Last updated: 3 September 2026
Surge Catalyst (“Surge Catalyst”, “we”, “us” or “our”) respects your privacy. This policy explains how we collect, hold, use and disclose personal information when you visit surgecatalyst.com, contact us or deal with us about our services.
What we collect
The personal information we collect depends on how you interact with us. It may include:
- your name, work email address and other contact details;
- your brand or company name, website and role;
- commercial information you choose to provide, such as approximate monthly revenue, business objectives, current constraints and growth priorities;
- information contained in emails, calls, meeting notes, proposals and other correspondence;
- service, billing and transaction information where you become a client; and
- technical information such as IP address, browser and device type, pages viewed, referring page, approximate location and interactions with the website.
Please do not send sensitive personal information through the enquiry form unless it is necessary and we have agreed to receive it.
How we collect information
We usually collect information directly from you when you submit an enquiry, email us, speak with us, meet with us or enter into a services agreement. We may also receive business contact information through referrals, public professional sources, service providers or a person authorised to deal with us on your behalf.
The website may use cookies and similar technologies, including analytics and advertising tags deployed through tools such as Google Tag Manager. These technologies can help us understand website use, measure campaigns, maintain security and improve the site. Depending on our configuration and your choices, third-party providers may receive identifiers and usage information. You can restrict cookies through your browser and, where available, the website’s consent controls. Blocking some cookies may affect site functionality.
Why we use personal information
We may use personal information to:
- respond to enquiries and assess whether Surge Catalyst is a suitable fit;
- prepare proposals, enter into agreements and deliver services;
- communicate about projects, accounts and our relationship with you;
- operate, secure, measure and improve our website, services and marketing;
- keep business, tax and compliance records;
- protect our rights, investigate misuse and prevent fraud or security incidents; and
- send relevant business communications where you have consented or where permitted by law. You can opt out of marketing emails at any time.
When we disclose information
We may disclose personal information to people and organisations that help us operate, including website and cloud hosting providers, email and communications providers, analytics and advertising providers, CRM and project systems, payment and accounting providers, contractors, professional advisers and security providers. We may also disclose information where required by law, in connection with a business reorganisation, or to protect legitimate rights and interests.
We do not sell personal information for money. Analytics and advertising technologies may, however, involve sharing identifiers or usage information with their providers as described above.
Overseas processing
Surge Catalyst works with clients and service providers internationally. Personal information may be stored or processed in Australia, the United States and other countries in which our providers operate. Privacy protections in those countries may differ from those in your location. Where required, we take reasonable steps to use providers and arrangements that provide appropriate protection.
Storage, security and retention
We use reasonable administrative, technical and organisational safeguards designed to protect personal information from loss, misuse and unauthorised access, modification or disclosure. No internet transmission or storage system is completely secure.
We retain personal information only for as long as reasonably needed for the purposes described in this policy, our legitimate business needs and applicable legal, tax and accounting requirements. When information is no longer required, we take reasonable steps to delete or de-identify it.
Access, correction and other rights
You may ask to access or correct personal information we hold about you. Depending on where you live and the law that applies, you may also have rights to request deletion, restrict or object to certain processing, withdraw consent, receive a portable copy of information, or complain to a privacy regulator. These rights can be subject to legal exceptions.
To make a request, email [email protected]. We may need to verify your identity before acting. We will respond within a reasonable period and within any timeframe required by applicable law.
Privacy complaints
If you have a privacy concern, please email us with enough detail for us to investigate. We aim to acknowledge and respond to privacy complaints within 30 days. If Australian privacy law applies and you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au. Other regulators may be available depending on your location.
Children
Our website and services are intended for businesses and are not directed to children under 18. We do not knowingly seek personal information from children.
Changes to this policy
We may update this policy when our practices, services or legal obligations change. The revised version will be posted here with a new “Last updated” date.
Contact
For privacy enquiries, requests or complaints, contact Surge Catalyst at [email protected]. You may also request a copy of this policy in another reasonably accessible form.