No - It is a php script that uploads the file (from an HTML form).
On further research it seems to be that the files are uploaded as user NOBODY. I think the server does a check periodicaly for unclaimed files and sets their privelidges to something a bit safer.
So perhaps I can change the user before storing the files, or perhaps if I set the privelidges a little lesser it will leave them alone.
(No doubt the Linux/UNIX boys will laugh at my lack of UNIX awareness - I'm a Windows man myself (boo hiss)!)