SurgPass

Privacy Policy

Last Updated: December 29, 2025

1. Introduction

SurgBoards, LLC (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting it through our compliance with this policy. This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit the website surgpass.com (our “Website”) and use our ABSITE and ABS QE preparation services (the “Services”), and our practices for collecting, using, maintaining, protecting, and disclosing that information. This policy is designed to comply with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and to satisfy the “Know Your Customer” (KYC) requirements of our payment processors.

2. Information We Collect About You

We collect several types of information from and about users of our Website, including:

A. Personal Information You Provide Directly When you register for an account or purchase a study package, we collect the following:

  • Identity Data: First name, last name.
  • Contact Data: Email address, telephone number, billing address (Street, City, State, Zip Code, Country).
  • Professional Data: PGY Level (Postgraduate Year), Residency Program name.
  • Marketing Data: How you heard about us.

B. Automated Data Collection As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, specifically:

  • Google Analytics: We use Google Analytics to track site traffic and usage patterns.
  • This may include your IP address, browser type, operating system, and pages visited.

C. Payment Information We do not store your financial data. All payment transactions are processed through Stripe, a third-party payment processor. You provide your credit card number, expiration date, and security code directly to Stripe. Stripe’s use of your personal information is governed by their Privacy Policy.

3. How We Use Your Information

We use information that we collect about you or that you provide to us:

  • To Provide Services: To grant you access to the question bank for the specific fixed term (30, 60, 90, 180, or 365 days) you purchased.
  • Account Management: To manage your account, provide customer support, and verify your identity.
  • Transaction Processing: To process your one-time payments and prevent fraud.
  • Service Improvement: To analyze how residents use our question bank to improve our content and user experience.
  • Communication: To send you notices about your account, such as expiration warnings or technical updates.

4. Disclosure of Your Information

We are a Direct-to-Consumer (DTC) service. We do NOT share your individual performance data, scores, or usage history with your Residency Program Director, Department Chair, or any medical institution unless you explicitly request us to do so in writing or if required by law. We may disclose aggregated information about our users (which does not identify any individual) without restriction. We may disclose personal information that we collect:
  • To Service Providers: To contractors and service providers we use to support our business (e.g., Stripe for payments, Google for analytics, cloud hosting providers) who are bound by contractual obligations to keep personal information confidential.
  • For Legal Reasons: To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
  • Business Transfers: In the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of SurgBoards, LLC’s assets.

5. Data Retention

We retain your personal data only for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

  • Inactive Accounts: Accounts that have been inactive for a period consistent with industry standards may be deleted to comply with data minimization principles.
  • Transaction Records: We retain purchase records for a minimum of seven (7) years to comply with tax and accounting laws.

6. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, California law provides you with specific rights regarding your personal information:

  • Right to Know: You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months.
  • Right to Delete: You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions (e.g., we must retain transaction data for tax purposes).
  • Right to Correct: You have the right to request that we correct inaccurate personal information.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, please contact us at support@surgpass.com.

  • “Do Not Sell or Share My Personal Information”: SurgBoards, LLC does not sell your personal information to third parties for monetary consideration.
  • We do use Google Analytics, which may be considered “sharing” for cross-context behavioral advertising under California law. You may opt-out of this tracking by using a browser plugin or contacting us.

7. Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access. However, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website.

8. Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact us at: SurgBoards, LLC Irvine, CA. Email: support@surgpass.com.