Consumer Health Data Privacy Notice
Last updated
This notice explains how Colorado ABA handles personal information associated with seeking a health-related service. It supplements our Privacy Notice. This website is operated by Colorado ABA as an editorial directory and discovery resource.
Information covered by this notice
A request for ABA service information can reveal or support an inference that a family is seeking health-related services, even when it contains no diagnosis. Depending on the form, we collect the adult contact's name, email, phone and preferred contact method; a child's age; requested setting, timing and schedule; insurance plan name or payment preference; service ZIP and city; and the selected provider, if any.
We also keep the request reference, consent choices and related handling and delivery records. Limited source-page, session and campaign information can be associated with the request for attribution and abuse prevention. We do not ask for a child's name, diagnoses, medical records, treatment history, insurance member IDs or policy numbers.
Where it comes from
We receive request information from the authorized adult who submits it and from later correspondence that person chooses to send. We receive limited browser, request and approximate location information when operating the site. A provider that receives an authorized inquiry may supply handling or response information relevant to that inquiry.
Why we use it
Colorado ABA uses this information to record and review your optional request, identify relevant reported options, manage authorized provider contact, send confirmations and recipient notices, answer your questions, maintain consent and delivery history, and protect the service against misuse. We do not use it to diagnose a condition, prescribe treatment or make a clinical eligibility decision.
Your permissions and provider delivery
Browsing the directory does not authorize provider contact. The care form asks separately for authorization to use your request and to share it with therapy providers. The optional news preference is recorded separately and starts unchecked.
A submitted request first goes to Colorado ABA's internal review. Submitting it does not itself deliver a copy to a therapy provider. A provider-specific request retains the provider shown on the form. Sharing that request with other providers requires your separate alternatives permission. A general request authorizes sharing with relevant providers within the preferences you submit. When sharing occurs, we email you the recipient names.
Who can access it
Authorized people handling requests for Colorado ABA may access the information needed for their work. Service providers support hosting, restricted administrative storage, email delivery, security and support. They process information needed to operate this service. These operations are separate from delivering an inquiry to an independent therapy provider.
Within your authorization, a therapy provider may receive your contact information and the request details needed to respond about the services you requested. That provider has its own privacy practices. We may also disclose information when required by law or when reasonably necessary to protect rights, safety and the service.
Sale, advertising and marketing
Colorado ABA does not sell care-request details or use them for targeted advertising. Submitting a request does not enroll you in an automated marketing or SMS program. A provider may respond through the contact method you select. We do not share your request for marketing unrelated to the service you requested.
Retention and security
We retain request information while handling the request and as reasonably needed for consent history, delivery records, security, disputes and applicable obligations. Access-controlled systems and encrypted connections help protect information, but no online service can guarantee complete security. Please send only the information requested by a form.
Access, correction, withdrawal and deletion
Email hello@coloradoaba.org with the subject "Privacy request" to ask about information we hold about you, request access or correction, withdraw future consent, or request deletion. Include your request reference if available and the action you want us to take. Please do not email medical records or identification documents unless a secure verification process has been arranged.
We may need to verify that you are entitled to act on the request. We respond within the period required by applicable law and explain any applicable limits. Withdrawal does not undo an earlier authorized delivery; we can identify recorded recipients and address applicable downstream deletion or notice duties. If you disagree with our response, reply with "Privacy appeal" so we can review it and explain any available further steps. Exercising an applicable privacy right does not carry a penalty or change your ability to browse the directory.
Adults, updates and contact
Our forms are for adults at least 18 who are authorized to make the request. We do not ask children to submit contact information directly. Changes to this notice will show an updated date. If a new use or recipient requires further consent, an earlier authorization does not substitute for it.
Contact Colorado ABA at hello@coloradoaba.org with questions. Our role as an editorial directory does not remove privacy obligations that apply to information we handle.