Privacy & discretion

SurrogateMatch is an early-access matching and coordination platform operating at surrogatematch.co. For the purposes of EU and UK data protection law, we act as the data controller for information you submit directly to us. We are a pre-launch platform and will update this page as our legal entity, DPO contact, and representative arrangements are finalized.

We only collect information you give us directly, either by filling out a form or by contacting us. We do not buy or scrape personal data from anywhere.

• ●Intended-parent intake: your name, email, preferred contact language, stage in your journey (e.g. exploring, embryos ready), and how you heard about us.
• ●Agency inquiry: your name, agency name, role, email, phone, number of available surrogates, states of operation, and any free-text context.
• ●Egg or sperm donation waitlist: your name, email, and current clinic status.
• ●Any message you send us at hello@surrogatematch.co or during a consultation call.

• ●To respond to your inquiry within 24 hours and schedule a consultation.
• ●To build your preference profile and match you with surrogates from our partner agency network when matching begins.
• ●To understand who we serve, which language matters most, and where our network needs to grow. We use aggregate, not individual, patterns for this.
• ●To comply with legal, tax, and fraud-prevention obligations.

We share your profile only with partner agencies whose surrogates you choose to be introduced to — never without your explicit approval. We do not sell your data. We do not share your data with advertisers. We do not disclose your use of SurrogateMatch to your home country's authorities. When we use third-party service providers (hosting, email delivery, analytics, error tracking) we use only providers with signed data-processing agreements and EU-adequate transfer protections.

Depending on where you live, you have the following rights over your personal data. We honor them regardless of where you live if you ask.

• ●Access — see what data we hold about you.
• ●Correct — fix anything that's wrong.
• ●Delete — remove your data from our systems.
• ●Portability — take your data with you in a portable format.
• ●Object — tell us to stop processing your data.
• ●Withdraw consent — if we rely on consent for a specific use, you can withdraw it at any time.

Email hello@surrogatematch.co with the request. We will respond within 30 days.

We keep your intake information for as long as your match process is active, and for a reasonable period afterward so that we can honor follow-up requests. If you ask us to delete your data, we will do so within 30 days unless a legal obligation requires us to retain it longer.

SurrogateMatch is hosted in the United States. If you are located in the European Economic Area, the United Kingdom, Israel, or another jurisdiction with data protection law, your data may be transferred to and processed in the United States. We rely on standard contractual clauses and similar mechanisms to protect your data in transit and at rest.

We encrypt data in transit (HTTPS) and at rest. We restrict access to your personal data to the small set of people who need it to respond to your inquiry. We are not yet HIPAA-compliant and we do not ask for health information during intake. If you accidentally share health information with us, we will not store it.

For any privacy question, data access request, or correction, email hello@surrogatematch.co. We are a small pre-launch team and we respond to every message personally.

hello@surrogatematch.co