Privacy Policy

Effective Date: June 9, 2026
Last Updated: June 9, 2026

Introduction

Montrose-RealEstate.com ("Company," "we," "us," or "our") is committed to protecting the privacy
and personal information of all visitors, clients, and prospective clients who use this website,
located at Montrose-RealEstate.com (the "Site"). This Privacy Policy describes how we collect, use,
disclose, store, and protect information you provide to us or that we collect automatically when
you visit our Site.

This Privacy Policy has been prepared in compliance with applicable Colorado and federal laws
and regulations, including:

The Colorado Privacy Act (CPA), C.R.S. §§ 6-1-1301 et seq. (effective July 1, 2023)
Colorado HB 18-1128, codified at C.R.S. §§ 6-1-713 and 6-1-713.5, concerning protection and disposal of Personal Identifying Information
The Colorado Security Breach Notification Act, C.R.S. § 6-1-716
Colorado Real Estate Commission (CREC) Position Statement CP-30: Commission Position on Data Security and Privacy (adopted October 1, 2024)
The federal CAN-SPAM Act (for electronic marketing communications)
Applicable provisions of the federal Telephone Consumer Protection Act (TCPA)

By using this Site, you acknowledge that you have read, understood, and agree to be bound by
this Privacy Policy. If you do not agree to this Policy, please do not use this Site.

Who We Are

Montrose-RealEstate.com is a licensed Colorado real estate brokerage serving the Montrose,
Colorado area. Our brokerage is licensed and regulated by the Colorado Real Estate
Commission (CREC), Division of Real Estate, Colorado Department of Regulatory Agencies
6(DORA).

For questions about this Privacy Policy or to exercise your rights, contact us at:

Montrose-RealEstate.com
62470 Ophir Circle
Montrose, Colorado 81403
United States

Scott: Scott@Montrose-RealEstate.com | 970-209-2234 | License: EI40001400
Marilyn: Marilyn@Montrose-RealEstate.com | 970-209-3931 | License: EA40037493
Levi: Levi@Montrose-RealEstate.com | 970-708-0930 | License: FA100070701

Information We Collect

1. Personal Information You Provide

When you use our Site, we may collect information that you voluntarily submit, including:

Contact Information: Full name, email address, mailing address, phone number
Property Inquiry Details: Property preferences, desired locations, price ranges, timeline for buying or selling
Financial Information: General financial qualification questions (e.g., pre-approval status); we do not collect or store full financial account numbers, Social Security numbers, or credit card numbers through this Site
Account Credentials: Username and password if you create an account or register for property alerts
Communications: Emails, chat messages, or form submissions sent to us through the Site

2. Personal Identifying Information (PII) — Colorado Law Definition

Under Colorado HB 18-1128 (C.R.S. § 6-1-713), Personal Identifying Information (PII) is
specifically defined to include:

Social Security numbers
Personal identification numbers (PINs) and passcodes
Passwords and pass codes
State or government-issued driver's license or identification card numbers
Government passport numbers
Biometric data
Employer, student, or military identification numbers
Financial transaction device information (e.g., credit/debit card numbers combined with security codes)

We treat all such information with the highest level of care and do not collect unnecessary PII
through this Site.

3. Personal Data — Colorado Privacy Act Definition

Under the CPA, "personal data" means any information that is linked or reasonably linkable to
an identified or identifiable individual, including but not limited to names, email addresses, IP
addresses, browsing history, and behavioral data. This is a broader category than PII under HB
18-1128.

4. Sensitive Data

The CPA requires us to obtain your opt-in consent before collecting "sensitive data," which
includes:

Racial or ethnic origin
Religious beliefs
Mental or physical health condition or diagnosis
Sex life or sexual orientation
Citizenship or immigration status
Genetic or biometric data used for identification
Personal data of a known child (under 13 years of age)

We do not intentionally collect sensitive data through this Site. If we ever need to collect such
data for a specific purpose, we will seek your explicit prior consent.

5. Information Collected Automatically

When you visit our Site, we and our third-party service providers may automatically collect
certain technical information, including:

IP address and device identifiers
Browser type and version
Operating system
Pages visited and time spent on each page
Referring website addresses (URLs)
Date and time of your visit
Geolocation data (general location based on IP address)
Cookie data and similar tracking technologies (see Section 5 — Cookies)

How We Use Your Information

We use the information we collect for the following specific and disclosed purposes. The CPA
requires us to collect only information that is adequate, relevant, and reasonably necessary for
these purposes:

To respond to your inquiries about buying, selling, or renting real estate in the Montrose area
To provide real estate brokerage services and fulfill our contractual obligations to you
To send property listings and market updates that match your stated preferences
To send marketing communications, including newsletters and promotional offers (subject to your opt-out rights under Section 9)
To comply with legal obligations, including CREC requirements and Colorado law
To improve our Site and services through analytics and user experience research
To prevent fraud and ensure security of our systems and your data
To communicate about transactions, closings, inspections, and other real estate activities

We will not use your personal data for purposes that are incompatible with the purposes for
which it was originally collected without first obtaining your consent.

Legal Basis and Data Minimization

Consistent with the CPA and CREC CP-30 guidance, we are committed to data minimization—we
collect only the personal data that is necessary for the stated purposes above. We do not collect
personal data in excess of what is needed to serve you or to comply with our legal obligations.

We process your personal data on the following bases:

Performance of a contract — to provide real estate services you have requested
Compliance with legal obligations — to meet our requirements under Colorado law and CREC regulations
Legitimate business interests — to improve our services and communicate with prospective clients
Your consent — for marketing communications, cookies, and sensitive data

Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to enhance your experience and
analyze Site usage.

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help the Site
recognize your browser and remember certain information.

2. Types of Cookies We Use

Cookie Type	Purpose
Essential/Functional Cookies	Required for the Site to operate correctly (e.g., maintaining session state, security)
Analytics Cookies	Help us understand how visitors use the Site (e.g., Google Analytics)
Marketing/Advertising Cookies	Used for targeted advertising and tracking conversions from ads

3. Your Cookie Choices — Colorado CPA Compliance

Under the CPA, as of July 1, 2024, you have the right to opt out of the processing of your
personal data for targeted advertising and the sale of personal data through mechanisms
including the Global Privacy Control (GPC) signal. Our Site is designed to honor GPC signals.
You may also:

Adjust cookie preferences through our cookie consent banner when you first visit the Site
Change cookie settings at any time through your browser settings
Opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-On

Disabling essential cookies may affect certain Site functionality.

Sharing and Disclosure of Your Information

We do not sell your personal information to third parties. We may share your information in
the following limited circumstances:

1. With Service Providers

We may share your information with trusted third-party service providers who assist us in
operating our Site and providing real estate services, including:

Website hosting and technology providers
Email marketing platforms (e.g., Mailchimp, Constant Contact)
Customer relationship management (CRM) software providers
Multiple Listing Service (MLS) platforms
Real estate transaction management services

All third-party service providers are required to implement and maintain reasonable security
procedures and practices appropriate to the nature of the information they receive, consistent
with C.R.S. § 6-1-713.5.

2. With Real Estate Professionals

As part of facilitating real estate transactions, we may share relevant information with:

Co-operating real estate brokers and agents
Title companies and escrow agents
Lenders and mortgage professionals (at your direction)
Home inspectors, appraisers, and other transaction service providers

Confidential Client Information: As required by Colorado brokerage law and CREC regulations,
your designated broker maintains your confidential information and will not share it with
other parties—including our supervising broker—without your written informed consent,
except as required by law.

3. Legal Compliance and Protection

We may disclose your information when required or permitted by law, including:

In response to a valid court order, subpoena, or legal process
To comply with applicable Colorado or federal laws and regulations
To protect the rights, property, or safety of our company, our clients, or the public
To prevent or investigate fraud or other criminal activity

4. Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our business assets,
your information may be transferred to the successor entity. We will notify you of any such
transfer and any material changes to this Privacy Policy.

Data Security

We take the protection of your personal information seriously. Pursuant to C.R.S. § 6-1-713.5
(HB 18-1128), we implement and maintain reasonable security procedures and practices
appropriate to the nature of the information we collect and the size and nature of our business.
These measures include:

Encryption of sensitive data in transit (SSL/TLS) and where appropriate at rest
Access controls limiting employee access to personal data on a need-to-know basis
Secure password management and multi-factor authentication for internal systems
Regular security assessments of our data practices
Employee training on data security, privacy, and Colorado real estate law requirements
Written data disposal procedures for both paper and electronic documents containing PII, consistent with C.R.S. § 6-1-713

While we employ these safeguards, no method of electronic transmission or storage is 100%
secure. We cannot guarantee the absolute security of your information.

1. Written Data Protection Policy

Consistent with Colorado HB 18-1128 and CREC Position Statement CP-13, we maintain a
written Data Protection Policy (DPP) governing the protection, use, and secure disposal of
Personal Identifying Information collected in the course of our real estate business. This
internal policy supplements this public Privacy Policy.

Data Breach Notification

In the event of a security breach involving your Personal Identifying Information or personal
data, we will comply with the Colorado Security Breach Notification Act (C.R.S. § 6-1-716),
including:

Notifying affected individuals no later than 30 days after determining that a breach occurred that poses a risk of harm
Notifying the Colorado Attorney General if the breach affects 500 or more Colorado residents, within 30 days
Notifying nationwide Consumer Reporting Agencies if the breach affects more than 1,000 Colorado residents
Providing required information in breach notices, including: date or estimated date of the breach, description of the type of information involved, our contact information, toll-free numbers for Consumer Reporting Agencies and the FTC, and information about fraud alerts and security freezes

If your online account credentials have been compromised, we will additionally direct you to
promptly change your password and take steps to protect any other accounts using the same
credentials.

Your Rights Under the Colorado Privacy Act (CPA)

If you are a Colorado resident, the CPA grants you the following rights regarding your personal
data:

Right to Access

You have the right to confirm whether we are processing your personal data and to obtain a
copy of that data.

Right to Correction

You have the right to request that we correct inaccurate personal data we hold about you.

Right to Deletion

You have the right to request that we delete personal data we have collected about you, subject
to applicable legal exceptions.

Right to Data Portability

You have the right to obtain your personal data in a portable, readily usable format that allows
you to transmit the data to another controller.

Right to Opt Out

You have the right to opt out of:

Targeted advertising using your personal data
Sale of your personal data
Profiling in furtherance of decisions that produce legal or similarly significant effects

To exercise your opt-out rights, you may:

Use the Global Privacy Control (GPC) browser signal, which our Site recognizes
Submit an opt-out request using the contact information in Section 1
Unsubscribe from marketing emails using the unsubscribe link included in every marketing email

How to Submit a Data Rights Request

To exercise any of the rights above, contact us at the address provided in Section 1. We will
respond to verified requests within 45 days. We may request additional information to verify
your identity. If we need additional time, we will notify you within the initial 45-day period and
may extend our response time by an additional 45 days for complex or high-volume requests.

We will not discriminate against you for exercising any of your privacy rights

Children's Privacy

This Site is not directed to children under the age of 13, and we do not knowingly collect
personal data from children under 13 without verifiable parental consent. If you are between
the ages of 13 and 17 (a "minor" under the CPA as amended), we will not process your personal
data for targeted advertising, the sale of personal data, or for profiling purposes without your
consent.

If we learn that we have inadvertently collected personal data from a child under 13 without
proper parental consent, we will promptly delete that information. If you believe we may have
such information, please contact us at the address in Section 1.

Email Marketing and CAN-SPAM Compliance

Our marketing email communications comply with the federal CAN-SPAM Act. Specifically:

All marketing emails accurately identify Montrose Real Estate as the sender
Subject lines accurately reflect the content of each email
Marketing emails are clearly identified as commercial communications
Every marketing email includes our valid physical postal address
Every marketing email includes a clear and easy unsubscribe (opt-out) mechanism
We honor opt-out requests within 10 business days of receipt
We do not use deceptive or misleading header information or subject lines

You may opt out of marketing emails at any time by clicking the "Unsubscribe" link in any
marketing email or by contacting us at the address in Section 1. Note: You may continue to
receive transactional or relationship emails (e.g., about an active listing or pending transaction)
even after opting out of marketing communications.

Data Retention and Disposal

We retain personal data only for as long as necessary to fulfill the purposes described in this
Privacy Policy, to comply with legal obligations, resolve disputes, and enforce our agreements.
Consistent with C.R.S. § 6-1-713 (HB 18-1128), when paper or electronic documents containing
Personal Identifying Information are no longer needed, we destroy or arrange for the
destruction of such documents by shredding, erasing, or otherwise rendering the PII
unreadable and indecipherable. Our written data disposal policy governs these procedures in
detail.

Colorado real estate records are also retained in accordance with applicable CREC recordkeeping requirements and applicable Colorado real estate brokerage rules.

Third-Party Links

Our Site may contain links to third-party websites, including MLS searches, mortgage
calculators, neighborhood information resources, and social media platforms. This Privacy
Policy applies only to our Site. We are not responsible for the privacy practices or content of
third-party websites. We encourage you to review the privacy policies of any third-party sites
you visit.

Do Not Track

Some browsers transmit "Do Not Track" signals to websites. Our Site currently responds to
Global Privacy Control (GPC) signals as required by the CPA. We will continue to evaluate
technical standards for other Do Not Track signals.

California Residents

Although our primary market is Colorado, if you are a California resident and access this Site,
please be aware that you may have additional rights under the California Consumer Privacy
Act (CCPA) and the California Privacy Rights Act (CPRA). Contact us at the information in
Section 1 for more information.

CREC Compliance Statement

Montrose Real Estate is a licensed Colorado real estate brokerage subject to regulation by the
Colorado Real Estate Commission (CREC). Our data privacy practices are designed to align
with:

CP-30 – Commission Position on Data Security and Privacy (adopted October 1, 2024): We maintain data security practices to protect client PII and reduce risk associated with cybercrime and fraud in real estate transactions
CP-13 – Written Data Protection Policy: We maintain a written internal Data Protection Policy as recommended for all Colorado real estate brokerages
CP-22 / CP-31 (as applicable) – Confidential client information is maintained in accordance with Colorado's designated brokerage framework and informed consent requirements effective January 1, 2026

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal
requirements, or applicable law. When we make material changes, we will:

Update the "Last Updated" date at the top of this Policy
Post the revised Policy on this page
Where appropriate, notify you by email or by a prominent notice on our Site

Your continued use of the Site after we post changes constitutes your acceptance of the revised
Privacy Policy. We encourage you to review this Policy periodically.

Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or our data practices,
or to exercise any of your rights under the Colorado Privacy Act, please contact us:

Montrose-RealEstate.com
62470 Ophir Circle
Montrose, Colorado 81403
United States

Website: https://www.Montrose-RealEstate.com

Requests submitted to us will be acknowledged within 10 business days and responded to
within 45 days, with the possibility of a single 45-day extension for complex requests.

This Privacy Policy was prepared with reference to the Colorado Privacy Act (C.R.S. §§ 6-1-1301 et seq.),
Colorado HB 18-1128 (C.R.S. §§ 6-1-713, 6-1-713.5), the Colorado Security Breach Notification Act
(C.R.S. § 6-1-716), Colorado Real Estate Commission Position Statements CP-13 and CP-30, and
applicable federal law including the CAN-SPAM Act. This document is intended for informational and
operational purposes and does not constitute legal advice. Montrose-RealEstate.com recommends
consulting with a licensed Colorado attorney to verify ongoing compliance with current law.

References

CPA (Colorado Privacy Act): Guide to Requirements + Website … - Get a clear breakdown of
Colorado Privacy Act rules, enforcement timelines, and how to manage third-…
The Colorado Privacy Act (CPA): Requirements, Enforcement, and … - The Colorado Privacy Act
grants Colorado residents rights over their data and places obligations on …
Data Protection Policy - Colorado Attorneys - Colorado House Bill 18-1128 requires all real estate
brokerage firms to have a Data Protection Polic…
Colorado Revised Statutes Section 6-1-713 (2024) - policy - Section 6-1-713 - Disposal of personal
identifying information - policy - definitions shall develop …
C.R.S. 6-1-713.5 – Protection of personal identifying information - Reasonably designed to help
protect the personal identifying information from unauthorized access, u…
SECURITY BREACH NOTIFICATION CHART - Colorado - If notice is provided to more than 500 CO
residents, the Entity must provide notice to the Attorney …
Colorado | Summary of U.S. State Data Breach Notification Statutes - Government Notification
Required: Yes, if 500+ residents notified. Colo. Rev. Stat. § 6-1-716. Scope…
The Colorado Division of Real Estate Autumn 2024 … - GovDelivery - On October 1, 2024, the Real
Estate Commission adopted CP-30 Commission Position on Data Security an…
CAN-SPAM Act: A Compliance Guide for Business - Each separate email in violation of the CANSPAM Act is subject to penalties of up to $53,088, so no…
New Colorado Data Privacy Requirements Apply to Employers - C.R.S. § 6-1-713.5, that requires
covered entities to implement and maintain reasonable security pro…
Colorado Privacy Act (CPA): Cookie Consent & Compliance - Stay compliant with the Colorado
Privacy Act (CPA) using CookieHub. Manage cookie consent, protect c…
The Colorado Privacy Act: Understanding Your Newest Compliance … - What does the CPA require? ·
To collect personal information only for a specific purpose · To limit …
Colorado Privacy Act Requires Universal Opt-Out Starting July 1, 2024 - As of July 1, 2024, covered
entities must recognize and honor a user's opt-out preferences where com…
Automate your CPA Compliance with CookieYes - Colorado Privacy Act requires businesses to
provide users with an easy mechanism to opt out of targe…
Colorado Brokers Must Obtain Informed Consent Before Sharing … - Colorado brokers must obtain
written informed consent before sharing confidential client information…
HB18-1128 Protections For Consumer Data Privacy | Colorado … - The notification laws governing
disclosure of unauthorized acquisitions of unencrypted and encrypted…
Colorado House Bill 18-1128: The Requirements to Protect … - CIRSA - Regarding disposal, HB 1128
requires governmental entities that maintain paper or electronic documen…
Colorado Finalizes Privacy Act Rules: Key Updates for Businesses - The amendments and related
regulations require controllers to obtain consent before processing data …
CPA changes address consent for minors' use of addictive features - The new regulations will take
effect 30 days after they are published in the state register, which w…
CAN-SPAM Act compliance for real estate businesses - Real estate professionals who send
marketing emails must comply with the CAN-SPAM Act. Here are four…
The Real Estate Agent's Guide to Email Marketing Compliance + … - As a real estate agent, every
marketing email you send is subject to spam laws laid out by CAN-SPAM….