PRIVACY POLICY

Surge & Co
Effective Date: February 2026

1. Who We Are

Surge & Co is the trading name of Kulbir Kaur, a sole trader operating in the United Kingdom.

Website: www.surgeandco.co.uk
Email: hello@surgeandco.co.uk

For the purposes of UK data protection law, Surge & Co is the data controller of your personal data.

2. What Information We Collect

We may collect and process the following personal data:

  • Name

  • Email address

  • Telephone number (if provided)

  • Company name

  • Any information you submit via our contact form

  • Website usage data (via Google Analytics)

We only collect information that is necessary to respond to enquiries or provide services.

3. How We Use Your Information

We use your personal data to:

  • Respond to enquiries submitted via our website

  • Provide consultancy services

  • Manage client relationships

  • Improve website performance and user experience

  • Send marketing communications where consent has been provided

We do not sell, rent, or trade your personal data.

4. Marketing Communications

We will only send marketing communications where:

  • You have actively opted in to receive them, or

  • We have an existing client relationship and the communication is relevant to our services.

You may unsubscribe at any time by clicking the unsubscribe link in emails or contacting hello@surgeandco.co.uk.

5. Lawful Basis for Processing

Under UK GDPR, we rely on:

  • Legitimate interest (to respond to enquiries and provide services)

  • Consent (for marketing communications)

  • Contract (where we are delivering agreed services)

6. Data Storage and Security

Personal data is stored securely and access is restricted to Kulbir Kaur only.

We take reasonable steps to protect your information from unauthorised access, alteration, or disclosure.

7. Third-Party Services

We use Google Analytics to understand website usage.

In future, we may use third-party tools such as:

  • Google Ads

  • Meta (Facebook) advertising

  • LinkedIn advertising

  • Mailchimp (for email marketing)

Where these services are used, they process data in accordance with their own privacy policies.

8. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Withdraw consent for marketing

To exercise these rights, contact: hello@surgeandco.co.uk 

9. How Long We Keep Your Data

We retain personal data only for as long as necessary to:

  • Respond to enquiries

  • Deliver services

  • Meet legal or regulatory obligations

10. Changes to This Policy

We may update this Privacy Policy periodically. The latest version will always be available on our website.