Privacy Policy

Privacy Policy

Colorado Springs Direct Primary Care, LLC
Last Updated: September 10, 2026

Colorado Springs Direct Primary Care, LLC (“COS DPC,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit cosdpc.com (the “Website”), submit an inquiry, communicate with us regarding our services, or otherwise interact with our public-facing marketing activities.

1. Scope of This Privacy Policy

This Privacy Policy applies to the COS DPC public Website and information collected in connection with general inquiries, marketing, and communications with prospective and existing members.

The Website is intended for general informational, educational, and marketing purposes. It is not intended for medical care, diagnosis, treatment, medical intake, or clinical communications.

Patient Health Information

If you become a patient of Colorado Springs Direct Primary Care, LLC, certain information created, received, or maintained in connection with your healthcare may constitute protected health information (“PHI”) and may be protected by the Health Insurance Portability and Accountability Act (“HIPAA”) and other applicable healthcare privacy laws.

Our use and disclosure of PHI is governed by our Notice of Privacy Practices, which is separate from this Website Privacy Policy.

Please do not submit symptoms, diagnoses, medications, treatment information, medical records, or other sensitive health information through general Website forms or other public-facing Website features.

2. Information We Collect

Depending on how you interact with COS DPC, we may collect the following categories of information.

Information You Provide to Us

When you submit a form, contact us, subscribe to communications, or otherwise interact with us, we may collect information such as:

• First and last name
• Email address
• Telephone number
• Information regarding whether certain insurance or government healthcare programs apply to you, such as Medicare, Medicaid/Health First Colorado, or TRICARE
• How you heard about COS DPC
• Communication preferences and marketing consent
• Information you voluntarily provide when communicating with us

Information Collected Automatically

When you visit our Website, we and service providers acting on our behalf may automatically collect certain information about your device and use of the Website, including:

• IP address
• Browser type and version
• Device type and operating system
• Approximate geographic location derived from an IP address
• Referring website or source
• Pages viewed
• Dates and times of visits
• Links or Website features you interact with
• Advertising and cookie identifiers
• Information regarding interactions with our advertisements
• Website conversion and performance information

This information may be collected through cookies, pixels, tags, software development tools, and similar technologies.

3. How We Use Personal Information

We may use personal information to:

• Respond to questions and membership inquiries
• Contact prospective members by telephone, email, or text message
• Provide information about COS DPC services and membership
• Manage prospective-member and customer relationships
• Maintain records of communications and inquiries
• Send marketing communications when you have elected to receive them
• Operate, maintain, troubleshoot, and improve the Website
• Understand how visitors use the Website
• Measure the effectiveness of our advertising and marketing
• Attribute inquiries and conversions to advertising or referral sources
• Create advertising audiences and conduct retargeting campaigns
• Protect the security and integrity of our Website and systems
• Prevent fraud or misuse
• Comply with applicable legal and regulatory requirements
• Establish, exercise, or defend legal rights

We may also use information for other purposes that are disclosed to you at the time it is collected or as otherwise permitted by law.

4. Cookies, Analytics, Advertising, and Retargeting

COS DPC uses cookies and similar technologies to operate and improve the Website, understand Website usage, measure marketing performance, and advertise COS DPC services.

These technologies may be provided by third parties, including services provided by Google and Meta.

We currently use or may use technologies including:

• Google Analytics
• Google Tag Manager
• Google Ads and conversion measurement technologies
• Meta Pixel and Meta advertising technologies
• Wix analytics and Website technologies

These services may collect information such as your IP address, device and browser information, cookie or advertising identifiers, referring URLs, pages viewed, Website interactions, and advertising or conversion events.

Advertising and Retargeting

We may use information about interactions with our Website to measure advertising performance, create advertising audiences, and display COS DPC advertisements to people who have previously visited or interacted with our Website.

As a result, after visiting the COS DPC Website, you may see advertisements for COS DPC on websites, search engines, social media platforms, or other digital services.

COS DPC does not sell your personal information.

COS DPC does not intentionally provide medical records, diagnoses, treatment information, clinical communications, or information maintained in our patient healthcare systems to advertising platforms for targeted advertising.

You may be able to limit certain cookies or advertising technologies through your browser settings, cookie controls made available through our Website, or privacy controls offered by the applicable advertising platform.

5. How We Disclose Personal Information

We may disclose personal information to service providers and other third parties that assist us in operating our Website, communicating with prospective or existing members, managing relationships, analyzing Website activity, or conducting advertising.

These may include providers of:

• Website hosting and Website management services
• Customer relationship management services
• Email, telephone, and text-message communication services
• Analytics services
• Advertising and marketing services
• Information technology and security services
• Professional and legal services

For example, we currently use or are implementing services provided by Wix, HubSpot, Google, Meta, and Spruce Health in connection with these activities.

These providers may process personal information on our behalf or, depending on the service, under their own applicable privacy terms.

We may also disclose information when reasonably necessary to comply with applicable law, regulation, legal process, or governmental request; protect the rights, property, or safety of COS DPC, our patients, Website visitors, or others; investigate fraud or security incidents; or establish, exercise, or defend legal claims.

We may disclose information in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to applicable legal requirements.

COS DPC does not sell personal information for monetary consideration.

6. Communications

When you submit an inquiry and provide your contact information, COS DPC may contact you regarding your inquiry using the communication methods you have authorized, which may include telephone, email, or text message.

If you separately elect to receive marketing communications, we may also use your contact information to provide information about COS DPC, including news, services, membership information, or other promotional communications.

You may unsubscribe from marketing emails using the unsubscribe mechanism included in the communication.

You may opt out of marketing text messages by following the opt-out instructions contained in the message, such as replying STOP, where applicable.

Opting out of marketing communications does not necessarily prevent COS DPC from contacting you regarding an existing inquiry, membership, patient relationship, transaction, or other non-marketing matter when permitted by law.

Message and data rates may apply to text messages depending on your mobile carrier and service plan.

7. Website Information and Healthcare Information

Information collected through the public Website for general marketing or membership-inquiry purposes is handled as described in this Privacy Policy.

If an individual subsequently becomes a COS DPC patient, information associated with the individual’s healthcare may be subject to different legal requirements, including HIPAA and applicable Colorado healthcare privacy laws.

PHI maintained by COS DPC is governed by our Notice of Privacy Practices rather than solely by this Website Privacy Policy.

The fact that an individual has previously interacted with COS DPC through the public Website does not eliminate any privacy protections that may subsequently apply to information maintained in connection with that individual’s healthcare.

8. Your Privacy Choices

You may have several ways to control how information is collected or used.

Marketing Communications

You may unsubscribe from marketing email or text communications using the opt-out mechanisms provided in those communications.

Cookies and analytics

We use Google Analytics to understand how visitors use our Website. Where enabled, analytics tracking is on by default. You can turn it off using the controls below. Most browsers also allow you to block or delete cookies.

Advertising

Where enabled, we use Meta tracking across our public Website pages and for successful inquiry submissions to measure advertising effectiveness. Advertising tracking is on by default. You can turn it off using the controls below. Google, Meta, and other advertising providers also offer their own privacy controls.

How your choices work

Your choices are saved in your current browser for this Website. Opting out stops future tracking through the corresponding Website integration; it does not delete information previously collected. Clearing browser storage may reset your choices. When your browser sends a Global Privacy Control signal, we disable both analytics and advertising tracking.

9. Colorado Privacy Rights

Colorado residents may have certain rights regarding their personal information under applicable Colorado law.

Depending on the law applicable to COS DPC and the information involved, these rights may include the ability to request access to, correction of, or deletion of certain personal information, or to exercise certain choices regarding its use.

Certain information and entities may be exempt from some privacy-law requirements, including information regulated under healthcare privacy laws.

To submit a privacy request, contact us at legal@cosdpc.com.

We may need to verify your identity before fulfilling a request. We will respond to valid requests as required by applicable law.

Nothing in this section is intended to provide rights beyond those required by applicable law.

10. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including responding to inquiries, maintaining appropriate business records, managing relationships, conducting permitted marketing activities, complying with legal and regulatory requirements, resolving disputes, and enforcing our agreements.

Retention periods may vary depending on the nature of the information, the purpose for which it was collected, and applicable legal requirements.

Information subject to healthcare-specific retention requirements may be retained according to separate legal, regulatory, and professional requirements.

11. Data Security

COS DPC uses reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no website, electronic communication, transmission method, or information-storage system can be guaranteed to be completely secure. You should use appropriate care when transmitting information electronically.

Please do not transmit sensitive medical or health information through general Website forms.

12. Children’s Privacy

The public Website is intended for general informational and marketing purposes and is not directed to children under 13.

We do not knowingly use the public Website to solicit personal information directly from children under 13 without appropriate authorization.

Parents or legal guardians who believe a child has submitted personal information through the public Website may contact us at legal@cosdpc.com.

This section does not limit COS DPC’s ability to provide healthcare services to minors or to maintain information relating to pediatric patients in accordance with applicable healthcare and privacy laws.

13. Third-Party Websites and Services

The Website may contain links to third-party websites, platforms, or services.

When you leave the COS DPC Website or interact directly with a third-party service, that third party’s privacy practices may apply. COS DPC is not responsible for the privacy practices of third-party websites or services that we do not control.

We encourage you to review the privacy policies of third-party services you use.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, services, or legal requirements.

When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy. Material changes may be communicated through additional means when appropriate or required by law.

Your continued use of the Website following an update is subject to the Privacy Policy then in effect.

15. Contact Us

If you have questions about this Privacy Policy or our privacy practices, or would like to submit a privacy-related request, please contact:

Colorado Springs Direct Primary Care, LLC
Colorado Springs, Colorado
Email: legal@cosdpc.com

For questions regarding the use or disclosure of protected health information associated with your healthcare, please refer to the Colorado Springs Direct Primary Care, LLC Notice of Privacy Practices.