Colorado Privacy Notice
Updated: June 3, 2025
The Colorado Privacy Act of 2021, as amended from time to time and including the regulations promulgated thereunder (collectively, the “CPA”), grants Colorado consumers several rights regarding their personal data. This notice regarding those rights supplements the information contained in Rural 1st®’s Privacy Notice and applies solely to all visitors, users, and others who reside in the state of Colorado and access our Website (“consumers” or “you”). We adopt this notice to comply with the terms of the CPA and any terms defined in the CPA have the same meaning when used in this notice.
Notice at collection regarding the categories of personal data collected
We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer acting in a household (not in an employment or business to business) context (“personal data”). Personal data does not include:
- Publicly available information
- Deidentified or aggregated consumer information
- Information excluded from CPA’s scope pursuant to C.R.S. 6-1-1304(2), like personal data covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA), the Health Insurance Portability and Accountability Act (HIPAA), and the Driver’s Privacy Protection Act of 1994.
You have the right to know the categories of personal data we collect and the purposes for which we use personal data. The following table summarizes the categories of personal and sensitive data we have collected, the processing purpose of that collection, the categories of data that we have sold or shared with third parties, and the categories of third parties to whom we have disclosed such information. We do not knowingly collect personal data from consumers under the age of 16. We do not sell your personal data. We do share your information to serve you interest-based advertising using cookies, beacons, and pixels as described in our Privacy Notice. For more information on why we collect this personal data, see “how do we use your information” in our Privacy Notice.
| Personal Data Collected | Purpose of Collection | Sold? | Shared with Third Party Recipients |
|---|---|---|---|
| Contact information or personal characteristics (name; email address; postal address; telephone number; unique personal identifiers; driver’s license number; social security number; passport number; insurance policy number; signature), social media handles | To perform our services, support, evaluate and service your application and/or loan, verify your identity, analytics, marketing, comply with our legal obligations, fulfill our agreements with our partners, secure our Website, advertising | No | Application hosting, IT, marketing, loan servicing, security, CRM, payment processing, analytics, and credit check service providers; Advertising and social media platforms; Legal entities established pursuant to the Farm Credit Act of 1971; Government Agencies; Third party lenders and insurers with whom we partner to provide services you request |
| Bank account information Credit information | To perform our services, support, evaluate and service your application and/or loan, verify your identity, analytics, comply with our legal obligations, fulfill our agreements with our partners | No | Credit check, loan servicing, and security service providers; Legal entities established pursuant to the Farm Credit Act of 1971; Third party lenders and insurers with whom we partner to provide services you request |
| Marital status Veteran or military status Date of Birth Sensitive Data: Gender Race Ancestry National origin Citizenship | To perform our services, support, evaluate and service your application and/or loan, verify your identity, analytics, comply with our legal obligations, secure our Website, fulfill our agreements with our partners | No | Application hosting, IT, marketing, loan servicing, security, CRM, analytics, and credit check service providers; Legal entities established pursuant to the Farm Credit Act of 1971; Government Agencies; Third party lenders and insurers with whom we partner to provide services you request |
| Transaction information Billing and payment records | To perform our services, support, evaluate and service your application and/or loan, and fulfill our agreements with our partners | No | Accounting, loan servicing, and payment processing Service Providers; Legal entities established pursuant to the Farm Credit Act of 1971; Third party lenders and insurers with whom we partner to provide services you request |
| IP address Device identifier (e.g., MAC) Advertising identifier (e.g., IDFA, AAID) Information provided in URL string (e.g. search keywords) Cookie or pixel tracking information Information about your interaction with our Website Browsing history Search history Diagnostic information (e.g., crash logs, performance data) | To perform our services, support, evaluate and service your application and/or loan, analytics, advertising, marketing, comply with our legal obligations, fulfill our agreements with our partners, secure our Website, advertising | No | Application hosting, IT, marketing, and analytics service providers; Advertising and social media platforms |
| Call recordings Photographs | To perform our services, support, evaluate and service your application and/or loan | No | Hosting and telecom service providers |
| Current employer Job title Wage/Salary information | Verify your identity, support, evaluate and service your application and/or loan | No | CRM, ethics reporting service providers |
| Inferences derived from profile information reflecting preferences, characteristics, attitudes, and behaviors | Advertising, analytics, security, and marketing | No | CRM, Analytics, and marketing service providers Advertising and social media platforms |
Your Colorado Privacy Act Rights
The CPA grants Colorado consumers the following rights in their personal data:
Deletion
You have the right to request that your personal data be deleted. We may maintain records of a consumer’s deletion request consistent with our legal obligations under the CPA. We may also retain personal data after a deletion request pursuant to an applicable exception of which we will inform you in our response to your request.
Opt out of Sale and Profiling
Under the CPA, you have the right to opt out of the sale of your personal data and of Profiling. We do not sell your personal data, conduct Profiling, or generate Sensitive Data Inferences, as such terms are defined by the CPA.
Opt out of Targeted Advertising
We disclose your personal data to serve you interest-based advertising. You have the right to opt out of such sharing of personal data. You may exercise this right by opting out as described below, by accessing our Cookie Settings tool, or by enabling a device’s Global Privacy Control or Do No Track functionality. If you opt out of such targeted advertising, you may still receive ads from us, but they will not be tailored to you.
Correction
You have the right to request correction of inaccuracies in your personal data. If we store any personal data on archived or backup systems, we may delay compliance with your correction request with respect to an archived or backup system until that system is restored to an active system or is next accessed or used. We may direct you to correct personal data through your account settings pursuant to CPA rule 4.05.
Portability
You may request that we provide your personal data in a portable format. If we authenticate your request, we will transfer to you the personal data that we have collected and maintain about you, subject to exclusions under the CPA (i.e. trade secrets) through a secure method in a commonly used electronic format that, to the extent technically feasible, is readily usable and allows you to transmit the personal data to another entity without hindrance, pursuant to CPA rule 4.07.
How to submit your personal data request
If you wish to exercise any of your personal data rights you may submit a request. We will evaluate your request and process your request subject to exceptions as outlined by law. The response we provide may explain the reason(s) that we cannot, or are not required to, comply with a request, if applicable. We will only be able to process your request once we have positively verified your identity or authority to make the request. In order to verify your identity, we may ask that you provide us with information about yourself. If we cannot verify your identity, we will notify you that your request may not be processed. We may deny any request(s) that we believe to be fraudulent or excessive in number.
If you would like for an authorized agent to exercise your rights for you, they may do so by submitting a request. We will require that your agent submit documentation reasonably substantiating their authority to act on your behalf, which may include a valid power of attorney or your written authorization for the agent to submit the request.
We will attempt to provide a response to your request within forty-five (45) days. If we need additional time to respond to your request, we will notify you of the additional time needed (up to an additional 45 days).
Contact information
You may contact us using any of the following contact options or by visiting our nearest office location.
Email: [email protected]
Toll-free in the U.S.: 855-273-4861
Web form: Contact Form
Postal mail:
Rural 1st®12501 Lakefront Place
Louisville, KY 40299
