Privacy policy

Privacy policy

Last updated: 22/11/2025

This Privacy Policy describes how Surge Solutions (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from surgesolutions.shop (the "Site") or otherwise communicate with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law.

How We Collect and Use Your Personal Information
To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.
In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect
Information We Collect Directly from You
Information that you directly submit to us through our Services may include:
- Basic contact details including your name, address, phone number, email
- Order information including your name, billing address, shipping address, payment confirmation, email address, phone number
- Account information including your username, password, security questions
- Shopping information including the items you view, put in your cart or add to your wishlist
- Customer support information including the information you choose to include in communications with us
Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features.

Information We Collect through Cookies
We also automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, information about your network connection, your IP address and other information regarding your interaction with the Services.

Information We Obtain from Third Parties
We may obtain information about you from third parties, including vendors and service providers who may collect information on our behalf, such as:
- Companies who support our Site and Services, such as Shopify
- Our payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment in order to fulfill your orders
- Marketing platforms, analytics tools, and advertising partners
- Tracking technologies such as pixels, web beacons, SDKs and cookies
Any information we obtain from third parties will be treated in accordance with this Privacy Policy.

How We Use Your Personal Information
Providing Products and Services
We use your personal information to provide you with the Services in order to perform our contract with you. This includes processing payments, fulfilling orders, sending notifications, managing your account, shipping, handling returns, and enabling product reviews.
Marketing and Advertising
We use your personal information for marketing and promotional purposes, including personalised advertising and email/SMS marketing.
Security and Fraud Prevention
We use personal information to detect, investigate and act on fraud or malicious activity.
Communicating with You
We use personal information for customer support and service improvements.

Cookies
We use Cookies to power and improve our Site and our Services. For details on Shopify-powered cookies, visit: https://www.shopify.com/legal/cookies

How We Disclose Personal Information
We may disclose personal information to:
- Vendors and third parties performing services on our behalf
- Business and marketing partners
- Affiliates within our corporate group
- Law enforcement or regulatory bodies where required
- Parties involved in business transfers or mergers
We do not use or disclose sensitive personal information to infer characteristics about you.

Third Party Websites and Links
We are not responsible for third-party websites linked from our Site. You should review their privacy policies before interacting with them.

Children's Data
We do not knowingly collect personal information from children.

Security and Retention of Your Information
We use appropriate security measures, but no system is impenetrable. Retention periods vary depending on:
- Legal requirements
- Account maintenance
- Business needs

Your Rights and Choices
Depending on your region, you may have rights to:
- Access / know
- Delete
- Correct
- Port
- Restrict processing
- Withdraw consent
- Appeal a decision
- Manage marketing preferences
You may exercise these rights by contacting us.

Complaints
You may complain to us or to your local data protection authority.

International Users
Your information may be transferred internationally. Where applicable, we use Standard Contractual Clauses or UK equivalents.

Expiry Tracker (Batch Checker Data Storage)
Our Batch Checker includes an Expiry Tracker feature that allows you to save product expiry information to your dashboard. When you use this feature, the product information you enter is automatically uploaded to our secure Firebase database and synced to your account using your hashed email identifier.
Legal Basis for Processing (Expiry Tracker)
We process Expiry Tracker data under:
Legitimate Interests — enabling secure syncing, personalised account functionality, and cross-device access for this optional feature.

What We Store
When you save an item to the Expiry Tracker, we store:
- Product names, batch codes and order numbers you enter
- Dates of manufacture, purchase dates and expiry-tracking data
- Storage temperatures, ranges and any reminder dates you set
- A SHA-256 hashed version of your email for identification and syncing
- Minimal device and sync metadata required to provide cross-device access
Firebase cannot derive or view your real email address from the hash.

How We Protect Your Data
- Data is encrypted in transit (HTTPS) and at rest
- We never store your email in plain text
- Access is restricted to your authenticated account only
- You may delete individual entries or all Expiry Tracker data at any time
- Deleting data from your dashboard removes it permanently from our database
- We use Google Firebase as our secure data processor

Where Your Data Is Stored
- Data Location: Europe (London)
- Data Processor: Google LLC (Firebase)
- Data Retention: Data exists only while it is stored in your Expiry Tracker. When deleted, it is permanently removed.

Your Rights (Expiry Tracker)
You may exercise:
- Access: View all items stored
- Rectification: Edit entries at any time
- Erasure: Delete entries or all data at any time
- Objection: Choose not to use the Expiry Tracker feature
For more information on Firebase's privacy standards, please visit Google's Privacy Policy.