Notice of Privacy Practices

1.About this notice and our role

Lily Baby Surrogacy is an agency that coordinates services among intended parents, gestational surrogates, egg and sperm donors, and the professionals involved in their care, such as fertility clinics, attorneys, and screening providers. We are not a healthcare provider or health plan, and we may not be a "covered entity" as defined by the Health Insurance Portability and Accountability Act (HIPAA).

Even though HIPAA may not directly apply to us in the same way it applies to clinics and providers, we are committed to protecting the health information we handle. This Notice describes the privacy practices we apply, consistent with the principles of HIPAA and applicable California privacy law, when we receive or handle health information. The clinics, laboratories, and other healthcare providers you work with maintain their own Notices of Privacy Practices that govern the health information they hold.

2.Information this notice covers

This Notice covers health information we may receive about you in connection with coordinating your program, which can include screening results, medical clearance status, pregnancy and treatment information, and related records that you or a provider share with us so that we can coordinate services. We refer to this as "health information" in this Notice.

3.How we may use and disclose information

We use and disclose health information only as needed to coordinate your program and as permitted or required by law, including:

• Coordination of care. To facilitate communication among the clinics, attorneys, escrow agents, and other professionals involved in your surrogacy or donation, so that the right information reaches the right party at the right time.
• Matching and program administration. To support the matching process and the administration of your participation, sharing only what is necessary for the purpose.
• Payment and reimbursement. To coordinate escrow, reimbursements, and related financial matters connected to your program.
• As required by law. When a law, regulation, court order, subpoena, or other legal process requires disclosure, or to prevent a serious threat to health or safety.

We limit the health information we use or disclose to the minimum reasonably necessary for the purpose, except where required for treatment or where you have authorized a broader disclosure.

4.Uses that require your authorization

Other than the uses described above and those permitted or required by law, we will use or disclose your health information only with your written authorization. This includes any use of health information for marketing and any sale of health information, which we do not do. You may revoke an authorization in writing at any time, and the revocation will apply going forward except to the extent we have already acted in reliance on it.

5.Your rights

You have the following rights regarding health information we maintain about you:

• Access and copies. You may request to inspect and receive a copy of health information we hold about you.
• Amendment. You may request that we correct information you believe is inaccurate or incomplete.
• Accounting of disclosures. You may request a list of certain disclosures we have made.
• Restrictions. You may request that we limit how we use or disclose your information. We will consider your request, though we may not be able to agree in every case.
• Confidential communications. You may ask us to communicate with you in a particular way or at a particular location.
• Copy of this notice. You may request a paper or electronic copy of this Notice at any time.

To exercise any of these rights, contact our privacy contact below. We may need to verify your identity before responding.

6.Our responsibilities and safeguards

We maintain administrative, technical, and physical safeguards designed to protect health information against unauthorized access, use, or disclosure. We train our team to handle information responsibly and limit access to those who need it to do their work. We are required to abide by the terms of this Notice while it is in effect, and to notify affected individuals as required by law in the event of a breach of unsecured information.

7.Do not submit health details through public forms

8.Changes to this notice

We may change this Notice and apply the revised terms to information we already hold as well as information we receive in the future. When we make a material change, we will revise the "Last updated" date above and post the current Notice on this page.

9.Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below. You may also have the right to file a complaint with the relevant authority, such as the U.S. Department of Health and Human Services Office for Civil Rights, where applicable. We will not retaliate against you for filing a complaint.

10.Privacy contact

To exercise your rights, ask questions, or raise a privacy concern, contact our privacy contact: