Last Updated: 24 July 2026
These Terms and Conditions of Sale and Use (the “Terms”) govern access to and use of ThePDF.co (the “Platform”) and the digital services made available through it (collectively, the “Services”).
The Platform is operated by:
LINDMA LTD
Promachon Eleftherias 1
1st Floor, Office 18/19
Agios Athanasios, 4103
Limassol, Cyprus
Email: contact@thepdf.co
We process personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Cypriot data protection law.
This Privacy Policy should be read together with our Terms and Conditions, Cookie Policy, Subscription Terms and Refund Policy, where applicable.
ThePDF is an online platform providing digital tools for creating, editing, converting, compressing, merging, organising and otherwise processing PDF documents and compatible file formats.
In order to provide these Services, certain information may need to be processed when you visit the Platform, create an account, purchase a Service, upload a document, contact us or otherwise interact with ThePDF.
We seek to collect and process only personal data that is reasonably necessary for the relevant purpose.
Depending on how you use ThePDF, we may process the following categories of information.
This may include:
We do not require information such as date of birth, telephone number, voice or image unless it becomes genuinely necessary for a specific feature or legitimate purpose.
When you purchase a Service or subscribe to ThePDF, we may process:
When you access the Platform, we may automatically receive certain technical information, including:
When you upload a document to ThePDF, the file and its contents are technically processed to perform the action requested by you.
A document may itself contain personal data depending entirely on the content uploaded by the User.
ThePDF does not require Users to include personal data in their documents unless necessary for their own intended purpose.
We may collect information:
Further information regarding cookies and similar technologies is available in our Cookie Policy.
We may process personal data where reasonably necessary to:
We do not use uploaded documents for unrelated advertising purposes.
Under the GDPR, our processing of personal data must rely on an appropriate legal basis.
Depending on the purpose and circumstances, we may rely on:
We process information where necessary to provide Services requested by you, including account management, document processing, subscriptions, payments, cancellations and customer support.
We may process information where necessary for our legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
These interests may include:
Where required, we rely on your consent for specific processing activities, particularly certain cookies, tracking technologies or marketing activities.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Consent under the GDPR must represent a genuine and informed choice and cannot simply be presumed.
We may process information where necessary to comply with applicable legal, regulatory, tax, accounting or other binding obligations.
Documents uploaded to ThePDF are processed for the purpose of performing the functionality requested by the User.
Uploading a document does not transfer ownership of that document to LINDMA LTD.
We process uploaded files only to the extent reasonably necessary to provide, secure and support the requested Service.
Unless a file is intentionally stored by the User through a feature specifically designed for continued storage, uploaded and generated files are intended to be automatically deleted within a maximum of 24 hours following processing.
Limited temporary copies may remain for a longer period where reasonably necessary for technical security, backup integrity, fraud prevention, compliance with legal obligations or resolution of a technical incident.
Any such retention is limited to what is reasonably necessary for the relevant purpose.
Users should avoid uploading information that is unnecessary for the document-processing operation they wish to perform.
Payments are processed through secure third-party payment service providers.
ThePDF does not need to receive or store complete payment card credentials where those credentials are processed directly by the relevant payment provider.
We may receive limited transaction information necessary to manage a purchase or subscription, including:
Payment providers process payment information in accordance with their own applicable legal and security obligations.
For security and commercial reasons, this Privacy Policy does not needlessly disclose the identity of every payment or infrastructure provider used by ThePDF.
ThePDF may use cookies and similar technologies for purposes including:
Where legally required, non-essential cookies or similar tracking technologies are activated only in accordance with the User's consent choices.
Users must be able to make a genuine choice regarding consent-based processing and withdraw their consent where applicable.
Further information is provided in our Cookie Policy.
Where permitted by applicable law, we may send Users information concerning ThePDF, new features, relevant offers or related Services.
Where consent is legally required, marketing communications will only be sent on the basis of the appropriate consent.
Users may unsubscribe from marketing communications at any time by using the unsubscribe mechanism included in the relevant message or by contacting:
Opting out of marketing communications does not prevent us from sending transactional or service-related communications that are necessary for an account, subscription, payment, security matter or other requested Service.
We do not sell personal data.
Where reasonably necessary to operate ThePDF, we may disclose or make personal data available to categories of recipients including:
Service providers acting on our behalf are permitted to process personal data only as appropriate for the relevant services and subject to applicable contractual and data protection requirements.
The GDPR expressly requires privacy information to identify the recipients or categories of recipients, rather than necessarily publishing every supplier by commercial name.
Certain service providers or technical infrastructure used by ThePDF may be located outside Cyprus or the European Economic Area ("EEA").
Where personal data is transferred outside the EEA to a jurisdiction that has not been recognised as providing an adequate level of protection, we use an appropriate transfer mechanism where required by applicable law.
Depending on the circumstances, this may include:
Where required, additional safeguards may be implemented taking into account the nature of the transfer and applicable data protection requirements.
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.
Account information: retained while the account remains active and thereafter for the period reasonably necessary to deal with legal, security or contractual matters.
Transaction and billing records: may be retained for the period required by applicable tax, accounting, fraud-prevention and legal obligations.
Customer support communications: retained for a reasonable period according to the nature of the request and any resulting legal or operational requirements.
Technical and security information: retained only for a period reasonably necessary for security, troubleshooting, fraud prevention and Platform integrity.
The GDPR requires controllers to disclose either the applicable retention period or the criteria used to determine it.
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, access or misuse.
Access to personal data is restricted according to legitimate operational requirements.
We also require relevant service providers processing personal data on our behalf to maintain appropriate safeguards.
However, no Internet-based system or electronic storage method can guarantee absolute security.
For security reasons, we do not publicly disclose detailed information concerning our internal security architecture, fraud-prevention mechanisms or technical infrastructure.
Subject to the conditions and limitations provided by applicable law, Users may have the right to:
Requests may be submitted to:
We may request information reasonably necessary to verify the identity of the person making a request before acting upon it.
Certain rights are subject to statutory exceptions. For example, we may need to retain information despite an erasure request where retention remains necessary to comply with a legal obligation or establish, exercise or defend legal claims.
The Cypriot supervisory authority has recently specifically required an online service to revise its privacy policy where information concerning the exercise of data-subject rights was insufficient.
Users have the right to lodge a complaint with a competent data protection supervisory authority if they believe their personal data has been processed in violation of applicable data protection law.
As LINDMA LTD is established in Cyprus, the relevant Cypriot supervisory authority is the:
Office of the Commissioner for Personal Data Protection of Cyprus
Users residing or working elsewhere in the European Union may also have the right to contact the supervisory authority competent in their Member State.
The Cyprus Commissioner confirms that data subjects may lodge a complaint where they consider processing of their personal data to infringe the GDPR.
ThePDF is not intended to knowingly collect personal data from children in circumstances where they cannot lawfully use the Services or provide the necessary consent.
We do not knowingly seek to collect personal data from children for advertising or profiling purposes.
If we become aware that personal data relating to a child has been processed in circumstances inconsistent with applicable law, we may take appropriate steps to delete or otherwise lawfully address that information.
ThePDF may use automated systems for technical, security and fraud-prevention purposes.
We do not currently intend to make decisions based solely on automated processing that produce legal effects or similarly significant effects on Users unless appropriate safeguards and disclosures required by applicable law are implemented.
If LINDMA LTD undergoes a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction, personal data may be disclosed or transferred where reasonably necessary in connection with that transaction.
Any such processing remains subject to applicable data protection requirements and the rights of affected individuals.
We may update this Privacy Policy from time to time to reflect changes in our Services, technologies, business practices or applicable legal requirements.
The latest version will be made available on ThePDF.co and identified by its "Last Updated" date.
Where a change materially affects the processing of personal data, we will provide additional notice or obtain consent where required by applicable law.
Continued use of the Platform will not be treated as consent to a new processing activity where applicable law requires specific consent.