Who we are

ppt-to-scorm.com is operated by LOST END FOUND LTD, a company registered in England and Wales. We are the data controller for personal data processed through this site. Our contact address for privacy enquiries is [email protected].

What we collect

Information you submit via the quote or sample forms (name, email, company, deck metadata, your message).
The PowerPoint file you optionally attach to the quote form.
Billing details you provide when paying an invoice (name, billing address, and email). Card details are entered directly with Stripe and we never see or store them.
Pageview and interaction data via our self-hosted, cookie-less Umami analytics (no IP address stored, no cross-site tracking), including a strictly-masked session replay on a sample of visits — it records anonymised interaction such as mouse movement, clicks and scrolling to help us improve usability, masks all text and form input so your content is never captured, and sets no cookies.
Basic technical data your browser sends with every request (e.g. user agent, referrer) which is used for security logging and discarded after 30 days.
Only if you accept advertising cookies: Google Ads conversion-measurement data. When you consent, we load Google's tag (gtag.js), which sets _gcl_* cookies (typically up to 90 days) so that, if you arrived from one of our Google ads, a subsequent conversion (e.g. a completed upload or purchase) can be attributed to that ad. These cookies are not set unless you opt in, and you can withdraw consent at any time — see Cookies below.

Lawful basis

We rely on the following lawful bases under Article 6 of the UK GDPR:

Performance of a contract (Art. 6(1)(b)) — to respond to your enquiry, prepare your quote, and deliver the SCORM packages you have asked us to produce.
Legitimate interests (Art. 6(1)(f)) — to operate, secure, and improve the site; to keep an audit trail of enquiries; and to understand aggregate, anonymised usage via cookie-less analytics. We have assessed that these interests do not override your rights and freedoms.
Legal obligation (Art. 6(1)(c)) — where we must retain records for tax, accounting, or other statutory purposes.

What we do with it

Respond to your enquiry.
Deliver the service you've asked for.
Aggregate, anonymised usage analysis via Umami (no cross-site tracking).
Maintain security, prevent abuse, and meet our legal obligations.

Who we share it with

We do not sell your personal data. We use the following processors to run the service:

Hetzner — dedicated server hosting in Germany. Our application, the self-hosted Umami analytics, and our self-hosted n8n workflows all run on this infrastructure.
Cloudflare — object storage (R2) for uploaded PowerPoint files, and transactional email for outbound messages such as enquiry acknowledgements.
Stripe — payment processing for invoices.
Google (Google Ads) — conversion measurement for our advertising. Only if you accept advertising cookies, your browser sends conversion events to Google so we can see which ads lead to enquiries or purchases. If you do not consent, no data is sent to Google.

Each is bound by a written data processing agreement that meets the requirements of Article 28 UK GDPR. We may also share data where required by law or to protect our legal rights.

Where it's stored

Personal data is processed in the United Kingdom and the European Economic Area. Where a processor operates a global network (Cloudflare's edge, Stripe's US fraud-detection systems), or where you have consented to advertising cookies (Google Ads conversion data is processed in the United States), transfers outside the UK/EEA are covered by the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision, as applicable.

Cookies

Our analytics provider (Umami) runs cookie-lessly, and we set a small number of strictly-necessary cookies — for example, a session cookie if you submit a form — which are exempt from the consent requirement under PECR.

We use advertising cookies only with your consent. When you accept on our cookie banner, we load Google's tag (gtag.js), which sets Google Ads conversion cookies (_gcl_*, typically up to 90 days) used to measure which of our ads led to a conversion. We store your choice in a first-party cookie (ppt_consent) for six months so we don't ask again on every visit. Until you accept, no advertising cookies are set and no data is sent to Google.

You can withdraw or change your consent at any time using the "Cookie settings" link in the footer of any page, which re-opens the banner so you can reject (or accept) afresh.

How long we keep it

Source files and working material are deleted 30 days after delivery unless you ask us to keep them for further revisions. Enquiry correspondence is retained for 24 months. Records we are required to keep for tax or other statutory purposes are retained for the relevant statutory period.

Your rights

Under the UK GDPR you have the right to:

access the personal data we hold about you;
have inaccurate data corrected;
have your data erased, where one of the GDPR grounds applies;
restrict our processing of your data;
port your data to another controller;
object to processing carried out on the basis of legitimate interests;
withdraw consent, where we have relied on consent; and
lodge a complaint with the Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, email [email protected]. We will respond within one month.

Changes to this policy

We may update this policy from time to time. The "Last reviewed" date above will change when we do, and material changes will be flagged on this page.

Privacy policy