Colorado Privacy Policy

Enhanced Privacy Rights Under the Colorado Privacy Act

Colorado Privacy Act (CPA)

Effective July 1, 2023: This policy supplements our general privacy policy with Colorado-specific rights and protections under the CPA.

1. CPA Overview

The Colorado Privacy Act provides Colorado residents with comprehensive data privacy rights. The law applies to businesses that conduct business in Colorado or produce products/services targeted to Colorado residents.

Your Enhanced Rights Under CPA

As a Colorado resident, you have 7 fundamental privacy rights under the CPA, plus the right to appeal our decisions and receive detailed responses to your requests.

2. Your Colorado Privacy Rights

Right to Know and Access

You have the right to know what personal data we collect, how we use it, and to receive a copy of your data.

What You Can Request:

  • Categories of personal data we collect about you
  • Specific pieces of personal data we have collected
  • Categories of sources from which we collected your data
  • Business or commercial purposes for collecting your data
  • Categories of third parties with whom we share your data
  • How long we retain your personal data

Right to Correct

You can request that we correct inaccurate personal data about you, taking into account the nature and purposes of processing.

What We'll Do:

  • Review the accuracy of the data in question
  • Make corrections where we determine data is inaccurate
  • Notify third parties if we've shared the corrected data
  • Provide you with confirmation of corrections made

Right to Delete

You can request that we delete personal data we have collected about you, subject to certain legal exceptions.

Legal Retention Exceptions

We may retain your data when necessary for:

  • Completing transactions or providing requested services
  • Complying with legal obligations
  • Exercising free speech or ensuring others can exercise free speech
  • Engaging in public or peer-reviewed research
  • Ensuring security and integrity of our systems

Right to Opt-Out of Data Sales

You have the right to opt out of the sale of your personal data to third parties. Note: FlowLegalPartners does not sell personal data for monetary consideration.

Right to Opt-Out of Targeted Advertising

You can opt out of targeted advertising based on your personal data.

What You Can Request:

  • Behavioral advertising based on your browsing history
  • Cross-device tracking for advertising purposes
  • Advertising based on personal data collected from third parties
  • Retargeting ads based on your website activity

Right to Opt-Out of Profiling

You can opt out of profiling in furtherance of automated decisions that produce legal or similarly significant effects concerning you.

What You Can Request:

  • Automated lead scoring systems
  • Algorithmic attorney matching decisions
  • Automated case value assessments
  • Predictive analytics for legal outcomes

Right to Data Portability

You can request your data in a portable, readily usable format that allows you to transmit it to another entity.

What We'll Do:

  • Provide your data in a commonly used format (CSV, JSON)
  • Make the data available for download
  • Transmit directly to another entity where technically feasible

FlowLegalPartners Position on Data Sales

We do not sell personal data to third parties for monetary consideration. When we share your information with attorneys, this is part of our legal referral service, not a data sale. However, you can still exercise this right to ensure future protection.

3. How to Exercise Your Rights

Online Portal (Recommended)

Use our secure Colorado Consumer Rights Portal for fastest processing:

Access Portal →

Email Contact

You can also contact us directly via email:

privacy@flowlegalpartners.com

Identity Verification Required

To protect your privacy, we may need to verify your identity before processing certain requests. This may involve providing additional information or documentation. We will only use verification information for this purpose and will delete it after verification is complete.

4. Our Response Process

Response Timeline

  • Acknowledgment: Within 24 hours of receipt
  • Identity Verification: 2-5 business days (if required)
  • Standard Response: Within 45 days of receipt
  • Complex Requests: Up to 90 days (we'll notify you if extension needed)
  • No Fee: No fee for up to 2 requests per year

5. Right to Appeal

If we deny your request, you have the right to appeal our decision. The CPA provides you with this important protection to ensure your rights are properly respected.

How to Appeal

  1. Contact us at privacy@flowlegalpartners.com within 30 days of our decision
  2. Include your original request confirmation number
  3. Explain why you believe our decision was incorrect
  4. We'll review your appeal and respond within 60 days
  5. If we uphold our decision, we'll provide information about contacting the state Attorney General

6. Sensitive Personal Data

Under the CPA, certain types of personal data receive enhanced protection and require your explicit consent before processing.

Sensitive Data Categories:

  • Social Security numbers
  • Financial account information
  • Health and medical information
  • Biometric identifiers
  • Precise geolocation data
  • Information about children under 13

Our Commitment:

  • We obtain explicit consent before processing sensitive data
  • We provide clear notice about sensitive data collection
  • We implement additional security measures
  • We limit sensitive data processing to necessary purposes

7. Global Privacy Control (GPC)

The CPA recognizes Global Privacy Control signals as a valid method for exercising your opt-out rights. When we detect a GPC signal from your browser, we automatically:

  • Opt you out of data sales (if applicable)
  • Opt you out of targeted advertising
  • Respect your privacy preferences across our services

How to Enable GPC

Visit globalprivacycontrol.org to learn how to enable GPC in your browser or privacy tools. This provides an automated way to exercise your privacy rights across participating websites.

8. Data Controller Information

FlowLegalPartners acts as the data controller for personal data collected through our services. We are responsible for determining the purposes and means of processing your personal data.

Contact Our Data Protection Officer

Mailing Address

Data Protection Officer

FlowLegalPartners

202 N Cedar Ave STE #1

Owatonna, MN 55060

9. Colorado Attorney General

The Attorney General has enforcement authority under the CPA. If you have concerns about our privacy practices that we cannot resolve, you may contact:

Colorado Attorney General's Office

Website: coag.gov

Address: 1300 Broadway, 10th Floor, Denver, CO 80203

Phone: (720) 508-6000

10. Relationship to General Privacy Policy

This Colorado-specific policy supplements our general Privacy Policy. In case of any conflict between this policy and our general policy, this Colorado policy takes precedence for Colorado residents.

For all other privacy practices not specifically addressed in this Colorado policy, please refer to our general Privacy Policy.

Last Updated: December 22, 2025 | CPA Version