Privacy Policy & Cookie Governance
Effective Date: October 20, 2026 • Call Center Options, LLC (Jacksonville, Florida) • Version 2.2
1. Executive Overview & Commitment to Data Privacy
Call Center Options, LLC (“Call Center Options,” “CCO,” “Company,” “we,” “us,” or “our”) operates the website https://ccoptions.net (the “Website”) and provides dedicated, HIPAA-trained Virtual Medical Front Desk staffing solutions to United States medical practices, dental clinics, and healthcare systems.
We operate under an uncompromised standard of privacy integrity: we do not deploy non-essential tracking cookies, advertising beacons, or third-party behavioral scripts without your explicit prior affirmative consent. If you decline or opt out of optional telemetry, zero analytics or marketing tracking occurs during your visit.
Your Real-Time Cookie & Telemetry Controls
Below is the live status of the telemetry and cookie tokens stored in your browser for ccoptions.net. You can adjust your preferences instantly using the one-click controls below.
CSRF security, session authentication & form delivery.
Cookieless aggregate traffic patterns (GA4 Consent Mode v2).
Clinical practice acquisition effectiveness. Zero retargeting pixels.
3. Strict Cookie Governance & Consent Engine
In adherence to the European Union General Data Protection Regulation (GDPR / ePrivacy Directive), the California Consumer Privacy Act as amended by the CPRA, the Florida Digital Bill of Rights (FDBR), and federal healthcare privacy standards:
-
Strictly Necessary Cookies: We utilize essential session tokens and Cross-Site Request Forgery (CSRF) protection headers (e.g.,
XSRF-TOKEN,call-center-options-session) necessary solely to authenticate form transmissions and prevent security attacks. These cookies do not perform behavioral tracking across external websites. - Zero Prior Tracking: Non-essential analytics and performance telemetry scripts are permanently locked by default. They are never downloaded or executed unless you affirmatively click “Accept All” or enable them via our Cookie Preferences engine.
- Global Privacy Control (GPC) & Do Not Track: Our consent engine honors automated Global Privacy Control (GPC) headers and browser Do Not Track (DNT) signals. When a GPC signal is detected, all optional telemetry is kept permanently disabled.
🛡️ 4. FTC & HHS-OCR Healthcare Telemetry & Web Tracking Disclosures
In strict compliance with joint guidance from the Federal Trade Commission (FTC) and the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) regarding digital tracking technologies on healthcare-associated web properties:
- No Third-Party Advertising Pixels: Call Center Options does NOT deploy Meta (Facebook) Pixels, TikTok Pixels, LinkedIn Insight Tags with retargeting pixels, or third-party behavioral data brokers on https://ccoptions.net.
- Google Analytics 4 with Consent Mode v2: GA4 is configured strictly under Consent Mode v2 with IP anonymization enabled by default. Prior to explicit consent, telemetry pings are cookieless, transmit zero persistent client identifiers, and convey zero medical or patient data.
- Zero Transmission of Health Inquiries to Ad Networks: Submissions on our specialty landing pages (e.g., Orthopedics, Dental, Dermatology) are routed strictly to our private, encrypted database and are never shared with advertising ad networks.
5. Delineation: Practice Inquiries vs. Patient Protected Health Information (PHI)
It is critical to distinguish between the two distinct categories of data handled by Call Center Options:
Information submitted by clinic administrators requesting staffing proposals (e.g., clinic name, practice administrator name, work email, phone number, required FTE headcount). This data is commercial B2B contact info governed by this Privacy Policy.
Patient Electronic Protected Health Information accessed by dedicated FTE specialists during scheduled clinical shifts. This data is governed exclusively by federal HIPAA/HITECH regulations and our executed bilateral Business Associate Agreement (BAA).
6. Single-Entity Direct BAA & No Offshore Data Storage
Call Center Options operates strictly as a single corporate entity: Call Center Options, LLC is a Florida limited liability company based in Jacksonville that directly operates its clinical branch facility in Pristina, Kosovo.
Unlike agencies that subcontract with third-party foreign call centers, your clinic executes a direct, unbroken BAA with our Florida LLC under United States federal and Florida state jurisdiction.
- Dedicated staff log exclusively into redundant stateside Virtual Desktop Infrastructure (VDI/VPS) hosted in US data center regions.
- Patient health records, charts, and EHR data are transmitted purely via encrypted pixel streaming (TLS 1.3 / AES-256).
- Workstation local drive storage, USB peripheral redirection, and cross-desktop clipboards are permanently disabled. No patient charts or files are ever downloaded, saved, or cached outside the United States.
7. State Privacy Disclosures: Florida Digital Bill of Rights (FDBR) & CCPA/CPRA
The following disclosures describe our data practices in the preceding twelve (12) months:
| Category of Personal Information | Sources | Business Purpose | Third Parties Disclosed To |
|---|---|---|---|
| Identifiers (Name, Business Email, Direct Telephone, Clinic Name) | Directly from practice admin via contact/intake form | Scoping staffing requirements, proposal dispatch, consultation scheduling | Transactional email relays & CRM under strict non-disclosure |
| Commercial Information (Requested FTEs, Current EMR system, Staffing roles) | Intake calculator and questionnaire submissions | Generating customized staffing quotes and feasibility analysis | Internal executive staffing directors only; zero third parties |
| Internet & Network Activity (IP Address, User-Agent, Request Timestamps) | Automated server logs & human visit telemetry | Detecting bot spam, rate-limiting malicious traffic, aggregate traffic monitoring | US-hosted cloud infrastructure & DDoS mitigation edge networks |
8. Data Subject Rights & Submitting Verifiable Requests
Under applicable federal and state data privacy laws (including the Florida Digital Bill of Rights, CCPA/CPRA, and Virginia VCDPA), you have the right to:
- Right to Know / Access: Request disclosure of the specific pieces and categories of personal information we have collected about you.
- Right to Deletion: Request deletion of your practice contact information from our CRM systems, subject to legal auditing obligations.
- Right to Correct: Request correction of inaccurate personal contact data.
- Right to Non-Discrimination: Receive equal service terms and pricing regardless of whether you exercise any statutory privacy rights.
To exercise these rights, submit a verifiable consumer request to [email protected]. In accordance with statutory requirements, we will verify your identity and respond within forty-five (45) calendar days.
9. Data Retention & Scheduled Purging
We retain practice inquiry information only for as long as necessary to fulfill the business purposes outlined in this policy:
- Practice Proposals & Inquiries: Retained for the duration of the active staffing scoping cycle or up to twenty-four (24) months, after which records are securely purged or archived upon request.
- Security & Audit Logs: Server logs and visit IP metadata are retained for ninety (90) to one hundred eighty (180) days strictly for security diagnostics and intrusion defense before automated rolling deletion.
10. Children’s Privacy (COPPA)
This Website is exclusively designed and marketed for commercial healthcare practice administration and is not directed toward children. We do not knowingly collect, solicit, or maintain personal information from individuals under sixteen (16) years of age.