Our Privacy Commitments at a Glance
SurgiMart is built on absolute transparency. We treat your personal data with the same rigor and security standards that we demand from our antivirus and cybersecurity partners.
Zero Data Brokerage
We do not monetize, sell, or rent your personal records, contact information, or browsing behaviors to third-party ad brokers.
Bank-Grade Encryption
Payments are tokenized via Stripe and PayPal under PCI-DSS Level 1 compliance. We never store raw credit card numbers.
Total User Control
You maintain full authority over your data. Request complete export, rectification, or permanent erasure of your records at any time.
Introduction & Scope
Welcome to SurgiMart.shop (referred to as "SurgiMart", "DigiFort", "we", "us", or "our"), operated by DMB Transit Inc. We provide an independent digital commerce platform dedicated to helping individuals and organizations compare, license, and acquire authentic digital security software.
We deeply respect your privacy and are committed to safeguarding your personal information through robust technical, legal, and operational controls. This Privacy Policy governs all interactions with our website (https://surgimart.store/), our digital license dispatch systems, customer support channels, and associated account management features.
By accessing or using SurgiMart.shop, creating a customer account, ordering security software, or communicating with our human support engineers, you acknowledge and agree to the practices described in this document.
Information We Collect
In order to fulfill your digital orders, generate legitimate license keys, and provide customer support, we collect information across three distinct categories:
Personal Data
Identity
- • Full name of account holder
- • Primary verified email address
- • Contact telephone number
- • Billing & tax jurisdiction address
- • Account authentication credentials
Order & Licensing
Transactional
- • Antivirus software tier selected
- • Digital product key delivery logs
- • Invoice and transaction IDs
- • Payment provider reference tokens
- • Support desk ticket history
Technical Telemetry
Automated
- • Anonymized IP address
- • Web browser type & version
- • Operating system (Windows/macOS/iOS)
- • Timestamp & session duration
- • Security session cookies
* Principle of Data Minimization: We collect strictly the information reasonably necessary to process orders, comply with tax requirements, and ensure digital license activation.
How We Use Your Information
We process your personal information only when we have a legitimate, lawful basis under applicable data protection laws. Below is our processing matrix:
| Purpose of Processing | Specific Activities | Lawful Basis |
|---|---|---|
| Order Fulfillment | Generating authentic product keys, delivering license credentials via email, sending order confirmation invoices. | Contractual Necessity |
| Customer Support | Troubleshooting software activation issues, assisting with multi-device installations, verifying license validity. | Contractual Necessity |
| Fraud Prevention | Screening unauthorized charges, mitigating fraudulent payment attempts, defending platform security. | Legitimate Interest |
| Statutory Compliance | Retaining commercial sales invoices, accounting ledgers, and tax compliance records for regulatory authorities. | Legal Obligation |
| Service Communications | Notifying customers of crucial security updates, renewal notices, and policy changes. | Legitimate Interest |
Payment Information & Financial Security
Customer financial security is our highest operational priority. When you purchase software on SurgiMart, all payment transactions are routed directly through tier-1 certified payment processors.
End-to-End Payment Tokenization
We do not collect, view, or store complete credit/debit card numbers or CVV security codes on our servers. Financial data is encrypted at the client browser and transmitted straight to certified gateways (Stripe, PayPal) using bank-level 256-bit TLS encryption. In return, we receive only a secure token confirming payment authorization.
PCI-DSS Level 1 Certified
256-Bit SSL Encryption
Tokenized Checkout
Visa / Mastercard / Amex / PayPal
Cookies and Tracking Technologies
Cookies are small data files placed on your device to ensure smooth site navigation, remember shopping carts, and preserve security sessions.
| Cookie Type | Purpose & Function | Duration |
|---|---|---|
| Strictly Necessary | Essential for authentication, maintaining shopping cart contents during checkout, and fraud protection. Cannot be disabled. | Session to 30 Days |
| Performance & Analytics | Aggregated, anonymized page performance tracking to optimize download speeds, user flows, and error detection. | Up to 12 Months |
| Functionality & Preferences | Remembers currency preferences, filter selections, and layout configurations for repeat visits. | Up to 6 Months |
Managing Cookies: You can manage, block, or delete cookies at any time via your browser settings (Chrome, Firefox, Safari, Edge). Please note that disabling essential cookies may impact checkout and digital product delivery features.
Sharing of Information
We do not sell, rent, or trade your personal information to third parties under any circumstances. We share relevant information solely with trusted, contractually bound service providers necessary to operate our business:
-
•
Payment Processors & Banking Partners: Stripe, PayPal, and merchant banks to authorize transactions, issue refunds, and detect fraud.
-
•
Digital Key Fulfillment & Authorized Partner Desks: Verified distribution channels to generate and dispatch genuine product activation keys.
-
•
Cloud Hosting & Secure Infrastructure: Enterprise-grade hosting partners providing server infrastructure, data encryption, and DDoS mitigation.
-
•
Legal & Regulatory Authorities: Only when compelled by law, subpoena, or official judicial order in accordance with due legal process.
All third-party service providers are legally obligated to maintain rigorous security measures and are strictly prohibited from using your data for any unauthorized commercial purposes.
Data Security Standards
As a digital security marketplace, we apply multi-layered cybersecurity defense mechanisms to protect customer data from unauthorized access, alteration, loss, or disclosure:
Transport Layer Security
All data transferred between your browser and our servers is secured with TLS 1.3 encryption and 256-bit cryptographic keys.
Role-Based Access Control
Internal data access is strictly limited to authorized personnel with multi-factor authentication (MFA) and least-privilege protocols.
Continuous Monitoring
24/7 automated vulnerability detection, firewall telemetry, and real-time threat neutralization across our systems.
Please note: While we implement industry-leading protocols, no internet transmission or electronic database can guarantee 100% absolute invulnerability. We advise customers to always protect their account passwords.
Data Retention Schedule
We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, service active license guarantees, and satisfy statutory tax and commercial requirements:
| Record Category | Retention Period | Reason for Retention |
|---|---|---|
| Active Customer Accounts | Lifetime of account until customer deletion request | Allow license re-download, key lookup, and renewals. |
| Invoices & Financial Records | 7 Years from date of purchase | Mandatory commercial, accounting, and tax compliance. |
| Customer Support Tickets | 2 Years after resolution | Quality assurance, warranty validation, and dispute defense. |
| Web Server & Security Logs | 90 Days rolling purge | Fraud mitigation, error diagnostics, and system security. |
Your Privacy Rights & How to Exercise Them
Under applicable data protection frameworks (including India's DPDP Act 2023, GDPR, and global privacy standards), you possess enforceable legal rights regarding your personal information:
Right to Access & Disclosure
You have the right to request a complete copy of all personal information and purchase histories maintained by SurgiMart.
Right to Rectification
Request prompt correction of any inaccurate, outdated, or incomplete personal records stored in our databases.
Right to Erasure ("Right to Be Forgotten")
Request permanent deletion of your personal data when it is no longer required for statutory legal compliance.
Right to Data Portability
Obtain your personal transaction and account records in a structured, commonly used machine-readable format (CSV/JSON).
Right to Withdraw Consent
Revoke previously granted consent for processing activities that rely upon voluntary consent at any time without penalty.
Right to Grievance Redressal
Submit formal privacy complaints directly to our designated Data Protection Officer for expedited internal review.
How to Exercise: To submit any privacy request, please contact our Data Protection Team at support@surgimart.store. We will confirm your identity and respond within statutory deadlines (maximum 30 days).
Third-Party Websites & Antivirus Vendor Portals
Our website contains links to external software vendor activation portals, including Norton (Gen Digital Inc.), McAfee LLC, Bitdefender SRL, and Webroot (OpenText).
Once you click on external vendor links to activate your digital license key or download installer packages from the official brand websites, their independent privacy terms and security practices will govern your interaction. We strongly encourage you to review each vendor's respective privacy policy.
Children's Privacy Protection
SurgiMart.shop is designed for adult consumers, IT administrators, and businesses. We do not knowingly collect, solicit, or maintain personal information from individuals under the age of 18 (or the age of legal majority in your jurisdiction).
If we discover that personal data has been unintentionally submitted by a minor without verified parental authorization, we will take immediate steps to permanently delete the records from our servers. Parents or guardians may alert our privacy desk immediately.
Marketing Communications & Preferences
We respect your inbox. We send promotional newsletters, antivirus price-drop alerts, and renewal discounts only when you have explicitly opted in, or as permitted by law:
Unsubscribing: Every promotional email includes an automated one-click "Unsubscribe" link at the bottom. You can also adjust your preferences by contacting customer support.
* Note: Opting out of marketing emails does not affect critical transactional communications, such as license delivery keys, security alerts, and payment receipts.
Changes to This Privacy Policy
We periodically update this Privacy Policy to reflect advancements in cybersecurity standards, platform enhancements, and evolving regulatory mandates.
When updates occur, we will post the revised document directly to this page and adjust the "Last Updated" timestamp at the top of the policy. For material alterations affecting user data rights, we will provide additional notice through site alerts or direct email notifications.
Applicable Laws & Regulatory Governance
This Privacy Policy is established in accordance with applicable global and regional data protection frameworks, including:
-
•
India Digital Personal Data Protection Act, 2023 (DPDP Act): Operating principles of consent, notice, purpose limitation, and user rights as enacted.
-
•
General Data Protection Regulation (GDPR - Regulation EU 2016/679): High-standard data governance, lawful bases, and cross-border protection.
-
•
United States Consumer Privacy Standards: State data protection principles including California Consumer Privacy Act (CCPA) transparency standards.
Privacy Desk & Contact Information
If you have questions regarding this Privacy Policy, wish to exercise your legal data rights, or want to discuss our data protection controls, our Data Protection Officer (DPO) and compliance team are at your service:
SurgiMart Compliance Operations
Owned & Operated by DMB Transit Inc. Licensed Digital Commerce Provider.
Austin, TX 78701
Thank you for placing your trust in SurgiMart. We are dedicated to maintaining the highest benchmark of digital security and consumer privacy.