LEGAL

Privacy Policy

Last updated:

1. Overview

EditMyStatement ("we", "our", "us") provides professional PDF editing, redaction, OCR, fillable-form creation and accessibility-tagging services. This Privacy Policy explains what information we collect, how we use it, how long we keep it, and the rights you have over it.

By using our website (editmystatement.com) or sending us a document, you agree to the practices described below.

2. Information We Collect

We collect three categories of information:

  • Contact details — name, email address, phone number, WhatsApp handle — provided when you request a quote, upload a file, or contact our support team.
  • Project details — the documents you send us, instructions, deadlines, and any feedback during the engagement.
  • Technical data — IP address, device type, browser type, referring URL, and pages viewed — collected automatically through standard server logs and analytics.

3. How We Use Information

  • To prepare and deliver fixed-price quotes.
  • To perform the editing work you have engaged us to do.
  • To communicate with you about the engagement (status updates, delivery, billing).
  • To improve our website performance and customer experience.
  • To meet legal, accounting and audit obligations.

We do not use client documents for marketing, training, or any purpose unrelated to the engagement.

4. Document Handling

Documents are the most sensitive data we touch. We treat them as follows:

  • Encryption in transit — every upload and download runs over TLS 1.2 or higher.
  • Encryption at rest — files are stored on encrypted disks (AES-256) inside a hardened, access-controlled environment.
  • Access controls — only the editor assigned to your job, plus one accountable reviewer, can open your file. Access is logged.
  • No AI training — client documents are never used to train, fine-tune or evaluate any machine-learning model.
  • No subcontractors — every editor is a direct, contracted employee of EditMyStatement. We do not outsource work to third parties.

5. Sharing & Disclosure

We do not sell your information. We share data only in these limited circumstances:

  • Service providers — encrypted cloud hosting, payment processing, email delivery. Each is bound by a data-processing agreement.
  • Legal compliance — if we are required to disclose information by a binding legal obligation (court order, subpoena, applicable law).
  • Your explicit request — if you ask us to share documents with a third party (e.g. your lawyer, accountant, or mortgage broker).

6. Data Retention

  • Source files — permanently deleted within 14 calendar days of final delivery. Earlier deletion available on request.
  • Working drafts — purged within 14 days of delivery, alongside the source file.
  • Invoices & accounting records — retained for 7 years to comply with applicable financial regulations, then permanently deleted.
  • Support correspondence — retained for up to 24 months for service quality and dispute resolution, then deleted.

7. Security

We protect your information with a layered security model:

  • TLS 1.2+ for all data in transit
  • AES-256 encryption for files at rest
  • Role-based access control with full audit logging
  • Mandatory multi-factor authentication for all staff
  • Annual third-party security review
  • NDAs on request, scoped per project

No system is perfectly secure. If we ever identify a breach affecting your data, we will notify you without undue delay and within the timelines required by applicable law.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion of your data, subject to our legal retention obligations.
  • Object to or restrict certain processing.
  • Request a portable copy of your data.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@editmystatement.com. We respond within 30 days.

9. Cookies

Our website uses only essential cookies and a privacy-respecting analytics tool that does not track individuals across sites. We do not use advertising cookies.

If we ever introduce non-essential cookies (e.g. embedded video players, marketing pixels), we will request consent through a clear banner.

10. International Transfers

Our team operates across multiple time zones. Your data may be processed in the United Arab Emirates, the United Kingdom, or the European Union. Wherever it goes, we apply the same technical and organisational safeguards described above.

11. Children's Privacy

Our services are intended for adult professionals and businesses. We do not knowingly collect personal data from anyone under the age of 16. If you believe a minor has submitted information to us, contact privacy@editmystatement.com and we will delete it.

12. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects when changes were last made. Material changes will be highlighted on our homepage and, where appropriate, communicated by email to active clients.

13. Contact Us

Questions, requests, or concerns about this policy:

← Back to the homepage