Privacy Policy

1. Who we are

SplitOrMergePDF (“we”, “us”, “our”) operates the website splitormergepdf.com and provides free online tools to split and merge PDF files. We are the data controller for the personal data we process in connection with this service.

2. What data we collect

File content. When you use the split or merge tool, you upload PDF files. The content of these files is processed to perform the operation you requested. We do not retain the file content or the converted output after the job is complete.

Technical and log data. When you use our site, we may automatically collect information such as IP address, browser type, device type, and the pages you visit. Our servers may keep limited logs (e.g. request timestamps, job identifiers) for a short period for security, debugging, and abuse prevention.

Contact form. If you use the contact form, we receive the name, email address, and message you submit. We use this only to respond to your enquiry and do not use it for marketing unless you have agreed.

Cookies and similar technologies. We may use cookies or similar technologies for essential operation of the site, analytics, or advertising (e.g. Google Analytics, AdSense). You can control cookies through your browser settings. See our cookie or advertising partner policies for more detail.

3. Legal basis (GDPR)

We process your data on the following bases:

• Performance of a contract — Processing your files to provide the split or merge service you request.
• Legitimate interests — Operating and securing the service, preventing abuse, and improving the site (e.g. limited logging, analytics).
• Consent — Where we rely on consent (e.g. optional cookies or marketing), you can withdraw it at any time.
• Legal obligation — Where we must retain or disclose data to comply with the law.

4. How we use your data

Your file content is used only to perform the split or merge you requested. We do not use it for marketing, profiling, or any purpose other than delivering the service. Technical and log data are used for security, abuse prevention, and improving availability. Contact form data is used only to respond to you.

5. Sharing and third parties

Conversion (split/merge) is carried out by a third-party processor. That processor receives your file content only to perform the conversion and is required to handle it in line with data protection law. We do not sell your personal data or files. We may disclose data where required by law or to protect our rights and safety.

6. International transfers

Your data may be processed in the UK, the European Economic Area (EEA), or in other countries. Where we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place (e.g. adequacy decisions, standard contractual clauses, or other approved mechanisms).

7. Retention

We do not retain your uploaded files or the converted output after the job completes. Log and technical data may be kept for a limited period (e.g. a few weeks or months) for security and abuse prevention. Contact form submissions may be retained for as long as needed to handle your enquiry and any follow-up. When data is no longer needed, we delete or anonymise it.

8. Your rights (GDPR)

If you are in the UK or EEA (or another jurisdiction that gives you these rights), you have the right to:

• Access — Request a copy of the personal data we hold about you.
• Rectification — Ask us to correct inaccurate personal data.
• Erasure — Ask us to delete your personal data, subject to legal exceptions.
• Restrict processing — Ask us to limit how we use your data in certain circumstances.
• Object — Object to processing based on legitimate interests (including profiling where applicable).
• Data portability — Receive your data in a structured, machine-readable format where the legal basis is contract or consent.
• Withdraw consent — Where we rely on consent, you can withdraw it at any time.
• Complain — Lodge a complaint with a supervisory authority (e.g. in the UK, the ICO; in the EU, your local data protection authority).

To exercise any of these rights, please use our contact form. We will respond within the time required by applicable law (e.g. one month under UK GDPR).

9. Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. Communication with our site may be encrypted (e.g. HTTPS). No system is completely secure; you use the service at your own risk.

10. Children

Our service is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe we have collected such data, please contact us and we will delete it.

11. Changes to this policy

We may update this privacy policy from time to time. The “Last updated” date at the top will be revised when we make material changes. We encourage you to review this page periodically. Continued use of the service after changes constitutes acceptance of the updated policy where permitted by law.

12. Contact

For privacy-related questions, to exercise your rights, or to report a concern, please use our contact form. You can also contact us at the address or email published on this site or in the contact page.