IRS Pub 4557 & FTC ยง314 Mandatory Compliance & Cyber Defense for Accounting Practices

Privacy Policy

Effective Date: October 20, 2026 • Governing Law: State of Florida (Duval County)

1. Introduction

Call Center Options, LLC d/b/a CPA Security ("Company", "we", "us", or "our") respects your privacy and is committed to protecting it through our compliance with this policy. This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit the website (the "Website") and our practices for collecting, using, maintaining, protecting, and disclosing that information.

2. Information We Collect

We collect several types of information from and about users of our Website, including:

  • Personal Information: Information by which you may be personally identified, such as name, postal address, e-mail address, telephone number, or any other identifier by which you may be contacted online or offline.
  • Business Information: Information regarding your firm, employees, and office locations to facilitate the generation of compliance documentation.
  • Usage Details: Information about your internet connection, the equipment you use to access our Website, and usage details.
  • Account Security: For signed-in accounts, the date, time and IP address of your last sign-in, and an encrypted key for your authenticator app (two-step sign-in).
  • Free Email Security Check: your name, work email, firm name (optional), the date, time and IP address of your request and your consent to emails, the public DNS settings of your email domain, and the technical headers (not the body) of the one test email you send us. We use them to show and email your results and, as you agreed, to send you CPA Security emails, which you can unsubscribe from at any time.
  • Office Perimeter Scans: If you run an office scan, we detect and store the public IP address you are connecting from, the date and time, your browser type, your consent and the scan results, as part of your firm's security records. We scan only that address, and only after you agree. We keep these records while your account is open, or until you ask us to delete them.

3. How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

โ€ข To present our Website and its contents to you.
โ€ข To provide you with information, products, or services that you request from us.
โ€ข To generate your compliance documentation, such as your Written Information Security Plan (WISP).
โ€ข To fulfill any other purpose for which you provide it.
โ€ข To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.

4. Disclosure of Your Information

We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information unless we provide users with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. We may also release information when it's release is appropriate to comply with the law, enforce our site policies, or protect ours or others' rights, property or safety.

5. Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind firewalls. Payment transactions are encrypted using SSL technology.

6. Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users' personal information, we will notify you by email to the primary email address specified in your account or through a notice on the Website home page.

8. Cookie Policy & Tracking Technologies (Opt-In & Opt-Out)

We are firmly committed to user privacy and transparent data practices. We operate under a strict Zero Pre-Consent Tracking standard: no marketing or non-essential analytics cookies are set or executed before you explicitly opt in.

Categories of Cookies We Use:

  • Strictly Necessary Cookies (Essential): Required for secure user authentication, CSRF security verification, and billing transactions (e.g., cpa-security-session, XSRF-TOKEN). These cookies do not track your activity across third-party websites and cannot be disabled.
  • Performance & Analytics Cookies (Optional): Used solely to monitor site performance and aggregate traffic trends. These scripts are disabled by default and only activate if you click "Accept Analytics".

Global Privacy Control (GPC) & Do Not Track (DNT): Our website automatically detects and respects the Global Privacy Control (GPC) header and browser Do Not Track (DNT) signals. If detected, all optional analytics tracking is instantly disabled without requiring manual opt-out.

FTC & Telemetry Integrity Notice: CPA Security does not deploy Meta/Facebook Pixels, TikTok Pixels, or cross-site behavioral retargeting beacons. No tax return data, client lists, or accounting firm records are ever shared with advertising networks.

You may revoke or modify your consent at any time.

State Privacy Rights (Florida FDBR & California CCPA/CPRA)

Under the Florida Digital Bill of Rights (FDBR) and the California Consumer Privacy Act as amended (CCPA/CPRA), accounting professionals and firm administrators have specific rights regarding their personal and business contact information:

  • Right to Know & Access: You may request the categories and specific pieces of personal information collected about you over the past 12 months.
  • Right to Deletion: You may request deletion of your account contact data, subject to IRS 3-year compliance document retention requirements.
  • Zero Sale or Sharing of Data: CPA Security has not sold or shared (for cross-context behavioral advertising) any personal information in the preceding 12 months, and will never sell your information.
  • Non-Discrimination: We do not discriminate against any user for exercising their statutory privacy rights. Requests are processed within forty-five (45) calendar days.

9. Digital Accessibility Statement (ADA Compliance)

CPA Security is committed to providing a website that is accessible to the widest possible audience, regardless of technology or ability. We actively work to adhere to Level AA of the World Wide Web Consortium (W3C) Web Content Accessibility Guidelines (WCAG) 2.1 and Title III of the Americans with Disabilities Act (ADA).

  • Keyboard Navigation: All critical user flows, pricing configurations, and navigation components are operable using standard keyboard controls (Tab, Enter, Spacebar, Escape).
  • Bypass Blocks: A visible skip navigation link is provided at the top of every page for rapid keyboard access to main content landmarks.
  • Screen Reader Compatibility: Form fields, status badges, and interactive controls utilize semantic HTML5 elements and ARIA landmark roles.
  • Color & Contrast: All text and core UI controls are tested against WCAG contrast ratios (minimum 4.5:1 for standard text).

If you experience any difficulty accessing any part of our website or require assistance in alternative formats, please contact our accessibility coordinator at [email protected] or call our compliance desk directly at (904) 586-1977.

10. Contact Information

To ask questions or comment about this privacy policy, cookie practices, or accessibility accommodations, contact us at:

Call Center Options, LLC d/b/a CPA Security
Attn: Compliance & Privacy Office
Email: [email protected] • Support: [email protected]
Phone: (904) 586-1977