Privacy Policy

Last updated: 18 October 2026

This policy explains what personal data Surge FBA collects, why we collect it, and your rights.

1. Who we are

Surge FBA is run by Jay Meldrum, a sole trader based in Scotland. We're the "controller" of your personal data, which means we decide how it's used.

• Email: jay@surgefba.com
• Address: 61 Barleyknowe Crescent, Gorebridge EH23 4EP

2. What we collect

• Sign-up and payment details: your name, email address, billing address and payment details when you start a trial or pay. Stripe processes your card, and we never see or store your full card number.
• Discord details: your Discord username and user ID, so we can give you access to the server and manage your membership.
• What you post: messages, images and other content you share in the Surge FBA Discord.
• Messages to us: anything you send us by email, on Discord or elsewhere.
• Website data: our hosting provider records basic technical data when you visit, such as your IP address, browser type and the pages you view, to keep the site secure and working.

3. How we use your data, and why we're allowed to

• To provide your membership: setting up your membership, taking payments, giving and removing Discord access, and contacting you about your membership. We do this because it's needed for our contract with you.
• To keep tax and accounting records. We do this because the law requires it.
• To run the community safely: moderating the server, enforcing our terms, and preventing fraud and repeat free trials. We do this because it's in our legitimate interests, and the interests of our members.
• To improve Surge FBA, for example by seeing which features members use most. We do this because it's in our legitimate interests.
• To send you news and offers by email, only if you've agreed to this. You can opt out at any time.

4. Who we share it with

We never sell your personal data. We only share it with:

• Stripe, which handles our payments
• Discord, which runs our community
• Cloudflare, which hosts our website
• our accountant, and HMRC or other authorities when the law requires it
• professional advisers, the police or regulators, if we have to by law

Stripe and Discord also handle some of your data under their own privacy policies, because you have accounts with them.

5. Data sent outside the UK

Stripe, Discord and Cloudflare may store or process data in the United States and other countries. When they do, your data is protected by safeguards recognised under UK law, such as the UK–US data bridge or approved contract clauses.

6. How long we keep it

• Membership details: while you're a member, and for up to 12 months after you leave, in case of questions or disputes.
• Payment and tax records: for 6 years, because the law requires it.
• Discord messages: until you or we delete them, or the server is closed. You can delete your own messages at any time.
• Website logs: for a short time only, as set by Cloudflare.

7. Cookies

Our website doesn't use advertising or analytics cookies. Cloudflare may set strictly necessary cookies to keep the site secure, and Stripe uses its own cookies on its checkout pages. If we add analytics in the future, we'll update this policy and ask for your consent where needed.

8. Your rights

You have the right to:

• get a copy of the data we hold about you
• correct data that's wrong
• ask us to delete your data
• ask us to limit or stop using your data, or object to how we use it
• get your data in a format you can take elsewhere
• withdraw your consent at any time, where we rely on it

To use any of these rights, email us at jay@surgefba.com. We'll reply within one month. Some rights have limits. For example, we must keep payment records for tax purposes.

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Keeping your data safe

We use trusted providers and limit who can access member data. No way of sending or storing data is completely secure, but we take reasonable steps to protect it.

10. Under 18s

Surge FBA isn't for anyone under 18, and we don't knowingly collect their data.

11. Changes to this policy

We may update this policy from time to time. When we do, we'll change the date at the top, and we'll tell members about any important changes.