Privacy Policy

Effective date: October 30, 2026 · Last reviewed: October 30, 2026

1. Who we are and what this policy covers

CercaLabs Inc. (“CercaLabs,” “we,” “us”) is a revenue cycle consulting firm based in Orange, California. This policy covers go.cercalabs.com (the “site”), the free 3-minute check, the Free Productivity Report, 30-minute review bookings, and the emails and calls that follow. It explains what personal information we collect, why, who we share it with, how long we keep it, and the choices and rights you have.

Information about the people at your organization is personal information, even when it’s work information, and we treat it that way. This policy doesn’t cover work we do for clients under a signed agreement; that agreement governs any client data, including any business associate agreement. Other CercaLabs websites have their own notices.

2. Summary: what we collect and why (notice at collection)

We don’t sell personal information for money. Some ad measurement by Google can count as “sharing” for advertising under California law, and you can opt out (sections 8 and 13). We don’t collect patient information, government ID numbers, account numbers or other sensitive personal information on purpose.

3. Please don’t send patient information

The site never asks about patients. Please don’t enter patient names, dates of birth, ID numbers or any other patient details in the check, the forms, the “How can we help you?” box or emails. Our forms check notes for dates and long numbers and ask you to remove them. If patient information reaches us anyway, we won’t use it, and we’ll delete it within 5 business days of finding it.

4. What we collect, in more detail

• Information you give us: the contact details, organization details, answers, notes, consent choices and booking details listed in section 2.
• Information collected automatically: when you use the site, our hosting provider (Vercel) receives standard log data such as IP address, browser and the pages requested. The Google tag collects device and usage data and, if you came from a Google ad, the ad click ID. When you finish a check without asking for the report, we keep your answers with the ad click ID and device type, but without your name or email.
• Information from others: Cal.com sends us the details you enter when booking; Google Ads tells us which ad and keyword brought you to the site.

5. How we use it

• To show your check results and prepare and send the Free Productivity Report and white paper.
• To answer your requests, follow up about them, quote services and hold reviews.
• To send our newsletter, only if you opted in.
• To measure which ads, pages and questions work, and to improve them.
• To keep the site secure, prevent spam and misuse, and meet legal obligations.

We score each request for fit (for example, whether billing is done in-house and the organization’s size). The score decides which next-step text you see and how we follow up. It is not used to make decisions with legal or similarly significant effects, such as decisions about employment, credit, housing, insurance or health care.

6. What we don’t do

We don’t sell personal information for money, rent it out, or give it to others for their own marketing. We don’t record or transcribe review calls. We don’t use your information to build profiles for advertising other than the ad measurement described in section 8.

7. Who we share it with

• Service providers that handle information for us under contracts that limit its use:
• Google: Google Ads and the Google tag (ad measurement); Google Workspace (Sheets, Gmail, Drive, Apps Script and Meet) to store requests, build reports, send email and hold reviews.
• Cal.com: review booking.
• Vercel: website hosting.
• Beehiiv: our newsletter, only if you opt in.
• If you become a client: QuickBooks Online for invoices and payments, and Google Docs eSignature for agreements.
• Legal and safety reasons: when the law requires it, to respond to lawful requests, or to protect the rights, property or safety of CercaLabs, our clients or others.
• Business changes: as part of a merger, acquisition or sale of all or part of our business, under this policy’s protections.

California “Shine the Light.” We don’t share personal information with third parties for their own direct marketing.

8. Cookies, the Google tag and advertising

The site uses the Google tag, which sets cookies or similar identifiers, to tell us whether a visit came from a Google ad and whether the visitor started a check, requested a report or booked a review. Google may collect information about your activity on this site and on other sites over time, as described at policies.google.com/technologies/partner-sites. We don’t use remarketing or audience lists.

Your choices:

• Global Privacy Control (GPC): if your browser sends a GPC signal, we treat it as a request to opt out of any sale or sharing of your personal information. We then tell Google not to use your visit for ad personalization or measurement storage, and this page shows: “Your browser’s Global Privacy Control signal was detected and honored.”
• Google settings: you can manage ad personalization at myadcenter.google.com.
• Browser settings: you can block or delete cookies; the site still works without them.
• Do Not Track: browsers’ Do Not Track signals have no common standard, so we don’t respond to them. We do honor GPC, as above.

9. Email and phone

• Your report and replies to your request come from a CercaLabs consultant’s own email address.
• Newsletter: only if you opt in. Every issue includes an unsubscribe link.
• Follow-up emails: each includes our postal address, and you can ask us to stop at any time. We honor opt-outs within 10 business days.
• Phone: if you tick the consent box, a CercaLabs consultant may call you about your request. Calls are made by a person, not by an automatic dialer or a recording. We don’t send marketing text messages.

10. How long we keep it

We keep personal information only as long as we need it for the purposes in this policy:

• Contact details, organization details, answers, notes, fit labels and booking details: 24 months after our last contact with you, unless you become a client.
• Check answers without contact details: 24 months.
• Newsletter subscriptions: until you unsubscribe, then only a record that you opted out.
• Records of client work: as long as the engagement requires and for 7 years afterward for legal, tax and accounting purposes.
• Records of privacy requests: 24 months, as required.

11. How we protect it

We use reasonable administrative, technical and physical safeguards, including encrypted connections (HTTPS), access limited to the people who handle your request, and two-step sign-in on our accounts. No method of transmission or storage is completely secure. If a security breach affects your personal information, we’ll notify you as the law requires.

12. Your choices and rights (everyone)

Whatever state you live in, you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct it;
• delete it;
• stop contacting you, or stop any sale or sharing for advertising.

Email Info@CercaLabs.com with “Privacy request” in the subject line. We won’t treat you differently for making a request.

13. California residents

California law, including the California Consumer Privacy Act as amended by the California Privacy Rights Act, gives California residents the rights below. We extend them to every California resident whether or not the law applies to us.

• Right to know: the categories of personal information we collected in the past 12 months, the sources, our purposes, the categories of recipients, and the specific pieces of information we hold about you. Section 2 lists the categories, and sections 4 to 7 give the details.
• Right to delete personal information we collected from you, with the exceptions the law allows (for example, to finish a transaction or meet a legal obligation).
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of personal information. We don’t sell it. To opt out of any sharing for advertising, use a GPC-enabled browser or email us.
• Sensitive personal information: we don’t collect it on purpose or use it to infer characteristics about you, so there is nothing to limit.
• No discrimination or retaliation for using these rights.

How to make a request. Email Info@CercaLabs.com. We’ll confirm receipt within 10 business days and answer within 45 calendar days. If we need more time, up to 45 more days, we’ll tell you why. We act on opt-out requests within 15 business days. For requests to know, correct or delete, we verify your identity by matching details you give us, such as your work email and organization, with what we hold. We don’t ask you to verify your identity to opt out of sale or sharing. We confirm a request is complete only after we’ve acted on it. You may use an authorized agent; we’ll ask for proof that you authorized them and may ask you to confirm your identity with us directly.

Minors. We don’t sell or share the personal information of anyone we know is under 16.

14. Residents of other states

Several states give residents rights similar to California’s. We honor the requests in section 12 for everyone. If we deny a request, you can reply to ask us to reconsider, and we’ll explain our final decision and how to contact your state attorney general, where state law requires it.

15. Children

The site is for businesses and is not directed to children. We don’t knowingly collect personal information from anyone under 16. If we learn we have, we’ll delete it.

16. Where we process information

We’re based in the United States. Our service providers may process information in other countries under their own terms. The site is meant for organizations in the United States.

17. Changes to this policy

We review this policy at least once a year. If we change it, we’ll post the new version here with a new effective date. If a change materially affects how we use information we already hold, we’ll tell you by email before it takes effect, where we have your email address.

18. Accessibility

This policy is designed to meet WCAG 2.2 AA. To get it in another format, email Info@CercaLabs.com.

19. Contact us

CercaLabs Inc., 333 City Blvd W., 3rd Floor, Orange, CA 92868 · Info@CercaLabs.com (subject line “Privacy request”)