YOUR CHOICES

Consumer Health Data Privacy

Last updated: October 21, 2026

Categories and sources

Information linked or reasonably linkable to you that reveals an interest in surrogacy may be consumer health data. We receive account email, optional contact profile names and phone, saved agencies, comparisons, search preferences, and your permission choices directly from you. Older records may include preferred name, state or territory, research stage, timeline, and separate phone-call permissions. We retain consent timestamps and the notices presented.

Using the site also generates technical information such as request and browser/device information. Page and agency interactions measured by analytics can reveal an interest in reproductive services. We treat this information as potentially sensitive where it is reasonably linkable to you. We do not request medical history or identity documents during onboarding or create additional medical profiles from your answers.

Collection, processing, and purposes

We process account and saved-choice information to provide the account and shortlist you request. An optional contact profile requires your separate collection permission and supports your agency search, including access by authorized staff. Security and hosting providers process technical information to deliver and protect the service. Analytics measures use of the directory by default. These activities use electronic storage and processing; agency fit is not a clinical or legal assessment.

SurroCompass email permission is separate and optional. Declining profile collection, marketing, or sharing does not prevent browsing or use of the basic account service. Terms acceptance is not health-data marketing or sharing consent.

Sharing and recipients

With your separate, initially unchecked profile-sharing choice, the intended recipients are surrogacy agencies you save to your shortlist now or later, so they can email you about their services. The covered information is your first and last name, verified email, optional phone, and surrogacy interest. Other saved agencies, search history, and older research answers are excluded. While the choice is on, saving or re-adding an agency includes it; removing an agency stops future sharing with it. Phone disclosure does not authorize calls or texts.

Introductions and parent marketing emails have not started. We record your choices without delivering contact information to agencies. Older named-agency email-only choices retain their narrower scope until replaced or withdrawn. The separate legacy phone-permission feature also does not deliver contact details. We do not sell consumer health data, and these permissions do not authorize a sale. Sponsors, data brokers, and AI drafting providers do not receive parent profiles or shortlists through these features. No affiliates receive parent account data.

Cloudflare processes account verification emails, hosting, security checks, storage, and backups. PostHog processes anonymous page and agency interactions as described in Cookies and analytics: page views, a sanitized referring site, utm_ tags, public agency profile views and website clicks, and device or browser information. It does not receive email, account identity, form contents, parent contact or health-profile answers, saved lists, searches, or session recordings. A network request can still expose connection information to PostHog’s US servers. We do not start PostHog when Do Not Track or Global Privacy Control is enabled. We do not authorize third parties to collect health data across unrelated websites for advertising through this service.

Retention and deletion

Optional contact profiles and onboarding consent history expire 12 months after your last confirmation or when deleted. Full account deletion also removes the account, shortlist, comparisons, search preferences, legacy phone profile, and associated consent records from active account storage. Separate profile deletion keeps the account and saved choices. Either deletion withdraws the affected permissions.

Routine encrypted backups expire after 14 days; earlier backups are invalidated after privacy changes. Provider recovery history can remain for up to 30 days. The current privacy journal must be applied before recovered records can be served. It stores keyed fingerprints and the actions needed to prevent deleted data and withdrawn permissions from reappearing. Minimum request contact information is retained while provider follow-up is pending, then removed from the active request queue.

Your privacy rights and requests

You can ask whether we collect, share, or sell information about you; obtain a copy; correct it; withdraw collection or sharing permission; or request deletion. For consumer health data, you may also request a list of the third parties and affiliates that received it and a way to contact them. We do not sell parent contact profiles or consumer health data.

Use the controls in Account, or email privacy@surrocompass.com with the request you want to make. You do not need to create an account. If possible, write from the email address you used with us. We verify requests using information reasonably needed to establish ownership; please do not send medical records or identity documents unless we explain why they are necessary.

Account offers a copy of your account information, separate controls to withdraw permissions or delete only your optional contact profile, and a control to delete your account, shortlist, comparisons, search preferences, profiles, and associated consent records. Full account deletion signs you out on all devices. We retain the minimum request information needed to finish deletion with our service providers and respond to you. Requests involving emails, business inquiries, or other records can also be sent to the privacy address.

We respond without undue delay and generally within 45 days of receiving a request. If applicable law permits an extension and we need one, we explain why and the new deadline within the initial period. We provide health-data access requests free of charge at least twice annually, subject to lawful exceptions for excessive or unfounded requests. We do not discriminate against you for exercising privacy rights.

When deleting consumer health data, we notify relevant processors and other recipients and address retained copies and backups. If we cannot fulfill a request in whole or in part, we explain the reason and any applicable exception. Withdrawal stops future processing based on that permission; it does not undo processing already completed lawfully.

Appeals

If we decline your request, reply to our decision or email privacy@surrocompass.com with “Privacy appeal” and your request reference or the date of our response. We review the decision and provide a written explanation within 45 days. If we deny your appeal, we provide a way to contact the appropriate state attorney general. You can also contact the Washington Attorney General or the Nevada Attorney General.

Material changes

We update the last-updated date and post a prominent notice on this policy and in the account area before material changes take effect, or notify you by email when appropriate. Additional health-data categories, recipients, or purposes requiring permission will be disclosed and require a new affirmative choice before processing. Earlier permission does not expand automatically.