Privacy policy

Who is responsible

GetMyFiles is the controller and operator for the processing described here, pending completion of the service’s legal-entity details. Contact us through GetMyFiles Help. Business customers may need a data processing agreement where they use GetMyFiles to process personal data on their behalf; contact us to discuss this.

Data we collect

• Account information: email address, display name, plan, preferences, history and account settings.
• Authentication and security data: session, sign-in, security and abuse-prevention information.
• Transfer and file metadata: private transfer identifiers, file type, size, position, status, expiry, download events and storage identifiers. Original transfer filenames are discarded in the browser and are not stored or displayed by GetMyFiles.
• Uploaded files: file contents placed in transfers or private cloud storage.
• Technical information: IP address and available device, browser, request and diagnostic information.
• Communications: support messages, transfer-recipient addresses you choose to use, abuse reports and related correspondence.
• Subscription and billing data: plan, transaction and billing information when payments become available; payment providers may process card details directly.
• Partner data: application details, social links, audience information, referral attribution, status, communications and commission records when the programme operates.

How and why we use data

We use data to create and administer accounts; store, transfer and deliver files; provide private cloud features; secure the service and prevent fraud or abuse; respond to support, legal and safety reports; administer subscriptions and the Partner Programme; comply with law; and improve reliability and usability.

Our lawful bases are performance of a contract, legitimate interests in operating and securing the service, legal obligations, and consent where required. Where we rely on legitimate interests, we consider necessity and the effect on people’s rights.

Files containing other people’s data

Files uploaded by users may contain personal data about other people. The uploader is responsible for having a lawful basis, authority and any required notices or permissions to upload, store and share that data. Recipients should use it only lawfully.

Security and automated tools

We use technical and organisational safeguards appropriate to the service. Files travel over HTTPS and are held in private storage, but GetMyFiles is not end-to-end encrypted. No system is completely secure. We may use automated security tools to identify malware, fraud, abuse or technical threats where appropriate; this wording does not mean every file is automatically scanned or moderated.

Who receives data

We may share necessary data with service providers supporting cloud hosting and storage, authentication, email, security, analytics if enabled, payments when enabled, and professional advice. We may disclose information to courts, regulators, police or other authorities where lawfully required, and in a business reorganisation subject to appropriate protection. Providers must handle data for agreed purposes.

Some providers may process data outside the UK. Where applicable, we use lawful safeguards such as an adequacy regulation or approved contractual protections.

How long we keep data

Guest and Free transfers normally use the expiry shown when created, commonly seven days. Signed-in plan options can permit different transfer expiry periods, including non-expiring links where offered. Cloud files remain until deleted or the relevant account, service or storage rule requires removal. Account history retention and storage allowances vary by plan.

We keep account, communication, partner, billing, safety and security records only as long as reasonably needed for their purpose, disputes, fraud prevention or legal obligations. Deleted or expired data may remain temporarily in backups, logs or legally preserved records before final removal.

Your UK data rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, objection or portability, and may withdraw consent without affecting earlier processing. Rights can have legal exceptions. Contact GetMyFiles Help and provide enough information for us to verify and handle the request.

You may complain to the UK Information Commissioner’s Office. We encourage you to contact us first so we can try to resolve the issue. We do not state an ICO registration number because none is verified in the service configuration.

Messages and age

Service messages cover accounts, security, transfers, downloads and support. They are not marketing and may be necessary to provide the service. We will seek consent or offer opt-out choices for marketing where required. Accounts and subscriptions are for people aged 18 or over.

Breaches and policy changes

We assess suspected personal-data breaches and notify affected people and regulators where law requires. We may update this policy for legal, operational or service changes and will communicate material changes where appropriate.