Skip to main content
← Home LEGAL

Privacy policy

Last reviewed: 25 April 2026.

Who we are

ppt-to-scorm.com is operated by LOST END FOUND LTD, a company registered in England and Wales. We are the data controller for personal data processed through this site. Our contact address for privacy enquiries is [email protected].

What we collect

  • Information you submit via the quote or sample forms (name, email, company, deck metadata, your message).
  • The PowerPoint file you optionally attach to the quote form.
  • Billing details you provide when paying an invoice (name, billing address, and email). Card details are entered directly with Stripe and we never see or store them.
  • Pageview and interaction data via our self-hosted, cookie-less Umami analytics (no IP address stored, no cross-site tracking).
  • Basic technical data your browser sends with every request (e.g. user agent, referrer) which is used for security logging and discarded after 30 days.

Lawful basis

We rely on the following lawful bases under Article 6 of the UK GDPR:

  • Performance of a contract (Art. 6(1)(b)) — to respond to your enquiry, prepare your quote, and deliver the SCORM packages you have asked us to produce.
  • Legitimate interests (Art. 6(1)(f)) — to operate, secure, and improve the site; to keep an audit trail of enquiries; and to understand aggregate, anonymised usage via cookie-less analytics. We have assessed that these interests do not override your rights and freedoms.
  • Legal obligation (Art. 6(1)(c)) — where we must retain records for tax, accounting, or other statutory purposes.

What we do with it

  • Respond to your enquiry.
  • Deliver the service you've asked for.
  • Aggregate, anonymised usage analysis via Umami (no cross-site tracking).
  • Maintain security, prevent abuse, and meet our legal obligations.

Who we share it with

We do not sell your personal data and we do not share it for advertising. We use the following processors to run the service:

  • Hetzner — dedicated server hosting in Germany. Our application, the self-hosted Umami analytics, and our self-hosted n8n workflows all run on this infrastructure.
  • Cloudflare — object storage (R2) for uploaded PowerPoint files, and transactional email for outbound messages such as enquiry acknowledgements.
  • Stripe — payment processing for invoices.

Each is bound by a written data processing agreement that meets the requirements of Article 28 UK GDPR. We may also share data where required by law or to protect our legal rights.

Where it's stored

Personal data is processed in the United Kingdom and the European Economic Area. Where a processor operates a global network (Cloudflare's edge, Stripe's US fraud-detection systems), transfers outside the UK/EEA are covered by the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision, as applicable.

Cookies

We do not use advertising, tracking, or analytics cookies. Our analytics provider (Umami) runs cookie-lessly. We may set a small number of strictly-necessary cookies — for example, a session cookie if you submit a form — and these are exempt from the consent requirement under PECR.

How long we keep it

Source files and working material are deleted 30 days after delivery unless you ask us to keep them for further revisions. Enquiry correspondence is retained for 24 months. Records we are required to keep for tax or other statutory purposes are retained for the relevant statutory period.

Your rights

Under the UK GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased, where one of the GDPR grounds applies;
  • restrict our processing of your data;
  • port your data to another controller;
  • object to processing carried out on the basis of legitimate interests;
  • withdraw consent, where we have relied on consent; and
  • lodge a complaint with the Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, email [email protected]. We will respond within one month.

Changes to this policy

We may update this policy from time to time. The "Last reviewed" date above will change when we do, and material changes will be flagged on this page.