Privacy Notice

This Privacy Notice (“Notice”) applies to personal data Boulder Community Health (collectively, “COMPANY,” “we,” “us,” or “our”) collects.

Data We Collect

We collect data about you in different ways. For example, we collect data:

• Directly from you: This may include when you sign up to get our emails or contact us.
• Automatically: This includes through cookies, server logs, and other tools on our website.
• From other sources: These can include our affiliates, vendors, social media companies, publicly available sources, and other companies.

The following are a few examples of our collection and use of data:

Client Information

Examples of Personal Data: We collect the name and contact information of our clients/customers and their employees with whom we may interact.

Primary Purpose: We collect this information to contact our clients/customers and communicate with them about business activities such as projects, services, and billing.

Feedback/Support

Examples of Personal Data: If you provide feedback or contact us for support, we collect your name and email, as well as other content that you send.

Primary Purpose: We collect this information to receive and act upon feedback.

Use of Our Website

Examples of Personal Data: We use technology (e.g., a cookie or a pixel) to learn how you engage with our websites. This may include which links you click or what you type into our online forms. We may also track your IP address, the website that referred you to us, and data about your device.

Primary Purpose: We use this information to operate our website. We also use it to understand how you interact with our website, gather analytics, improve our website, and learn your preferences. We may also use this data to help detect and prevent fraud.

Website Targeted Advertising Technology

Examples of Personal Data: We may let third parties place tracking technology on our websites (e.g., a cookie or a pixel). The third party might also collect data over time and across other websites. Among other things, they may use this data to serve ads tailored to your interests, which may include ads about our products or services.

Primary Purpose: Users should see our Cookie Preference Center for more information, including your options on how to manage your preferences surrounding use of these technologies.

How We Use Data

We may also use data to:

• Identify you when you visit our site.
• Complete transactions.
• Improve or create services and products.
• Streamline checkouts.
• Conduct analytics.
• Connect with you (e.g., addressing your requests, inquiries, issues, or feedback).
• Market our products or services.
• Market the products or services of our business partners.
• Find and prevent malicious, deceptive, fraudulent, or illegal activity.
• Find and prevent security incidents.
• Enforce our policies and agreements.
• Debug, find, and fix errors that impair our website and services.
• Comply with legal or regulatory obligations.
• Establish or exercise our rights
• Defend against legal claims.
• Manage our relationships.
• For other reasons with your consent.

The sections above describe our main purposes in collecting your data, but often we have multiple purposes.

How We Share Data

In addition to the specific situations discussed elsewhere in this Notice, we may share personal data in the following situations:

• Affiliates and Acquisitions. We may share data with our affiliates (e.g., parent company, sister companies, subsidiaries, joint ventures, or other companies under common control). If a company acquires, or enters negotiations to acquire, our company, business, or assets, we may share data with that company.
• Other Disclosures without Your Consent. We may share data to cooperate with law enforcement, participate in a legal process, or for legal compliance. We may share your data to establish or exercise our rights, to defend against legal claims, to investigate, prevent, or act on possible illegal activities, threats to safety of person or property, or a violation of our policies.
• Public. Our website may allow for comments or reviews in a public forum. If you post on these pages, what you share may be publicly available.
• Mobile Data. Mobile opt-in data, phone numbers, and SMS consent information will not be shared with, sold to, or transferred to any third party for any purpose.
• Service Providers. We may share your data with service providers. Service providers may help us to run our website, conduct surveys, provide technical support, process payments, fulfill orders, and more.
• Professional Services. We may share personal data with our professional service providers, such as auditors or lawyers.
• Other Disclosures with Your Consent. We may share your data with third parties when you consent or direct us to.

How We Protect and Retain Data

No method of internet transmission or electronic storage is fully secure. While we use reasonable efforts to protect personal data, we cannot guarantee its security. If we are required to inform you about a security incident, we will do so electronically, in writing, or by phone, as the law permits.

Our website may permit you to create an account. You are responsible for selecting a unique and complex password and keeping it confidential. You are responsible for any access to or use of your account by someone who has obtained your password, whether or not you approved of such access or use. Notify us of unauthorized use of your password or account immediately.

We keep your personal data for only as long as necessary to fulfil the purposes in this Notice unless a longer retention period is required or permitted by law. This includes the purposes of satisfying legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the data. We also weigh the potential risk of harm from unauthorized use or disclosure of the data, the purposes for which we obtained the data and whether we can meet those purposes through other means, as well as applicable legal requirements.

Third-Party Applications/Websites

We may provide links to websites and other third-party content or services that we do not own or operate. We have no control over the privacy practices of websites or services we do not own. For details about such third parties’ privacy practices, see their privacy notices.

Changes To This Privacy Notice

We may change our Notice and privacy practices. New notices will be published on our website. If changes are material, the Notice that was in place when you submitted personal data to us will generally govern that data unless you consent to the new Notice. Our Notice shows “effective” and “last updated” dates below. The effective date is the date the current version took effect. The last updated date is the date the current version was last substantively changed.

Contact Information

If you have questions, comments, or complaints on our privacy practices, or if you need to access this Notice in a different form due to a disability, please contact us. We will try to address your requests and provide you with additional privacy-related information.

(SystemPage:525}

(303) 415-7000

Effective and Last Updated: {11/11/2026}