Privacy notice
What personal data SurgeX Labs handles, why, and the choices you have. The short version: this site sets no cookies, what you send through our contact form is emailed to us and not stored on the website, and we use it only to reply and work with you.
Last updated
Who is responsible for your data
SurgeX Digital is the controller of your personal data — the organization that decides how and why it’s used. SurgeX Digital is a partnership firm registered in Bengaluru, Karnataka, India. SurgeX Labs is its engineering practice.
Contact us at hello@surgexlabs.ai. Our registered address is in our legal notice.
What personal data we collect
Messages you send us
When you email us or use our contact form, we receive your name, work email, company, where you’re based, how you found us, and anything else you include.
Cloudflare request logs
Cloudflare hosts and protects this website. To deliver pages and keep the site secure, it processes technical data about each request: your IP address, browser type, the page requested, and the time. These logs are kept for a short period under Cloudflare’s standard settings.
Cookieless website analytics
We use Cloudflare Web Analytics to count visits. Cloudflare adds its small analytics script to our pages as they are served. It sets no cookies, stores no identifiers on your device, and doesn’t track you across other websites. It doesn’t record your clicks or anything you type. We see only aggregated figures, such as pages viewed, referring sites, countries, device types, and page-load speed.
No cookies
This site sets no cookies. If that changes, we’ll update this notice.
How the contact form works
When you submit our contact form, a small program on Cloudflare checks it and emails it to us. The website doesn’t store your submission; it lives only in our email inbox.
To keep out spam, the form uses Cloudflare Turnstile. It checks signals from your browser and device to tell people from bots. Cloudflare doesn’t use that data for advertising.
To learn which links bring people to us, your browser keeps a short note for the current visit. It records the first page you landed on, the site that referred you, and any campaign tags in the link (utm_source, utm_medium, and utm_campaign).
The note lives in your browser’s session storage and clears when you close the tab. If you submit the contact form, it is sent along with your message so we know how you found us. If you don’t submit, it never leaves your browser.
Why we use it, and our legal bases
The GDPR and UK GDPR — the EU and UK data protection laws — require a legal basis for each use of personal data. Ours are:
- Replying to your inquiry, preparing a proposal, and setting up a call. These are steps you ask us to take before a contract (Article 6(1)(b)). They’re also in our legitimate interest in answering business inquiries (Article 6(1)(f)).
- Delivering and securing this website, and understanding overall traffic. This is in our legitimate interest in running a secure, working website (Article 6(1)(f)).
We don’t use your data for automated decision-making or profiling, and we don’t sell it.
How long we keep it
We keep inquiries and project briefs while we’re in conversation with you. We delete them once they’re no longer needed to reply to you or to prepare a proposal. If we go on to work together, our agreement and applicable law set how long we keep project records.
Cloudflare keeps request logs for a short period under its standard settings. Analytics figures are aggregated and don’t identify you.
International transfers
Our team is based in India, so we handle your data there. Our service providers, including Cloudflare, may process it in other countries. Where the law requires safeguards for these transfers, we put them in place.
Your privacy rights
If you’re in the EU or the UK
Under the GDPR and UK GDPR, you can ask to access, correct, or delete your data. You can also ask us to restrict or stop using it, and to give you a portable copy.
You can complain to your local data protection authority. In the UK, that’s the Information Commissioner’s Office (ICO).
If you’re in California
You can ask to know what personal information we hold about you, and ask us to correct or delete it. We don’t sell or share personal information, and we won’t treat you differently for using these rights.
If you’re in Canada
Under PIPEDA, Canada’s federal private-sector privacy law, you can ask to access and correct your personal information. You can also complain to the Office of the Privacy Commissioner of Canada.
How to make a request
Email hello@surgexlabs.ai. We may need to verify your identity first. We’ll respond within the time the law allows.
EU and UK representative
We haven’t appointed a representative in the EU or the UK. Please contact us directly at hello@surgexlabs.ai — we handle every privacy request ourselves.
Changes to this notice, and contact
If we change how we handle personal data, we’ll update this page and the date at the top. Questions about this notice go to hello@surgexlabs.ai.