Colorado Privacy Policy

Enhanced Privacy Rights Under the Colorado Privacy Act (CPA)

Colorado Privacy Act (CPA)

This policy supplements our general privacy policy with Colorado-specific rights and protections under the Colorado Privacy Act.

1. Colorado Privacy Act Overview

The Colorado Privacy Act provides Colorado residents with comprehensive rights regarding their personal data. This law applies to businesses that meet certain thresholds for data processing or revenue from data sales in Colorado.

Your Enhanced Rights Under CPA

As a Colorado resident, you have six fundamental privacy rights under the CPA, plus the right to appeal our decisions and receive detailed responses to your requests.

2. Your Colorado Privacy Rights

Right to Know and Access

You have the right to know what personal data we collect, how we use it, and to receive a copy of your data.

What You Can Request:

  • Categories of personal data we collect about you
  • Specific pieces of personal data we have collected
  • Categories of sources from which we collected your data
  • Business or commercial purposes for collecting your data
  • Categories of third parties with whom we share your data
  • How long we retain your personal data

Right to Correct

You can request that we correct inaccurate personal data about you, taking into account the nature and purposes of processing.

What We'll Do:

  • Review the accuracy of the data in question
  • Make corrections where we determine data is inaccurate
  • Notify third parties if we've shared the corrected data
  • Provide you with confirmation of corrections made

Right to Delete

You can request that we delete personal data we have collected about you, subject to certain legal exceptions.

Legal Retention Exceptions

We may retain your data when necessary for:

  • Completing transactions or providing requested services
  • Complying with legal obligations
  • Exercising free speech or ensuring others can exercise free speech
  • Engaging in public or peer-reviewed research
  • Ensuring security and integrity of our systems

Right to Opt-Out of Data Sales

You have the right to opt out of the sale of your personal data to third parties.

FlowLegalPartners Position

We do not sell personal data to third parties for monetary consideration. When we share your information with attorneys, this is part of our legal referral service, not a data sale. However, you can still exercise this right to ensure future protection.

Right to Opt-Out of Targeted Advertising

You can opt out of targeted advertising based on your personal data.

What This Covers:

  • Behavioral advertising based on your browsing history
  • Cross-device tracking for advertising purposes
  • Advertising based on personal data collected from third parties
  • Retargeting ads based on your website activity

Right to Opt-Out of Profiling

You can opt out of profiling in furtherance of automated decisions that produce legal or similarly significant effects concerning you.

Examples at FlowLegalPartners:

  • Automated lead scoring systems
  • Algorithmic attorney matching decisions
  • Automated case value assessments
  • Predictive analytics for legal outcomes

3. How to Exercise Your Rights

Online Portal (Recommended)

Use our secure Consumer Rights Portal for fastest processing:

Access Portal →

Email Contact

You can also contact us directly via email:

privacy@flowlegalpartners.com

Identity Verification Required

To protect your privacy, we may need to verify your identity before processing certain requests. This may involve providing additional information or documentation. We will only use verification information for this purpose and will delete it after verification is complete.

4. Our Response Process

Response Timeline

  • Acknowledgment: Within 24 hours of receipt
  • Identity Verification: 2-5 business days (if required)
  • Standard Response: Within 45 days of receipt
  • Complex Requests: Up to 90 days (we'll notify you if extension is needed)
  • No Fee: We don't charge fees for reasonable requests

5. Right to Appeal

If we deny your request, you have the right to appeal our decision. The Colorado Privacy Act provides you with this important protection to ensure your rights are properly respected.

How to Appeal

  1. Contact us at privacy@flowlegalpartners.com within 30 days of our decision
  2. Include your original request confirmation number
  3. Explain why you believe our decision was incorrect
  4. We'll review your appeal and respond within 60 days
  5. If we uphold our decision, we'll provide information about contacting the Colorado Attorney General

6. Sensitive Personal Data

Under the Colorado Privacy Act, certain types of personal data receive enhanced protection and require your explicit consent before processing.

Sensitive Data Categories:

  • Social Security numbers
  • Financial account information
  • Health and medical information
  • Biometric identifiers
  • Precise geolocation data
  • Information about children under 13

Our Commitment:

  • We obtain explicit consent before processing sensitive data
  • We provide clear notice about sensitive data collection
  • We implement additional security measures
  • We limit sensitive data processing to necessary purposes

7. Global Privacy Control (GPC)

The Colorado Privacy Act recognizes Global Privacy Control signals as a valid method for exercising your opt-out rights. When we detect a GPC signal from your browser, we automatically:

  • Opt you out of data sales (if applicable)
  • Opt you out of targeted advertising
  • Respect your privacy preferences across our services

How to Enable GPC

Visit globalprivacycontrol.org to learn how to enable GPC in your browser or privacy tools. This provides an automated way to exercise your privacy rights across participating websites.

8. Data Controller Information

FlowLegalPartners acts as the data controller for personal data collected through our services. We are responsible for determining the purposes and means of processing your personal data.

Contact Our Data Protection Officer

Mailing Address

Data Protection Officer

FlowLegalPartners

202 N Cedar Ave STE #1

Owatonna, MN 55060

9. Colorado Attorney General

The Colorado Attorney General has enforcement authority under the Colorado Privacy Act. If you have concerns about our privacy practices that we cannot resolve, you may contact:

Colorado Attorney General's Office

Website: coag.gov

Consumer Protection: Consumer Protection Division

10. Colorado-Specific Privacy Considerations

Colorado Legal Environment

Colorado has a progressive approach to consumer privacy and data protection. In addition to the CPA, Colorado residents benefit from:

  • Strong consumer protection laws under Colorado Revised Statutes
  • Enhanced transparency requirements for data brokers
  • Protections for biometric data collection
  • Rights related to automated vehicle data

11. Relationship to General Privacy Policy

This Colorado-specific policy supplements our general Privacy Policy. In case of any conflict between this policy and our general policy, this Colorado policy takes precedence for Colorado residents.

For all other privacy practices not specifically addressed in this Colorado policy, please refer to ourgeneral Privacy Policy.

Last Updated: 8/1/2025 | Colorado Privacy Act Version