Candidate Privacy Notice

This notice covers the candidate register, your account, reproductive and health information, and optional medical reports. It supplements the general website privacy policy. Registration is free and non-binding: it does not commit you or GENOVIA to a surrogacy arrangement, employment, treatment, a match or payment.

Who is responsible?

GENOVIA LLC, identification number 405834593, is the data controller. Address: 49 Besarion Zhgenti Street, Floor 1, Apartment 20, Tbilisi, Georgia. Contact: info@surrogatemother.ge. Use the subject “Candidate privacy request” for a privacy question.

What we collect and why

We collect your name, date of birth and calculated age, email, residence country and city, preferred language, and the contact information you choose to provide. This lets us maintain your registration, establish that you are an adult, communicate about your enquiry and account, and consider whether an initial conversation is appropriate.

With your separate, explicit consent, we collect your pregnancy and delivery history and any additional reproductive or health information you choose to provide. Optional information includes Caesarean delivery history, pregnancy complications, medicines, health conditions, height, weight, nicotine use, practical support and medical reports. We use it only for preliminary candidate assessment and related communication. You may leave optional questions blank and register without uploading reports.

The required pregnancy-history questions are necessary for this particular candidate register. If you do not consent to recording them, you can instead ask a general question through our contact page. Do not send health records by general contact form, ordinary email or live chat.

Please submit your own information only. Do not upload passports, genetic files, financial details, or records identifying children or other people unless we separately explain why they are needed and how to provide them.

Your consents

Personal data: a specific consent for administering your registration and preliminary enquiry.
Health data: a separate explicit electronic consent for the reproductive and medical information you provide. Each medical upload requires an additional confirmation.
Future cooperation contact: an optional, separate choice. You can switch it off in your account without deleting your registration. We do not use this choice for general advertising.

Required boxes are not pre-selected. We record the wording, notice version, time and your choice. Submitting the form records your electronic consent; email verification helps establish that you control the account. Account access, security and service messages are sent as necessary to operate the account. Security logs and abuse prevention support our legitimate interest in protecting this service, subject to your applicable rights.

Who can access your information?

Your information is available to you and authorised GENOVIA staff who administer the register. Your profile is not public or searchable by intended parents. Access to records and downloads is logged. We do not sell your information or automatically disclose your profile to clinics, intended parents, recruiters or overseas partners.

Before a proposed disclosure to a clinic or other professional, we will identify the recipient, purpose, records needed and relevant country, explain the applicable safeguards, and obtain any further consent or other lawful authority required. A clinic may act as an independent controller and provide a separate notice. This initial registration is not blanket consent to international sharing.

Hosting, email and international processing

Hosting country: United States.

Service providers and processing locations: GoDaddy Inc..

Our hosting and email providers process information as needed to operate the service under appropriate contractual and access restrictions. Necessary emails may pass through your own email provider. Account emails contain verification or reset links, not your password. Staff notifications normally contain a reference and a link to the authenticated dashboard. If GENOVIA configures an S/MIME recipient certificate, a full registration summary may instead be delivered as an encrypted email report. Medical files remain in the private portal.

Applicants outside Georgia should understand that GENOVIA is established in Georgia and will receive their registration there. The countries where you live, where a provider operates, and where a future programme might take place can have different legal requirements. GENOVIA must establish any required lawful transfer arrangement before using a provider or making a subsequent cross-border disclosure. Clicking a consent box does not waive those requirements.

How long we keep it

Unverified registrations: up to 7 days.
Verified registrations and reports: up to 12 months from your most recent sign-in or profile activity, unless you withdraw sooner.
Security and access logs: up to 90 days; identifiable candidate audit entries are removed when the live account is erased.
Queued emails: deleted after successful transport acceptance, or after a maximum of 7 days if undeliverable.
Any separately managed encrypted backups: a maximum of 30 days, with restricted access and erasures reapplied before restored data can be used.

Our database does not retain withdrawn candidates for future matching. A later clinical or contractual relationship requires its own privacy information and retention rules. The email in your own inbox remains under your control. Any encrypted report already received by GENOVIA must be removed under our erasure procedure.

Update, withdraw or delete

Sign in to correct your profile, change contact preferences, replace or remove a report, download your submitted information, change your email or password, or select “Withdraw registration & delete my data”. Withdrawal stops future cooperation contact and removes the live profile, files, notes, account access and queued account messages. It withdraws both registration and health-data consent. It does not affect the lawfulness of processing carried out before withdrawal.

You can also email us to request access, correction, erasure, restriction, objection or portability where applicable, or to withdraw consent. We may ask for proportionate identity verification to protect your records. If you cannot sign in, use password recovery or contact us. We will respond within the time required by the law applicable to your request and explain any lawful limitation.

Security and your account

We use HTTPS, password hashing, encrypted profile and report storage, private file locations, access checks, administrator verification codes and malware checks on uploads. Sensitive account and registration pages load no chat, advertising or analytics scripts. A strictly necessary session cookie keeps your session secure; it expires when your browser session ends, with additional server-side inactivity limits. We do not save your medical form in your browser’s local storage.

Keep your password and email account secure. Never share a verification link or code. No online system can guarantee absolute security; tell us promptly if you suspect unauthorised access.

Human review and your rights

We do not make solely automated selection decisions or use AI to approve candidates. Administrative statuses are not medical diagnoses or eligibility findings. Any proposed next stage requires appropriate medical, psychosocial and legal assessment, and your informed consent. Registration does not oblige you to undergo tests, travel, accept a match or sign an agreement.

You may raise a concern with GENOVIA or the competent data-protection supervisory authority. Under the current Georgian law, supervisory functions are assigned to the State Audit Office. Where GDPR applies, you may also complain to the competent supervisory authority in the EEA. Your rights depend on the applicable law, not on a promise of universal international compliance.

Legal references: Georgian Law on Personal Data Protection; GDPR, where applicable. Effective date: 16 September 2026.