Privacy Policy

Introduction

Colorado River Analytics, LLC ("CRA," "we," "our," or "us") has prepared this Privacy Policy to explain how we collect, use, disclose, and protect information about you, as well as to outline the rights you may have and how to exercise them.

CRA is committed to safeguarding your privacy and the security of your personal information. This Privacy Policy applies to individuals who interact with CRA through our offices, websites, products, and services (collectively, the "Services"), except where specifically excluded.

By accessing or using our Services, you agree to the collection, use, and disclosure of information as described in this Privacy Policy and acknowledge that CRA may update this Policy from time to time.

Privacy Policy Scope

This Privacy Policy applies to the personal information of users of our Services, subject to the exclusions below.

This Policy does not apply to:

• Information collected from CRA employees, contractors, or job applicants (covered under separate internal policies).
• Information processed by CRA solely in its capacity as a service provider or subcontractor for a client engagement. In those cases, the client organization's privacy policy governs.
• Practices of unaffiliated third parties, including websites you may access via links from CRA's site. CRA is not responsible for the privacy practices of such third parties.

Types of Personal Information We Collect

Personal Information means any data that identifies, relates to, describes, or could reasonably be linked to an individual or household. Depending on how you engage with CRA, the categories of personal information we may collect include:

• Identifiers: name, contact details (mailing address, phone number, email address), and login credentials.
• Business Information: company name, role, and service preferences.
• Usage and Technical Data: IP address, browser and device type, operating system, system settings, browsing activity, and interactions with CRA's Services.
• Communications and Preferences: messages you send us, feedback, survey responses, and your choices regarding marketing communications.

CRA does not collect or process Sensitive Personal Information (such as precise geolocation, biometric data, or health records) in connection with the Services covered by this Privacy Policy unless required by law or provided voluntarily with explicit consent.

How We Collect Information

How We Use Your Information

CRA may use the information we collect for business and commercial purposes, including to:

• Provide and improve our Services.
• Respond to inquiries and offer customer support.
• Communicate with you about Services, updates, and opportunities.
• Personalize your experience and tailor content.
• Monitor and analyze use of our website and Services for security and performance.
• Protect CRA's legal rights and comply with applicable laws.
• Detect, investigate, and prevent fraud, misuse, or security incidents.
• Where permitted, send marketing communications (subject to opt-out rights).

How We Disclose Your Information

We may share your personal information with:

• Service Providers and Vendors: To support IT, hosting, analytics, marketing, and delivery of CRA Services, under confidentiality and data protection obligations.
• Affiliates and Subcontractors: Where needed to provide Services or fulfill Microsoft-aligned engagements.
• Legal and Regulatory Authorities: To comply with law, legal processes, or enforceable governmental requests.
• Business Transactions: In connection with a merger, acquisition, sale, or transfer of assets.

CRA does not "sell" or "share" personal information for cross-context behavioral advertising as defined under the California Consumer Privacy Act (CCPA).

Storage, Retention, and Security of Information

Cookies and Similar Technologies

CRA's website uses cookies and related technologies to enhance functionality, analyze usage patterns, and improve your experience.

Your Choices: You can configure your browser to block or delete cookies. If you disable cookies, some features of our Services may not function properly.

CRA's websites are not currently configured to respond to "Do Not Track" signals.

Children's Privacy

CRA's Services are intended for use by adults. We do not knowingly collect personal information from individuals under the age of 16. If we learn that a child has provided information to CRA without parental consent, we will take steps to delete such information.

Privacy Rights for California Residents

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA) or other applicable laws, including the right to:

• Access the personal information CRA holds about you.
• Request correction of inaccurate data.
• Request deletion of your personal information.
• Obtain details regarding how your data is collected, used, and disclosed.
• Opt out of certain uses of your data (subject to legal exceptions).
• Be free from unlawful discrimination when exercising your privacy rights.

To exercise your rights, you may contact us as described below. CRA may need to verify your identity before fulfilling your request.

Updates to This Privacy Policy

CRA may update this Privacy Policy periodically. The "Last Updated" date at the top of this page reflects the date of the latest revision. Any changes will take effect when posted on this page. Material changes will be communicated where required by law.

Contact Us

If you have questions about this Privacy Policy or CRA's privacy practices, please contact us: