I can access files when logged out

Hi, I’ve had this plugin set up a while, and users must be logged in to view my files.

I’ve just put a file url into a private browser and it’s letting me view it… https://ceba-uk.org/pdf/design-construction-specification-and-fire-management/

What do I need to do to prevent this from happening?

Thanks, hope you can help