Last Updated: March 20, 2026
1. Introduction
Mid-Columbia Center for Living (“MCCFL,” “we,” “us,” or “our”) is a behavioral health agency serving Hood River, Sherman, and Wasco counties in Oregon. We value your privacy and have adopted this policy to describe our practices regarding information collected through our website at www.mccfl.org (the “Website”).
This Website Privacy Policy explains what information we collect through the Website, how we use it, and the choices available to you. We have written this policy in plain language so it is easy to understand.
IMPORTANT: This Website Privacy Policy applies only to information collected through the MCCFL website (www.mccfl.org). It does not apply to information collected during the course of providing clinical, behavioral health, or other clinical services. For information about how MCCFL uses and discloses your protected health information, please review our Notice of Privacy Practices. Your use of the Website is also governed by our Terms of Use.
2. Scope of This Policy
This policy covers only information collected through the Website. It does not cover:
- Information collected during in-person visits, phone calls, telehealth sessions, or other clinical interactions (which is governed by HIPAA, 42 CFR Part 2, applicable Oregon law, and our Notice of Privacy Practices);
- Information collected by third-party websites linked from the Website (such as Google Maps, YouTube, crisis hotline providers, or state agencies); or
- Information provided on paper forms, such as the Consumer Grievance/Comment Forms available for download on the Website.
3. Information We Collect Through the Website
3.1 Information You Provide Voluntarily
When you use certain features of the Website, you may voluntarily provide us with personal information:
- Website Feedback Form. Your first and last name, email address, phone number.
- Technical Assistance Form. Your first and last name, email address, phone or extension number, and the content of your request. (This form is intended for MCCFL staff.)
- Request for Contact Form. Your first and last name, email address, phone number, reason for request for contact
- Site Search Queries. The search terms you enter when using the Website’s search feature.
Please do not include any sensitive personal information, protected health information (PHI), or details about your health, treatment, or diagnosis in any Website form. These forms are not secure clinical communication channels. If you need to communicate about your care, please contact MCCFL directly by phone at (541) 296-5452.
3.2 Information Collected Automatically
When you visit the Website, certain information may be collected automatically by our web server and any analytics tools in use. This may include:
- Your IP address (the Internet address of your device);
- Browser type and version;
- Operating system;
- The pages you visit on the Website and the date and time of your visit;
- The website that referred you to our Website (if any); and
- General geographic location (derived from your IP address, such as city or state—not your exact location).
4. Cookies and Tracking Technologies
4.1 Overview
Our Website uses cookies and similar technologies to support core functionality, improve performance, enhance usability, and protect the site from spam and abuse. We also use Cookiebot to allow visitors to manage their cookie preferences.
Cookies are small text files that a website places on your device (computer, tablet, or smartphone) when you visit. Cookies allow the website to recognize your device on return visits, remember your preferences, and collect information about how you use the site. Some cookies are essential for the Website to function; others help us understand how visitors use the site so we can improve it
In addition to cookies, the Website or emails sent in connection with the Website may use web beacons (also known as pixel tags, clear GIFs, or single-pixel GIFs). Web beacons are small electronic files that permit us, for example, to count users who have visited certain pages or opened an email, and to compile other related statistics such as recording the popularity of certain content and verifying system and server integrity. Web beacons do not place files on your device but work in conjunction with cookies to monitor activity.
Email Communications and Delivery
Our website may use an email delivery plugin (such as WP SMTP) to ensure reliable transmission of emails submitted through our website forms or generated by user requests (for example, contact forms, account notifications, or confirmations).
When you submit information through our website that triggers an email, that information may be transmitted through a third-party email service provider solely for the purpose of delivering that communication.
4.2 Strictly Necessary Cookies
These cookies are essential for the basic operation and security of the Website. They include:
- WordPress operational cookies that enable core site functionality, including page navigation and access to secure areas;
- Cookiebot cookies used to record and enforce your consent preferences;
- Google reCAPTCHA cookies used to protect forms from spam and automated abuse; and
- Server and session cookies that ensure the site functions correctly.
These cookies cannot be disabled, as the site cannot function without them. They do not store personal information used for marketing or tracking purposes.
| Cookie / Service | Purpose | Duration |
|---|---|---|
| wordpress_test_cookie | Tests whether your browser accepts cookies. | Session |
| wordpress_logged_in_[hash] | Identifies logged-in users (staff/administrators only). Not set for general visitors. | Session or up to 14 days |
| wp-settings-{time}-[UID] | Stores user interface preferences for logged-in users (staff/administrators only). | 1 Year |
| CookieConsent (Cookiebot) | Records your cookie consent preferences so they are remembered on future visits. | 1 Year |
| _GRECAPTCHA / rc::a / rc::b / rc::c | CGoogle reCAPTCHA cookies used to distinguish human visitors from automated bots and protect Website forms from spam. | Session to 6 months (varies) |
| PHPSESSID (or similar) | Standard PHP session cookie used to maintain your browsing session. | Session |
4.3 Functional Cookies
These cookies improve user experience by remembering certain choices you make. They may include cookies that store:
- Language preferences; and
- Accessibility settings (such as text size, contrast, or other adjustments made through our accessibility tool).
These cookies are optional but improve how the site works for you.
4.4 Performance and Analytics Cookies
We use basic analytics tools to understand how visitors use our Website and to improve its performance. These cookies:
- Help us measure traffic and usage patterns;
- Provide anonymized or aggregated information about how pages are accessed; and
- Do not identify individual users.
These cookies may be enabled by default but can be turned off through Cookiebot at any time.
| Cookie Name | Purpose | Duration |
|---|---|---|
| _ga | Distinguishes unique visitors to the Website. Set by Google Analytics, if enabled. | 2 years |
| _ga_[ID] | Maintains session state for Google Analytics 4. | 2 years |
| _gid | Distinguishes visitors over a 24-hour period. | 24 hours |
| _gat | Throttles request rate to limit data collection on high-traffic sites. | 1 minute |
4.5 Third-Party / Embedded Content Cookies
Our Website includes embedded content from third-party providers. When you interact with this content, the third-party provider may set its own cookies to deliver the service or collect limited analytics based on your interaction. These cookies are controlled by the third-party provider and governed by their respective privacy policies.
| Service | Purpose | More Information |
|---|---|---|
| Google Maps | Embedded maps on the Locations page may set cookies (such as NID, CONSENT, 1P_JAR) to provide map functionality and remember preferences. | policies.google.com/privacy |
| YouTube | Embedded YouTube videos may set cookies (such as VISITOR_INFO1_LIVE, YSC) to deliver video content, track playback, and collect aggregated usage statistics. | policies.google.com/privacy |
| NHSC Badge (HRSA) | An external image badge from the National Health Service Corps is loaded on the homepage, which may result in a standard HTTP request to hrsa.gov. | hrsa.gov/privacy |
4.6 Cookie Management
You can accept, reject, or customize your cookie preferences at any time using the Cookiebot tool on our Website. Only strictly necessary cookies are always active.
Most web browsers also allow you to control cookies through their settings. You can typically:
- View what cookies are stored on your device and delete them individually or all at once;
- Block third-party cookies;
- Block cookies from specific sites;
- Block all cookies; or
- Delete all cookies when you close your browser.
Please note that if you block or delete cookies, some features of the Website may not function properly. For more information about managing cookies in your browser, visit your browser’s help documentation or www.allaboutcookies.org.
If Google Analytics is in use on this Website and you wish to opt out, you may install the Google Analytics Opt-Out Browser Add-on, available at tools.google.com/dlpage/gaoptout.
4.7 Do Not Track and Global Privacy Control Signals
Some browsers include a “Do Not Track” (DNT) feature that sends a signal to websites requesting that they not track your browsing activity. At this time, there is no uniform standard for how websites should respond to DNT signals, but if required by applicable law, Website will comply with a DNT request.
Certain browsers and browser extensions also support the Global Privacy Control (“GPC”), which sends a signal indicating that you do not want your personal data sold or used for targeted advertising. The Oregon Consumer Privacy Act (OCPA) requires covered controllers to recognize and honor GPC signals as valid opt-out requests for the sale of personal data and targeted advertising. When we detect a GPC signal, we will make reasonable efforts to respect your opt-out preferences as indicated by the signal, if required by applicable law. For more information about GPC or to enable it, visit globalprivacycontrol.org.
5. How We Use Your Information
We use the information collected through the Website for the following purposes:
- To respond to your feedback, inquiries, or technical support requests;
- To improve the content, functionality, and usability of the Website;
- To monitor and maintain the security and performance of the Website;
- To comply with legal obligations; and
- To fulfill any other purpose described to you at the time the information is collected.
6. How We Share Your Information
We may use and disclose aggregated or de-identified information that does not identify any individual without restriction for any lawful purpose.
We may share personal information in the following limited circumstances:
- With MCCFL Staff. Information submitted through Website forms is shared with appropriate MCCFL personnel to respond to your inquiry.
- Service Providers. We may share information with third-party vendors who assist us with website hosting, maintenance, analytics, cookie consent management (Cookiebot), web form relay (WP SMTP) and spam protection (Google reCAPTCHA), to the extent necessary for them to perform their services.
- Legal Requirements. We may disclose information if required by law, regulation, court order, subpoena, or other legal process, or if disclosure is necessary to protect the rights, safety, or property of MCCFL, our staff, or the public.
- Public Records. MCCFL may be subject to Oregon’s Public Records Law (ORS 192.311–192.478). Information submitted through the Website may be considered a public record, subject to exemptions provided by law.
Organizational Transactions. We may disclose personal information to a buyer or other successor in the event of a merger, reorganization, dissolution, or other transfer of some or all of MCCFL’s functions or assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by MCCFL is among the assets transferred.
7. Third-Party Websites
The Website contains links to third-party websites and services, including Google Maps, YouTube, crisis hotline providers, Oregon state agencies, and community partner organizations. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party websites you visit.
8. Relationship to HIPAA and Clinical Privacy Protections
MCCFL is a covered entity under the Health Insurance Portability and Accountability Act (HIPAA) and is also subject to 42 CFR Part 2 regulations governing the confidentiality of substance use disorder treatment records, as well as applicable Oregon health information privacy laws.
This Website Privacy Policy does not address how we handle protected health information (PHI) or substance use disorder records. Those protections are described in MCCFL’s Notice of Privacy Practices, a physical copy of which is also available by contacting our office (See Section 12). If there is any conflict between this Website Privacy Policy and the Notice of Privacy Practices with respect to health information, the Notice of Privacy Practices controls.
9. Data Breach Notification
In the event of a security incident involving personal information collected through the Website, MCCFL will respond in accordance with applicable law, including providing notification to affected individuals if and to the extent required by applicable law.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the “Last Updated” date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Website after changes are posted constitutes your acceptance of the updated policy.
11. Dispute Resolution
If you have a question or concern about this Privacy Policy or our privacy practices, we encourage you to contact us using the information in Section 12. We will endeavor to address your concern in a timely manner.
12. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy, our use of cookies, or the information we collect through the Website, please contact us:
Mid-Columbia Center for Living
1060 Webber Street
The Dalles, Oregon 97058
Privacy Officer: (541)296-5452
Email: info@mccfl.org
You may also submit feedback through the Website Feedback Form.
