Skip to content
Q3 openings: 3 growth retainers left for new partners.Check availability
Surgemint
Legal

Privacy Policy

How Surgemint collects, uses and protects personal information. Last updated 1 August 2026.

1. Who we are

Surgemint Digital Pvt. Ltd. ("Surgemint", "we", "us") operates surgemint.com and provides digital marketing and web development services. This policy explains what personal information we collect, why we collect it, and what rights you have over it.

For any privacy question, or to exercise a right described below, contact privacy@surgemint.com. We respond to all requests within 30 days.

2. Information we collect

We collect the following categories of information:

  • Information you give us: name, email address, phone number, company, country, service interest, budget range and anything you write in a message field when you submit a contact or quote form.
  • Information collected automatically: IP address (stored only in hashed form), browser and device type, pages viewed, referring URL, and campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content).
  • Cookies and similar technologies: strictly necessary cookies for site function, plus analytics and advertising cookies where you have consented.
  • Client engagement data: information shared with us in the course of delivering services, handled under the confidentiality terms of the relevant services agreement.

3. How we use your information

We use personal information for the following purposes:

  • To respond to enquiries and prepare proposals you have requested.
  • To deliver, support and improve the services you have engaged us for.
  • To measure marketing performance and understand which channels bring qualified enquiries.
  • To send service updates and, where you have opted in, occasional insights email. Every email includes a one-click unsubscribe.
  • To comply with legal, tax and accounting obligations.

5. Advertising and analytics

We use Google Analytics 4 and Google Tag Manager to understand site usage, and we may use the Meta pixel and Google Ads conversion tracking to measure advertising performance. These tools set cookies and may transfer data to the United States under appropriate transfer mechanisms.

Advertising and analytics tags do not load until you consent through our cookie banner. You can withdraw consent at any time using the cookie preferences link in the site footer. You can also opt out of Google Analytics using the browser add-on Google provides.

We do not sell personal information, and we do not share it with advertising partners for cross-context behavioural advertising as those terms are defined under US state privacy laws.

6. Sharing and processors

We share personal information only with service providers who process it on our behalf under contract:

  • Hosting and infrastructure providers (Vercel, Railway, MongoDB Atlas).
  • Analytics and advertising platforms (Google, Meta, LinkedIn) where you have consented.
  • CRM and email delivery providers used to manage enquiries and communications.
  • Professional advisers, and authorities where disclosure is legally required.

7. International transfers

We operate from the United States, the United Kingdom, the European Union, India and Australia. Personal information may therefore be transferred outside your country of residence. Where information leaves the UK or EEA we rely on Standard Contractual Clauses or an adequacy decision, and we apply supplementary technical measures including encryption in transit and at rest.

8. Retention

Enquiry and lead records are retained for 24 months from the last interaction unless you ask us to delete them sooner. Client engagement records are retained for seven years after the engagement ends to meet contractual and tax obligations. Analytics data is retained for 14 months. Hashed IP addresses are retained for 12 months for security and abuse prevention.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, port or restrict processing of your personal information, to object to processing based on legitimate interests, and to withdraw consent at any time. Residents of California, Colorado, Connecticut, Virginia and other US states with comprehensive privacy laws have equivalent rights, including the right not to be discriminated against for exercising them.

To exercise any right, email privacy@surgemint.com. We may need to verify your identity. If you are in the UK or EEA and are not satisfied with our response, you may complain to your local supervisory authority.

10. Security

We apply encryption in transit and at rest, role-based access control, least-privilege credential management, mandatory multi-factor authentication on all internal systems, and annual third-party security review. No system is perfectly secure, and we will notify affected individuals and regulators without undue delay if a breach materially affects your rights.

11. Children

Our services are directed at businesses. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact privacy@surgemint.com and we will delete it.

12. Changes to this policy

We may update this policy to reflect changes in our practices or the law. Material changes will be announced on this page with a revised effective date, and where legally required we will seek fresh consent.