Colorado Privacy Act Privacy Notice

Colorado Privacy Notice

Controller: [EXACT LEGAL NAME AND BRANDS COVERED]

Last updated: [DATE]

Privacy contact: [EMAIL / WEB FORM / POSTAL ADDRESS]

This notice describes how we process personal data of Colorado residents acting in an individual or household context. It applies to [WEBSITES, APPS, SERVICES, OFFLINE INTERACTIONS]. It does not describe data kept solely for [EXCLUDED EMPLOYMENT, APPLICANT, OR COMMERCIAL CONTEXTS, IF APPLICABLE]. See C.R.S. § 6-1-1303(6).

Personal Data and Purposes

The table shows what we actually process, why we use it, and whether a listed purpose involves sale, targeted advertising, or profiling for a decision with legal or similarly significant effects. Delete unused rows and give enough detail that the processing is understandable when data is provided.

We share the categories listed above with [DESCRIBE EACH THIRD-PARTY CATEGORY BY TYPE OR BUSINESS MODEL, E.G., PAYMENT PROVIDERS, ANALYTICS COMPANIES, ADVERTISERS] for [SPECIFIC PURPOSES]. [IF NONE, STATE THAT AND REMOVE UNUSED COLUMNS/ROWS.]

Sensitive data: [STATE WHICH SENSITIVE CATEGORIES, IF ANY, ARE PROCESSED AND THE PURPOSE AND CONSENT METHOD. IF NONE, SAY SO.] We obtain consent before processing or selling sensitive data as required by C.R.S. § 6-1-1308(7), including parent or lawful guardian consent for known children where applicable.

Sensitive data inferences: [IF YOU USE RULE 6.10'S SHORT RETENTION PATH, IDENTIFY THE INFERENCES AND THE ACTUAL RETENTION AND DELETION SCHEDULE; OTHERWISE REMOVE THIS LINE.]

Retention: [DESCRIBE THE ACTUAL RETENTION APPROACH BY CATEGORY OR LINK TO THE RELEVANT RETENTION INFORMATION, IF INCLUDED FOR ACCURACY; DO NOT INVENT PERIODS.]

Profiling in Significant Decisions

[IF YOU DO NOT PROFILE PERSONAL DATA TO HELP MAKE DECISIONS WITH LEGAL OR SIMILARLY SIGNIFICANT EFFECTS, REMOVE THIS SECTION. OTHERWISE COMPLETE EVERY FIELD FROM ACTUAL PRACTICE BEFORE PUBLISHING.]

We use [CATEGORIES OF PERSONAL DATA] to help decide [SPECIFIC DECISIONS]. In plain language, the process [EXPLAIN THE LOGIC] and human reviewers [EXPLAIN THEIR ROLE OR STATE NONE]. We have [DESCRIBE WHETHER THE SYSTEM WAS EVALUATED FOR ACCURACY, FAIRNESS OR BIAS, INCLUDING SENSITIVE DATA, AND ANY RESULTS]. Possible benefits are [BENEFITS] and possible consequences are [CONSEQUENCES]. You may opt out through [WORKING PROFILING OPT-OUT METHOD].

Your Colorado Privacy Rights

Subject to applicable law, you may ask us to confirm and access personal data we process about you; correct inaccuracies; delete personal data concerning you; and obtain portable data when exercising access, as provided by C.R.S. § 6-1-1306(1). You may also opt out of processing for targeted advertising, sale of personal data, and profiling in furtherance of decisions producing legal or similarly significant effects concerning you.

Submit a request: [WORKING WEB FORM, EMAIL, PHONE, OR OTHER METHODS]. [EXPLAIN EACH METHOD AND HOW YOU AUTHENTICATE THE REQUEST.] You do not need to create a new account to exercise these rights; if you already have an account, we may require its use as permitted by § 6-1-1306(1).

Opt out: [CLEAR, CONSPICUOUS, WORKING METHOD OR LINK FOR EACH ACTUAL SALE OR TARGETED-ADVERTISING PRACTICE, ALSO PLACED OUTSIDE THIS NOTICE AS REQUIRED BY § 6-1-1306(1)(a)(III)]. An authorized agent may submit an opt-out request for you through [METHOD]; we may verify your identity and the agent's authority with commercially reasonable effort. If we sell personal data or use it for targeted advertising, we process qualifying user-selected universal opt-out mechanisms under § 6-1-1306(1)(a)(IV)(B) using [EXPLAIN CURRENT METHOD].

We respond to rights requests without undue delay and within 45 days after receipt. When reasonably necessary, we may extend that period by another 45 days and will tell you why within the initial 45 days. If we deny a request, we will give our reasons and appeal instructions within the statutory period. See § 6-1-1306(2).

Appeal a denial: [WORKING APPEAL METHOD, AS EASY TO USE AS THE REQUEST METHOD]. We respond within 45 days of receiving an appeal; where reasonably necessary, we may extend by up to 60 additional days and tell you why within the first 45 days. If you have concerns about our appeal result, you may contact the Colorado Attorney General. See § 6-1-1306(3).

Changes and Contact

We will update this notice when our processing practices or applicable requirements change and show the current last-updated date above. We will notify you of material changes through [STATE THE CHANNEL OR CHANNELS WE REGULARLY USE TO INTERACT WITH CONSUMERS, SUCH AS ACCOUNT EMAIL OR IN-SERVICE NOTICE]. If a material change would use data collected before the change for a secondary purpose, we will obtain the consent required by Colorado law before that use. Contact [PRIVACY CONTACT] with questions about this notice or a rights request.

Official Sources

• Colorado Revised Statutes, Title 6, current 2026 text: https://olls.info/crs/crs2026-title-06.htm
• Current 4 CCR 904-3, effective December 1, 2025: https://www.sos.state.co.us/CCR/GenerateRulePdf.do?ruleVersionId=12259&fileName=4%20CCR%20904-3