and are deleted in the same way as the rest of the File.

4.2 Account information

What: if you create an Account with an email address, we keep your email address and your password. Our authentication provider stores the password only as a one-way hash, so it cannot be read back, even by us. If you sign in with Google, Google gives us your name, your email address, the identifier of your Google account and, if your Google account has one, the address of your profile picture. We also keep the date your Account was created, how you sign in and when you last signed in, and our authentication provider keeps technical records of each sign-in and session, such as the IP address and the type of browser and device used.

Why: to create and run your Account; to sign you in and keep you signed in; to show your name and email address in the Site's header and on your Account page; to let you change your password; to make features such as importing from Google Drive and Dropbox available to you; to send you the emails your Account needs, such as confirmation links, password reset codes and important notices about your Account or our terms; and to keep Accounts secure and prevent misuse. We do not use your email address for marketing.

Translate Document: it is available only to signed-in Account holders. When you upload a document to translate, or start a translation, the page sends our processing servers a token from your session, and they ask our authentication provider which Account it belongs to. To apply the daily limit, our processing servers keep your Account's identifier and the number of characters translated for it that day (UTC). They do not keep the text with it, and the count is deleted when the day ends.

The sign-in pages show Google's own "Sign in with Google" button, which loads code from Google, so Google receives information about your visit to those pages even if you do not use the button.

4.3 Importing from Google Drive and Dropbox

Importing is available only when you are signed in, and only when you ask for it.

Google Drive. When you choose to import from Google Drive, Google asks you to allow SuperFastFiles access that is limited to the files you pick in Google's own file picker. We cannot see, list or open any other file in your Google Drive, and we never receive your Google password. What we receive is:

a temporary access permission from Google, which is kept in your browser tab for no longer than one hour;
the Files you pick, which are downloaded from Google directly into your browser; and
the email address of the Google account you used, which is kept in your browser so that Google can suggest the same account the next time you import, instead of asking you to choose one.

None of this is sent to our servers. An imported File then goes only where the Tool you are using sends any File, as described in Section 3. We do not upload, change or delete anything in your Google Drive, and we use the information we receive from Google only to provide the import you asked for. You can withdraw the access at any time in your Google Account, under its third-party connections.

Dropbox. When you choose to import from Dropbox, Dropbox's own file chooser opens and may ask you to sign in to Dropbox. Dropbox then gives your browser a temporary link to each file you pick, and the file is downloaded through that link directly into your browser. We do not receive access to your Dropbox account, the link is not sent to our servers, and the File then goes only where the Tool you are using sends any File.

Why: to let you bring a File into a Tool from your cloud storage instead of from your device.

For signed-in visitors, tool pages load Google's and Dropbox's code in advance, so that the import buttons work straight away. Your browser therefore contacts Google and Dropbox when such a page loads, and they receive the technical information described in Section 4.4.

4.4 Technical information

What: when your browser loads a page or sends a File, the services that receive the request automatically receive technical information about it, such as your IP address, your browser and device type, operating system and language, the page or address requested, the page you came from, and the date and time. In particular:

our website hosting provider receives every request for the Site and keeps technical logs, and it measures how quickly our pages load and respond in visitors' browsers;
our processing servers keep an access log of the requests they receive, recording the IP address, time, address requested and browser of each, and hold IP addresses in memory for a few minutes to limit how many requests a single address can make; and
the providers whose code our pages load, such as Google, Dropbox and content delivery networks, receive the same kind of information from your browser.

Why: to deliver the Site and the Tools, keep them secure, prevent abuse and overload, find and fix faults, and keep the Site fast.

4.5 Analytics and advertising

If you accept advertising cookies (Section 9.4), the Site uses the following Google services on its pages. Google receives the technical information described in Section 4.4, and uses the cookies and similar technologies described in Section 9.

Google Analytics tells us how the Site is used: for example, which pages are visited, how visitors arrived, what kind of device and browser they use, and their approximate location, derived from the IP address. We use it to understand how the Site is used as a whole, not to identify you.
Google Ads conversion tracking tells us whether people who see or click our ads on Google go on to visit and use the Site. Google may also use this information to show our ads to people who have visited the Site before.
Google AdSense is how we intend to show ads on the Site, to keep the Tools free. Its code is loaded, with Google's other advertising code, only if you accept advertising cookies, and no ads are shown at the date of this policy. Once loaded, the code runs even though no ads are shown, so Google receives information about your visit and may use cookies, including to check that traffic to the Site is genuine. Once ads are shown, Google and its partners will use cookies to show and measure ads, including ads based on your previous visits to the Site and to other websites (personalized ads). Section 9.4 explains how to turn personalized ads off.

Google uses the information it collects through these services under its own privacy policy, partly for its own purposes. Google explains how in How Google uses information from sites or apps that use its services.

Why: to understand how the Site is used and improve it, to measure our advertising and, once ads are shown, to fund the Service.

4.6 When you contact us

What: your email address, your name if you give it, the content of your message and any attachments, and anything else you choose to tell us. If you write to us from our Contact page, which is for Account holders, we also receive the topic you choose and your Account's email address and identifier.

Why: to answer you; to handle requests about your Account or your rights; to deal with reports of misuse, fraud or security issues; and to keep a record of how we handled requests that the law requires us to answer.

4.7 Information kept in your browser

Some features keep information in your own browser rather than on our servers, such as your sign-in, your preferences and a document conversion that is still running. Section 9 lists them.

4.8 What we do not collect

We do not take payments, so we do not collect payment details. We do not ask for identity documents, we do not buy personal data about you from others, and we do not sell personal data. Sign PDF's Signature Certificate does not record your IP address, your email address or any other information that identifies you. We do not make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

5. Legal Basis for Processing

We process personal data only where the law allows it. The legal bases we rely on are:

Performance of our contract with you (Article 6(1)(b) GDPR): to process your Files and return the Output, to run your Account, to import Files at your request, to send the emails your Account needs, and to answer your questions about the Service.
Our legitimate interests (Article 6(1)(f) GDPR), where they are not overridden by your rights and interests: to keep the Service secure and available, prevent abuse and fraud, keep logs, find and fix faults, measure how quickly pages load, and handle correspondence. You can object to this processing (Section 10).
Your consent (Article 6(1)(a) GDPR): for the optional cookies and similar technologies described in Section 9, those that remember your preferences and those used for analytics and advertising (Section 4.5). We ask for it before using them, wherever you are. You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before you withdrew it; Section 9.4 explains how.
Compliance with a legal obligation (Article 6(1)(c) GDPR): to answer lawful requests from courts and authorities, to report content where the law requires it, and to respond to requests to exercise your rights.
Establishing, exercising or defending legal claims (Article 6(1)(f) GDPR): to keep information relating to suspected fraud, misuse or a dispute, as described in our Terms & Conditions.

You do not have to give us any personal data to use the Tools other than Translate Document, because every other Tool can be used without an Account. An email address, or a Google account, is needed only if you want to create an Account, which Translate Document requires.

6. Who Receives Your Data

We share personal data only as described below, and each recipient receives only what it needs for its role.

Website hosting provider. Hosts and delivers the Site, passes Files for the document conversion Tools on to the conversion provider, returns their Output to you when our servers cannot take it (Section 3.3), and measures page performance. Receives technical information and, in transit, those Files and that Output.
Server infrastructure provider. Supplies the servers in Amsterdam on which we run Video Converter, Audio Extractor, Archive Converter, Repair PDF, Redact PDF and Translate Document. Files for those Tools are stored on its hardware while they are processed, and so is the Output of the document conversion Tools on its way back to you (Section 3.3).
Document conversion provider. Receives the Files, and any passwords, for the Tools listed in Section 3.3.
Machine translation provider. Receives the text of documents translated with Translate Document.
Authentication provider. Stores and processes Account information on our behalf, and keeps the sign-in records described in Section 4.2.
Email providers. Deliver the emails your Account needs, which contain your email address and, for example, a confirmation link or a password reset code, host the mailbox that receives your messages to support@superfastfiles.com, and deliver the messages you send from our Contact page to that mailbox.
Google. Provides sign-in with Google, Google Drive import, Google Analytics, Google Ads and Google AdSense, and receives the information described in Sections 4.2 to 4.5.
Dropbox. Provides Dropbox import, and receives the information described in Section 4.3.
Content delivery networks. Deliver open-source program code that some pages and Tools use. They receive technical information from your browser, but not your Files.
Courts, authorities and professional advisers. Where the law requires it, for example under a court order, or where it is necessary to establish, exercise or defend legal claims, to investigate fraud, a security incident or a serious breach of our Terms & Conditions, or to protect the rights, property or safety of our users, the public or us.
A successor operator. If the Service is transferred to another operator, for example through a merger, acquisition or sale of assets, personal data may be transferred to it as part of the Service.

We do not sell personal data, and apart from the Google services described in Section 4.5, we do not share it with anyone for advertising.

7. International Transfers

The providers we use process personal data in several countries, which may not be the country where you live. When you use the Service, your personal data, and for some Tools your Files, may therefore be transferred to another country:

In Europe: our processing servers in Amsterdam, the Netherlands; the authentication provider that stores Account information; the machine translation provider; and the provider that hosts our support mailbox.
At the document conversion provider: in its data centre nearest to the request, which may be in the European Union, the United Kingdom, the United States, Canada, Singapore, Japan or Australia.
In the United States and other countries: our website hosting provider, which delivers the Site through servers around the world; Google; Dropbox; content delivery networks; and the providers that deliver Account emails.

If you are in the European Economic Area or the United Kingdom, your personal data is also processed outside it, including in the country from which we operate the Service, for example when we read and answer your email.

Data protection laws, including Chapter V of the GDPR, allow personal data to be transferred to another country only on certain grounds, such as an adequacy decision for the destination, appropriate safeguards such as standard contractual clauses, or one of the specific exceptions the law provides. We make these transfers only on such a ground, and you can ask us which one applies to a particular transfer (Section 15).

8. How Long We Keep Data

Files processed in your browser: stay on your device and are not stored by us.
Files on our servers: kept only while the page that sent them is open, then deleted automatically, together with the Output, about five minutes after the page is closed or stops responding. If a job is interrupted, for example because a server restarts, whatever it left behind is deleted automatically within a few hours. We do not back up Files or Output.
Files sent to the document conversion provider: deleted automatically by the provider within three hours, under its published practice. Our website hosting provider passes them on, and returns any Output it carries, without storing either, and our servers delete the Output once your browser has downloaded it, or about five minutes after the page is closed if it has not.
Text sent to the machine translation provider: kept and used under the provider's own terms (Section 3.3).
Account information: kept for as long as your Account exists, and deleted when your Account is deleted (Section 11).
Translation counts: your Account's identifier and the number of characters translated for it, kept on our processing servers until the day ends (UTC), then deleted (Section 4.2).
Sign-in and security records: kept by our authentication provider for a limited period, for security purposes, under its own retention practices.
Server logs: the access logs of our processing servers are rotated automatically, so the oldest entries are overwritten as new ones are written. IP addresses held to limit requests are discarded after a few minutes. Our website hosting provider keeps its logs for a limited period under its own practices.
Analytics and advertising data: kept by Google under its own policies. Google Analytics keeps data about individual visits for no longer than 14 months. Section 9 gives the lifetimes of the cookies involved.
Emails and messages you send us: kept for as long as we need them to deal with your message and any follow-up, and records of requests to exercise your rights for as long as we need to show how we handled them. They are then deleted.
Contact page limits: a scrambled form of your Account's identifier and the time of each message you send from our Contact page, kept by our website hosting provider only to limit how many messages each Account can send, and deleted after a day.
Information stored in your browser: kept for the periods given in Section 9, or until you clear it.

We may keep information for longer where the law requires it, or where we need it to establish, exercise or defend legal claims or to investigate fraud or misuse, and then only for as long as that need lasts. When personal data is no longer needed, it is deleted or anonymized.

9. Cookies and Similar Technologies

Cookies are small text files that a website stores in your browser. Websites can also keep information in your browser's local storage, which lasts until it is deleted, and in its session storage, which is cleared when you close the tab. This section lists what the Site, and the services built into it, store in your browser. Our Cookie Policy lists each item by name, with its category, purpose and lifetime.

9.1 For features you use

These are set by the Site itself, are used only to make a feature you have chosen work, and are not used to track you. All but one are kept in local or session storage rather than in cookies.

Necessary, always on, because the Site or the feature cannot work without them:

Your cookie choices (local storage): which optional categories you accepted, and when. Kept for 12 months, after which you are asked again.
Your sign-in (local storage): keeps you signed in, and holds your session and basic Account details, such as your name and email address. Removed when you sign out.
Password reset progress (session storage): remembers which step of a password reset you have reached, and the email address you entered. Cleared when you close the tab.
Google sign-in (cookie g_state): set by Google's sign-in code to remember the state of Google's sign-in prompt.

Functional, only if you allow them in the cookie settings (Section 9.4); turning them off deletes them:

Google Drive access (session storage): the temporary permission described in Section 4.3, kept for no longer than one hour, in that tab only. Removed when you sign out.
Your Google Drive account (local storage): the email address of the Google account you last imported from, so that Google can suggest it next time. Removed when you sign out.
An unfinished document conversion (local storage): if you leave the page while a document conversion is still running, a reference to it, with the File's name and size, so that the conversion can be picked up when you open the Tool again. Removed when the conversion finishes, fails or is cancelled, and no longer used after three hours.
Translate Document preferences (local storage): the languages you have used recently and whether the page preview is switched on. Kept until you clear it. The document itself and your edits are never stored in your browser.

9.2 Analytics and advertising

These are set by Google, either on the Site or on Google's own domains, for the purposes described in Section 4.5, and only if you accept advertising cookies:

Google Analytics (cookies _ga and _ga_ followed by an identifier, up to two years): tell visitors and visits apart.
Google Ads (cookies beginning _gcl_, 90 days, and the local storage entry _gcl_ls): link visits to the Site, and what happens during them, to our ads.
Google advertising and AdSense (cookies on Google's own domains, such as doubleclick.net and google.com, and, once ads are shown, cookies such as __gads and __gpi on the Site): show and measure ads, personalize them and detect fraudulent traffic. Their lifetimes are set by Google.

9.3 Google and Dropbox windows

Google's sign-in window and Drive file picker, and Dropbox's file chooser, are run by Google and Dropbox, which use their own cookies there under their own policies.

9.4 Your choices

When you first visit the Site, a banner asks whether you accept functional and advertising cookies; both stay off until you accept them. You can change or withdraw your choice at any time, as easily as you gave it, with "Cookie settings" on our Cookie Policy page, which is linked at the foot of every page. Turning a category off deletes what was stored for it on the Site's own domain; cookies on Google's own domains are controlled by Google (see My Ad Center below).
You can block or delete cookies and other site data in your browser's settings. If you block the storage the Site itself uses (Section 9.1), you will not be able to stay signed in, and some features will not work.
You can turn off personalized ads from Google in My Ad Center, and stop Google Analytics from collecting data about your visits with the Google Analytics opt-out browser add-on.
You can opt out of personalized advertising by many other advertising companies at Your Online Choices in Europe, or through the Digital Advertising Alliance in the United States.
Where we rely on your consent, you can withdraw it at any time by any of these means.

10. Your Rights

Data protection law gives you rights over your personal data, which depend on where you live. Whatever country you are in, you can contact us about your personal data, and we will respond.

If you are in the European Economic Area, or in the United Kingdom under the UK GDPR, you have the right to:

access the personal data we hold about you, and receive a copy of it;
correct personal data that is inaccurate or incomplete;
erase your personal data, for example by deleting your Account (Section 11);
restrict our processing of your personal data in certain circumstances;
data portability: receive the personal data you have given us, such as your Account information, in a structured, commonly used and machine-readable format, and have it sent to another controller where that is technically feasible;
object to processing based on our legitimate interests, on grounds relating to your particular situation;
withdraw your consent at any time, where we rely on it, without affecting processing carried out before you withdrew it; and
complain to a data protection supervisory authority, in particular in the country where you live or work or where you believe an infringement took place. In the United Kingdom, that is the Information Commissioner's Office.

10.2 Wherever you live

The law where you live may give you similar rights. Wherever you live, you may ask us:

whether we process your personal data and, if we do, for what purpose and on what legal basis;
which recipients, in your country or abroad, your personal data is transferred to;
to correct personal data that is incomplete or inaccurate, or to delete it where the law allows;
to tell the recipients of your personal data about a correction or deletion; and
for the Account information you have provided to us, in a machine-readable format.

You may also withdraw your consent at any time, where we rely on it, and object to a decision to your detriment that results only from automated processing of your personal data. Where the law that applies to you gives you a right to compensation for damage caused by unlawful processing, nothing in this policy limits it.

10.3 How to exercise your rights

Email us at support@superfastfiles.com, saying which right you want to exercise. If your request concerns your Account, send it from the email address associated with your Account, so that we can confirm it is yours.
We may ask for further information to confirm your identity before we act on a request. We will never ask for your password or a password reset code.
We answer requests free of charge, unless the law allows a fee, for example because a request is manifestly unfounded or excessive.
We answer within 30 days. Where the GDPR allows it, a complex request may take up to two further months, and we will tell you if it does.
If we reject your request, or you are not satisfied with our answer, you may complain to the data protection authority that is competent for you, such as the one in the country where you live.

Some changes you can make yourself: you can change your password on your Account page, and you can clear what the Site stores in your browser at any time (Section 9).

11. Deleting Your Account

You can ask us to delete your Account at any time by emailing support@superfastfiles.com from the email address associated with it, or by using a deletion feature if we make one available. We may reply to that address to confirm the request.

When we delete your Account, we delete it from our authentication provider together with the information described in Section 4.2: your email address, your password hash, the information Google gave us and your sessions. We do this without undue delay, and in any case within one month of your request. You are then signed out, and you would need to create a new Account to use the features that require one.

After your Account is deleted:

emails you have sent us are kept only as long as Section 8 allows, and a record of your deletion request is kept to show that we carried it out;
security records of past sign-ins are kept by our authentication provider only for the limited period described in Section 8;
information we must keep by law, or need in order to establish, exercise or defend legal claims or to investigate fraud or misuse, is kept only for as long as that need lasts;
server logs are overwritten on their normal cycle, and analytics and advertising data, which is not linked to your Account, is kept by Google as described in Section 8; and
information stored in your browser is removed when you sign out, or you can clear it in your browser's settings. If you imported from Google Drive, you can also remove SuperFastFiles from the third-party connections in your Google Account.

Deleting your Account does not affect your Files, because Files are never stored in an Account.

12. Children's Privacy

The Service is not intended for children under 13. Children under 13 must not use the Service or create an Account, and we do not knowingly collect personal data from them. Users under 18 may use the Service only as set out in Section 4 of our Terms & Conditions, with a parent's or legal guardian's permission where those Terms require it.

If you believe that a child under 13 has created an Account or given us personal data, or if you are the parent or guardian of a minor who holds an Account and want to exercise rights on their behalf, contact us at support@superfastfiles.com. We will delete the personal data of a child under 13 as soon as we become aware of it.

13. Security

We take measures appropriate to a service of our size to protect personal data and Files. They include the following:

every page of the Site, and every File uploaded to our servers or to a third-party service, is sent over an encrypted HTTPS connection;
passwords are stored by our authentication provider only as one-way hashes, and we will never ask you for your password or a password reset code;
Files are processed automatically, are not looked at by anyone, and are deleted automatically after processing rather than kept;
our processing servers limit how many requests a single address can make, and run the software that processes Files with restricted permissions; and
access to our systems, and to the accounts we hold with our providers, is limited to the people who operate the Service.

Our providers are responsible for the security of their own systems. No method of transmission or storage is completely secure, so we cannot guarantee the security of any information.

If you believe your Account has been used without your permission, or you have found a security vulnerability, please tell us at support@superfastfiles.com. If a personal data breach occurs that the law requires us to report, we will notify the competent authority and, where required, the people affected.

14. Changes to This Policy

We may update this policy from time to time, for example when we change a Tool, a provider or the way we process personal data, or when the law changes. The updated policy will be posted on this page, with a new "Last updated" date at the top. If a change is significant, we will also give notice of it on the Site, and we may email Account holders about it. Where a change requires your consent, we will ask for it.

15. Contact Us

For any question about this policy or your personal data, or to exercise your rights, contact us at:

Email: support@superfastfiles.com

If you have an Account, you can also write to us from our Contact page. If your message concerns your data protection rights, please say so in the subject line or the message.

Contents