PDF Store Privacy Notice
How Cadunlock LLC collects, uses, shares and protects personal information for PDF Library visitors and customers.
Last updated: 30 August 2026
1. Controller and contact
Cadunlock LLC, trading as AutoSoftKey, is the controller for PDF Library personal information.
This notice applies to the AutoSoftKey PDF Library, its basket, checkout, order emails, downloads and related support. Any separate software store has its own product wording and may have different operational data flows.
2. Information we collect and why
| Information | Purpose and lawful basis | Typical retention |
|---|---|---|
| Order and identity details: name, email, billing address/country, optional telephone, company and tax/VAT identifier, guide, price and order number | Take the order, deliver the PDF, provide support, prevent fraud and keep required business/tax records. Contract; legal obligation; legitimate interests in secure commerce. | Generally seven years after the relevant transaction, unless a longer period is required for a dispute or law. |
| Payment metadata: Stripe transaction reference, outcome, payment type, card brand/last four digits and risk signals | Confirm payment, investigate duplicates, refunds, fraud and disputes. Contract; legal obligation; legitimate interests. We do not receive the full card number or security code. | Generally seven years with the order record. |
| Download records: access time, IP address, attempts, file and device/browser information | Supply the contract, enforce download limits, restore failed access and protect files. Contract and legitimate interests in security. | Up to two years after access expires, or longer for an active dispute. |
| Support messages and attachments | Answer enquiries, resolve orders and keep a record of what was agreed. Contract and legitimate interests in customer service. | Two years after the last contact, unless linked to an ongoing claim. |
| Security and server data: IP, user agent, timestamps and error logs | Protect checkout, detect abuse and diagnose faults. Legitimate interests in site security. | Up to 12 months. |
| Cookie/consent choices | Remember and demonstrate your choices. Legal obligation and legitimate interests. | Usually 12 months, then we ask again. |
| Marketing email and consent record, only if you separately opt in | Send requested news or offers. Consent. | Until withdrawal, plus a minimal suppression record. |
3. Required and optional information
Name, email, billing country/address and payment information are required to process and deliver an order. Without them, we cannot enter the contract or provide a secure download. Telephone, company and tax/VAT details are optional unless needed for a requested business invoice or risk check. Marketing consent is always optional and is not a condition of purchase.
4. Who receives information
| Recipient | Role |
|---|---|
| Stripe | Payment processing, authentication, refunds and fraud screening. |
| Hostinger and our configured email service | Website hosting, security, backups and transactional email delivery. |
| WooCommerce/WordPress components operated on our hosting | Basket, checkout, order, account and protected-download functions. |
| Google Analytics, Google Ads and Microsoft Clarity, only where enabled and permitted by your cookie choice | Optional audience measurement, advert attribution and experience analysis. These tools must remain blocked before the required consent. |
| Professional advisers, insurers, banks, courts, regulators and authorities | Only where reasonably necessary for compliance, claims, fraud or legal duties. |
We do not sell personal information and do not let third parties use order data for their own marketing.
5. International processing
Cadunlock LLC is based in the United States and some providers operate internationally. Where UK- or EEA-protected information is transferred internationally, we rely on an available lawful mechanism, such as an adequacy decision, approved contractual clauses and the UK Addendum, together with supplementary safeguards where required. Contact us for information about the mechanism used for a particular recipient.
6. Cookies, analytics and advertising
Essential store, security and payment technologies operate to provide the service. Optional analytics or advertising technologies must not run until the relevant consent has been given through the banner. Declining optional cookies does not prevent a PDF purchase. See the PDF Store Cookie Policy and use Cookie settings to change your choice.
7. Fraud screening and automated decisions
Stripe and card issuers may use automated signals to assess payment fraud and authentication. This can lead to a payment being challenged, delayed or declined. If you believe a decision is wrong, contact us; we can check the order information and explain available alternatives, although a bank controls its own decline.
8. Your rights
Where UK or EEA data-protection law applies, you may request access, correction, deletion, restriction, portability or object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing. Rights can be limited where records must be kept for tax, fraud or legal claims.
Email support@autosoftkey.co.uk. We may verify identity and will respond without undue delay. You may complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint or to another competent authority.
9. Security, children and changes
We use HTTPS, access controls, protected download locations, updates, backups and payment-tokenisation measures appropriate to the service. No internet system can be guaranteed risk-free.
The PDF Library is not directed to children under 16. A purchaser must be at least 18 or have authority from a parent, guardian or organisation to make the purchase.
We update this notice when services or legal obligations change. The date at the top identifies the current version.