**Effective Date: March 26, 2026**

---

## Introduction

Blue Oak Fertility ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect information when you use our website and services.

**Legal Entity:**  
[Full Legal Company Name]  
[Registration State and Year]  
[Physical Address]  
[Contact Email]  
[Contact Phone]

---

## Information We Collect

### Information You Provide Directly

When you use our website or services, you may provide us with:

**Contact Information:**
- Name
- Email address
- Phone number
- Mailing address
- Country of residence

**Program-Related Information:**
- Marital status
- Family structure
- Nationality and citizenship
- Preferred program jurisdiction
- Budget parameters
- Timeline preferences

**Medical Information (if you proceed with services):**
- Medical history
- Fertility treatment history
- Diagnostic test results
- Genetic screening information
- Health insurance information

**Financial Information:**
- Payment information processed through secure third-party payment processors
- Bank account information for escrow setup (handled by escrow provider)
- Financial capability documentation

**Communication Records:**
- Consultation notes
- Email correspondence
- Chat transcripts
- Phone call records (with your consent where required by law)

### Information Collected Automatically

When you visit our website, we may automatically collect:

**Technical Information:**
- IP address
- Browser type and version
- Device type and operating system
- Referring website
- Pages viewed and time spent on pages
- Geographic location (country/city level)

**Cookies and Tracking Technologies:**
- Session cookies for website functionality
- Analytics cookies to understand how visitors use our site
- Marketing cookies (only with your consent where required)

---

## How We Use Your Information

We use collected information for the following purposes:

**To Provide Services:**
- Respond to consultation requests
- Assess program eligibility
- Coordinate surrogacy and donor programs
- Facilitate communication with clinics, legal professionals, and other partners
- Manage escrow accounts and financial transactions
- Provide case coordination and support

**To Communicate:**
- Send program updates and milestone notifications
- Respond to inquiries and requests
- Provide customer support
- Send administrative information about our services

**To Improve Our Services:**
- Analyze website usage and user behavior
- Improve website functionality and user experience
- Develop new services and features
- Conduct internal research and analytics

**Legal and Compliance:**
- Comply with legal obligations
- Enforce our terms of service
- Protect against fraud and security threats
- Resolve disputes

**Marketing (with consent where required):**
- Send newsletters and educational content
- Provide information about our services
- Conduct surveys and request feedback

---

## Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal information based on:

**Consent:** When you have given explicit consent for specific processing activities (e.g., marketing communications, certain cookies)

**Contract Performance:** When processing is necessary to provide services you have requested or entered into a contract for

**Legitimate Interests:** When we have legitimate business interests (e.g., improving our services, fraud prevention, network security) that do not override your rights

**Legal Obligation:** When we must process information to comply with legal requirements

---

## How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

### Service Providers and Partners

**Medical Partners:**
- Fertility clinics for treatment coordination
- Laboratories for testing and analysis
- Medical professionals involved in your program

**Legal Partners:**
- Licensed attorneys for legal representation and document preparation
- Notaries and document authentication services

**Financial Service Providers:**
- Escrow administrators for fund management
- Payment processors for transaction processing
- Banks and financial institutions as necessary

**Operational Service Providers:**
- Cloud hosting providers
- Email and communication platforms
- Customer relationship management (CRM) systems
- Website analytics providers

**All service providers are contractually required to protect your information and use it only for specified purposes.**

### Legal Requirements

We may disclose information when required by law or in response to:
- Court orders or legal process
- Government or regulatory requests
- Protection of our legal rights
- Prevention of fraud or illegal activity
- Protection of safety and security

### Business Transfers

If we are involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. You will be notified of any such change.

### With Your Consent

We may share information for purposes not described in this policy with your explicit consent.

---

## International Data Transfers

**Our operations are based in the United States.** If you are located outside the United States, your information will be transferred to and processed in the United States.

**For EEA/UK/Swiss residents:** We implement appropriate safeguards for international transfers, including:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions where applicable
- Other legally approved transfer mechanisms

By using our services, you consent to the transfer of your information to the United States and other countries where our service providers operate.

---

## Data Retention

We retain your information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

**Retention Periods:**

**Active Client Information:** Retained for the duration of your program plus 7 years after program completion for legal, financial, and medical record-keeping requirements

**Consultation Inquiries (non-clients):** Retained for 2 years from last contact, then deleted unless you consent to longer retention for marketing purposes

**Financial Records:** Retained for 7 years in accordance with tax and financial regulations

**Medical Records:** Retained in accordance with applicable medical record retention laws (typically 7-10 years, longer for minors)

**Marketing Communications:** Retained until you unsubscribe or withdraw consent

**Website Analytics:** Aggregated and anonymized data may be retained indefinitely

After retention periods expire, we securely delete or anonymize your information.

---

## Your Privacy Rights

Depending on your location, you may have the following rights:

### Rights for All Users

**Access:** Request confirmation of what personal information we hold about you

**Correction:** Request correction of inaccurate or incomplete information

**Deletion:** Request deletion of your information (subject to legal retention requirements)

**Opt-Out of Marketing:** Unsubscribe from marketing communications at any time

### Additional Rights for EEA/UK/Swiss Residents (GDPR)

**Data Portability:** Receive your information in a structured, machine-readable format

**Restriction of Processing:** Request limitation on how we process your information

**Objection:** Object to processing based on legitimate interests or for direct marketing

**Withdraw Consent:** Withdraw consent at any time (without affecting prior processing)

**Lodge a Complaint:** File a complaint with your local data protection authority

### Additional Rights for California Residents (CCPA/CPRA)

**Know:** Know what personal information we collect, use, disclose, and sell (we do not sell personal information)

**Delete:** Request deletion of personal information

**Opt-Out:** Opt out of sale or sharing (not applicable as we do not sell information)

**Non-Discrimination:** Not be discriminated against for exercising privacy rights

**Correct:** Request correction of inaccurate information

**Limit Use of Sensitive Information:** Limit use of sensitive personal information (medical, financial)

### How to Exercise Your Rights

To exercise any of these rights, contact us at:

**Email:** [privacy@blueoakfertility.com]  
**Mail:** [Physical Address]  
**Phone:** [Contact Phone]

We will respond to verified requests within 30 days (45 days for complex requests). We may require verification of your identity before processing requests.

---

## Data Security

We implement reasonable technical, administrative, and physical security measures to protect your information, including:

**Technical Measures:**
- Encryption of data in transit (SSL/TLS)
- Encryption of sensitive data at rest
- Secure server infrastructure
- Regular security assessments and updates
- Access controls and authentication

**Administrative Measures:**
- Employee training on data protection
- Confidentiality agreements with staff and partners
- Limited access to personal information on a need-to-know basis
- Incident response procedures

**Physical Measures:**
- Secure facilities with restricted access
- Secure disposal of physical records

**However, no method of transmission or storage is 100% secure.** While we strive to protect your information, we cannot guarantee absolute security.

---

## Cookies and Tracking Technologies

Our website uses cookies and similar technologies. You can control cookie preferences through your browser settings.

### Types of Cookies We Use

**Strictly Necessary Cookies:** Required for website functionality (cannot be disabled)

**Analytics Cookies:** Help us understand how visitors use our site (Google Analytics or similar)

**Marketing Cookies:** Used for advertising and remarketing (only with consent where required)

### Managing Cookies

You can:
- Adjust browser settings to refuse cookies
- Delete cookies already stored on your device
- Use our cookie consent tool (where provided)

**Note:** Disabling certain cookies may affect website functionality.

### Do Not Track Signals

Our website does not currently respond to "Do Not Track" browser signals. You can control tracking through cookie settings and opt-out tools.

---

## Third-Party Links

Our website may contain links to third-party websites, including:
- Partner clinic websites
- Legal service providers
- Educational resources
- Social media platforms

**We are not responsible for the privacy practices of third-party sites.** We encourage you to review their privacy policies before providing any information.

---

## Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

If we become aware that we have collected information from a child without parental consent, we will delete it promptly.

**If you believe we have collected information from a child, please contact us immediately.**

---

## Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors.

**We will notify you of material changes by:**
- Posting the updated policy on our website with a new effective date
- Sending email notification to active clients
- Displaying a prominent notice on our website

**Your continued use of our services after changes become effective constitutes acceptance of the updated policy.**

We encourage you to review this Privacy Policy periodically.

---

## Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

**Blue Oak Fertility**  
**Privacy Officer**

**Email:** [privacy@blueoakfertility.com]  
**Mail:** [Full Legal Company Name]  
[Physical Address]  
**Phone:** [Contact Phone]

**For EEA/UK/Swiss residents:** If you are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.

---

## Jurisdiction-Specific Information

### For European Economic Area (EEA), UK, and Swiss Residents

**Data Controller:** [Full Legal Company Name and Address]

**Legal Basis for Processing:** As described in the "Legal Basis for Processing" section above

**Your Rights:** As described in the "Your Privacy Rights" section above

**Data Protection Officer (if applicable):** [Contact information if DPO appointed]

**Supervisory Authority:** You may contact your local data protection authority with complaints

### For California Residents

**Categories of Personal Information Collected:** As described in "Information We Collect"

**Business Purpose for Collection:** As described in "How We Use Your Information"

**Categories of Third Parties:** As described in "How We Share Your Information"

**Sale of Personal Information:** We do not sell personal information

**Retention:** As described in "Data Retention"

**Your CCPA/CPRA Rights:** As described in "Your Privacy Rights"

**Authorized Agent:** You may designate an authorized agent to make requests on your behalf by providing written authorization

### For Other Jurisdictions

If you are located in a jurisdiction with specific privacy laws not addressed above, please contact us to understand how those laws apply to our processing of your information.

---

**Last Updated: March 26, 2026**

**© 2026 Blue Oak Fertility. All rights reserved.**