Privacy Policy

1. Who We Are

Ivy Surrogacy is a full-service surrogacy and egg donation agency headquartered in Los Angeles, California. We are licensed by the New York State Department of Health and are proud members of SEEDS (Society for Ethics in Egg Donation and Surrogacy).

• 🌐 Website: www.ivysurrogacy.com
• 📧 Email: [email protected]
• 📞 Phone: (626) 545-1617
• 📍 Address: Los Angeles, California, USA

2. Information We Collect

We collect the following types of information:

• Contact details: name, email, phone number, mailing address.
• Application data: age, reproductive history, medical background, photographs, and other information submitted through our surrogate, egg donor, or intended parent applications.
• Health information: voluntarily provided medical data, which we treat as sensitive information with enhanced protections.
• Technical data: IP address, browser type and version, device information, and cookies.
• Usage data: pages visited, time spent on site, referral sources, and marketing engagement metrics.

3. How We Use Your Data

We use your information to:

• Evaluate applications from surrogates, egg donors, and intended parents.
• Match intended parents with suitable surrogates and egg donors.
• Coordinate with IVF clinics, attorneys, and other service providers.
• Communicate with you about your application status and our services.
• Improve our website functionality and user experience.
• Comply with legal and regulatory requirements.
• Send marketing communications (only with your consent).

4. Health Information Notice

Ivy Surrogacy is not a medical provider and is not classified as a HIPAA "covered entity." However, we recognize the sensitivity of health-related information such as reproductive history and medical background.

We apply industry-standard safeguards guided by HIPAA principles, including:

• Encrypted data transmission using SSL/TLS protocols
• Access controls limiting who can view sensitive information
• Secure storage on trusted cloud infrastructure
• Regular security assessments and updates

Your health information is shared only with licensed medical professionals, IVF clinics, or legal advisors directly involved in your case, and only through secure channels.

5. Cookies & Tracking Technologies

What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They help us improve site functionality, analyze usage patterns, and provide personalized experiences.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for basic site operation, including form submissions, session management, and security features. These cannot be disabled.
• Performance & Analytics Cookies: Help us understand how visitors use our site through tools like Google Analytics. These measure traffic patterns and help us improve our services.
• Functional Cookies: Remember your preferences such as language settings and cookie consent choices.
• Marketing Cookies: Track browsing activity to deliver relevant advertisements through platforms like Google Ads and Meta (Facebook) Pixel.

Managing Your Cookie Preferences

When you first visit our site, you will see a cookie consent banner where you can accept or manage your cookie preferences. You can also control cookies through your browser settings:

• Google Chrome
• Mozilla Firefox
• Safari
• Microsoft Edge

Please note that disabling certain cookies may affect website functionality.

Third-Party Services

We use the following third-party services that may set cookies:

• Google Analytics: Website traffic analysis
• Google Tag Manager: Tag management
• Cloudflare: Security and performance optimization
• Cloudflare Turnstile: Bot protection for forms

These third parties have their own privacy policies, and we encourage you to review them.

6. Sharing of Data

We may share your information with:

• IVF clinics and healthcare providers: To facilitate medical procedures and coordination.
• Reproductive attorneys: For legal contract preparation and compliance.
• Trusted service providers: Including cloud hosting, IT support, and analytics services, all bound by confidentiality agreements.
• Regulatory authorities: When required by law or legal process.

We do not sell your personal data to third parties.

7. Data Security

We implement comprehensive security measures including:

• 256-bit SSL/TLS encryption for all data transmission
• Password-protected system access with multi-factor authentication
• Secure cloud storage with enterprise-grade security
• Regular security audits and vulnerability assessments
• Employee training on data protection best practices

8. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Restriction: Request that we limit how we use your data.
• Portability: Receive your data in a structured, machine-readable format (GDPR).
• Objection: Object to certain types of processing.
• Withdraw consent: Withdraw previously given consent at any time.

To exercise any of these rights, please contact us at [email protected].

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request details about the personal information we have collected about you in the past 12 months.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: You can opt out of the "sale" of your personal information. Note: We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To submit a CCPA request, email us at [email protected] with "CCPA Request" in the subject line.

10. Data Retention

• Application data: Retained for the duration of our relationship and as needed for potential future services.
• Medical and legal documents: Retained as required by applicable laws (typically 7+ years).
• Analytics data: Retained for up to 26 months.
• Marketing data: Retained until you unsubscribe or request deletion.

11. International Data Transfers

If you are located outside the United States, please be aware that your data may be transferred to and processed in the U.S. We apply appropriate safeguards for international transfers, including Standard Contractual Clauses (SCCs) where required by law.

12. Children's Privacy

Our services are intended for individuals 18 years of age and older. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will promptly delete that information.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page with a new "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• 📧 Email: [email protected]
• 📞 Phone: (626) 545-1617
• 📍 Address: Los Angeles, California, USA