Privacy Policy

Privacy Policy

KSC Digital Ltd (trading as Surge Music) is committed to the protection of users’ personal data (hereinafter, “Data”) in accordance with UK and European regulations, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy outlines how data is collected, processed, and how users can exercise their rights.


Data Controller

The controller of personal data is KSC Digital Ltd, a private limited company registered in England and Wales under company number 13650537 with its registered office at 2 Cossins Road, Bristol, BS6 7LY.


Types of Data Collected

We collect personal data necessary for the functioning and improvement of our services. This may include:

  • Personal Information: Name, email address, phone number, mailing address, billing address, date of birth, and gender.

  • Uploaded Assets: Media files such as videos, images, and audio files uploaded by users.

  • Usage Data: IP address, browser type, and cookies.

  • Account Data: Login credentials and activity logs.

  • Third-Party Data: Information accessed through integrations with services such as Google or Meta (e.g., advertising account connections).

If you provide data related to third parties, you confirm that you have obtained their consent to share this information with us.


Purpose of Processing

We use the collected data for the following purposes:

  1. User Account Management: Registration, authentication, and maintaining user accounts.

  2. Service Delivery: Generating short-form video content based on user inputs and uploaded assets.

  3. Personalization: Improving user experience by tailoring content and services.

  4. Support: Providing technical assistance and customer service.

  5. Marketing: Sending newsletters, promotional materials, and updates.

  6. Legal Compliance: Fulfilling obligations under applicable laws and responding to legal requests.

  7. Analytics: Measuring platform usage and improving functionality.


Use of Data for AI Training

Surge Music uses anonymized user data to improve and train its artificial intelligence systems. Personal data processed for this purpose is stripped of identifiable information (PII) in compliance with UK GDPR. Users may request the deletion of their data, as described in the "Data Retention" section.


Legal Basis for Processing

Data processing is conducted under the following legal bases:

  • Contractual Necessity: For providing our services.

  • Legitimate Interests: For improving and safeguarding our platform.

  • Consent: For marketing communications and optional data processing.

  • Legal Compliance: To meet statutory obligations.


Consent

By using our services, users consent to the anonymized processing of their data for AI training and to connect their accounts with third-party services. Users can withdraw consent at any time by contacting us at hello@surgemusic.io or through their account settings.


Data Retention

We retain personal data only as long as necessary for the purposes outlined:

  • User Data: 180 days after account deactivation.

  • Billing Records: 6 years to comply with tax laws.

  • Uploaded Assets: Deleted within 30 days of account deactivation or upon user request.

  • Cookies: Stored for up to 13 months.


Cookies

We use cookies to:

  • Enhance user experience by remembering preferences.

  • Provide analytics on website usage.

  • Offer targeted advertisements tailored to user interests.

Users can manage their cookie preferences through browser settings. Visit the following links for guidance:


Security Measures

We implement industry-standard measures to protect your data, including:

  • Encrypted transmission (HTTPS and SSL/TLS protocols).

  • Password-protected accounts with strong password requirements.

  • Two-factor authentication (2FA) for sensitive actions.

  • Regular security audits.


Data Sharing

We share data only when necessary:

  • With Service Providers: Subcontractors assisting in the delivery of our services.

  • Legal Obligations: When required by law or regulatory authorities.

  • International Transfers: Data transferred outside the UK or EEA is safeguarded through Standard Contractual Clauses or equivalent measures.


User Rights

Users have the following rights under UK GDPR:

  1. Access: Obtain a copy of your personal data.

  2. Correction: Request correction of inaccurate data.

  3. Erasure: Request deletion of your data.

  4. Restriction: Limit the processing of your data.

  5. Portability: Receive your data in a structured, commonly used format.

  6. Objection: Object to data processing for specific purposes.

To exercise your rights, contact us at hello@surgemusic.io with the following details:

  • Full name

  • Registered email

  • Specific request

For security purposes, we may request additional identification documents. Requests will be addressed within 30 days.


Contact Us

If you have any questions or concerns regarding this Privacy Policy or the processing of your personal data, please contact us:

KSC Digital Ltd
Email: hello@surgemusic.io


This Privacy Policy may be updated from time to time. Users will be notified of any significant changes via email or a notice on our website. Continued use of our platform signifies acceptance of the revised policy.