Privacy Notice
Effective October 21, 2026
Your care request
Colorado ABA is the directory brand operating this site. When you request help, we collect the adult contact’s name, email and phone, preferred contact method, child’s age, requested ABA setting, timeline, and insurance company or plan name. General matching requests also collect a Colorado ZIP code, city and preferred times of day. We derive city and state from the ZIP; you can enter a Colorado city if our local ZIP lookup has no result. Named-provider inquiries use the provider’s listing location and make age, timeline and setting optional. Please do not provide a child’s name, diagnoses, medical records, member IDs or insurance policy numbers.
How we use and share it
We use your answers to manage the request and help identify relevant ABA providers. These selections may reveal that your family is seeking health-related services. A general request authorizes sharing with relevant providers; we will email you the names of providers who receive it. A named-provider inquiry is for the provider shown on the form. Sharing with alternatives requires a separate optional choice.
Providers may use the details to respond about the services you requested using your selected contact method. We use service providers for hosting, secure request management and transactional email. Your request is stored in our access-controlled administrative system. It is not placed in public directory pages or website visit logs. We do not sell care-request details. The optional Colorado ABA news preference is unchecked by default and recorded separately; declining it does not affect your care request. No automated marketing or SMS program is activated by submitting this form. You can withdraw the optional email preference at [email protected].
Visit measurement
We measure page views using an anonymous, site-specific session identifier stored in sessionStorage, page paths, limited campaign attribution, browser/device information, approximate city, region and country, and automation signals. Cloudflare supplies IP-based location, which can be inaccurate. Raw IP addresses are not stored in our visit database; a site-specific hash is used for abuse limits. Visit records are retained for up to 90 days. The tracker respects Do Not Track and Global Privacy Control. You can submit a care request even when optional visit measurement is off.
Retention and choices
We retain requests while managing them and for operational records, including sharing and consent history. Ask us to access, correct or delete your information, or withdraw future sharing permission, by emailing [email protected]. Include your request reference if available; do not send medical records. We may need to verify that the request belongs to you. Withdrawing permission cannot undo an earlier authorized delivery, but we can identify those recipients and help you contact them.
Children and security
The request form is for adults who are authorized to seek services for their family. We do not ask children to contact us directly. We use encrypted connections, limited administrative access and separate site credentials. Please contact us if you believe a child submitted contact information without an authorized adult.