Privacy policy

Last updated: 27 August 2026

This policy describes what personal information SURGE Pept, a trading name of Mulvix LLC, collects when you visit this website, place an order or contact us; why we collect it; who else processes it; and what you can ask us to do with it.

1. Who is responsible

Mulvix LLC (trading as SURGE Pept)
30 N Gould St Ste R, Sheridan, WY 82801, United States
Email: info@surgepept.com — Phone: +1 307 449 2584

We are the data controller for everything described here.

2. What we collect

- Order details — your name, email address, shipping address, the items you ordered and the amount paid. We need these to perform the contract.
- Payment details — handled entirely by our payment provider. We receive a confirmation that payment succeeded and the last four digits of the card. We never see or store your full card number.
- Correspondence — what you write to us by email, and our reply.
- Technical data — your IP address, browser and the pages you requested, kept in server logs by our hosting provider for security and troubleshooting.

3. What stays on your own device

Your shopping cart lives in your browser's local storage, not on our servers. We do not see it until you go to checkout. We also store your country code, read once from our hosting provider, so that the free-shipping threshold shown is the one that actually applies to you. Clearing your browser data removes both.

We do not use advertising cookies, we do not run third-party tracking pixels, and we do not build profiles for targeted advertising.

4. Who else processes your data

- Cloudflare, Inc. — hosting and delivery of this website. Processes technical data (IP address, request logs).
- Stripe, Inc. — payment processing. Receives the data needed to take the payment and to meet financial regulations.
- Our email provider — delivery of order confirmations and replies.
- Couriers — the name and address needed to deliver your parcel.

Each of these acts on our instructions under a written agreement. We do not sell your personal information, and we do not share it with advertising partners.

5. How long we keep it

Order and payment records are kept as long as tax and accounting law requires. Correspondence is kept for two years. Server logs are kept for a short period by the hosting provider. Anything else is deleted or anonymised within twelve months of a request, unless we must keep it for a legal reason.

6. Your rights

Depending on where you live, you may ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or send it to someone else. You may also object to processing based on our legitimate interests. Email info@surgepept.com and we answer within one month. We will not treat you differently for asking.

7. International transfers

We are established in the United States and our providers may process data outside the country you live in. Where data leaves the European Economic Area or the United Kingdom, the transfer rests on the European Commission's Standard Contractual Clauses or an equivalent mechanism.

8. Children

This store is not intended for anyone under 18 and we do not knowingly collect information about children. If you believe a child has given us their data, email us and we will delete it.

9. Security

The site is served over HTTPS and payment happens on the provider's own systems. No system is perfect; please do not send sensitive information to us by plain email.

10. Complaints

If you think we have handled your personal information incorrectly, tell us first — most things are settled faster that way. You may also complain to the supervisory authority where you live or work. In the Netherlands that is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

11. Changes

We may update this policy. The date at the top says when it last changed.