Colorado PERA logo
Member Login/Registration

Privacy and Security Notice

Effective as of September 17, 2020

Last Updated June 15, 2026

Introduction

This Privacy Policy is designed to assist you in understanding how Colorado PERA (“Colorado PERA,” “we,” “our,” or “us”) collects, uses, shares, and safeguards your information. This Privacy Policy applies to individuals who access our websites and our mobile application (collectively, “Sites”) and any of our online services (collectively, “Services”).

From time to time, we may change this Privacy Policy. If we do, we will post an amended version on this webpage. Please review this Privacy Policy periodically.

This Privacy Policy covers the following topics:

  1. Personal Data We Collect
  2. How We Use Your Personal Data
  3. How We Share Your Personal Data
  4. Cookies and Other Tracking Technologies
  5. “Do Not Track” Signals
  6. Security
  7. Third Party Links
  8. Children’s Privacy
  9. Your Privacy Choices
  10. How to Contact Us

1. Personal Data We Collect

We collect personal data from you through your use of the Sites and Services. Personal data is information that is linked or reasonably linkable to an identified or identifiable individual. We collect the following types of personal data:

Personal Data You Provide

Depending on how you interact with our Sites and Services, we will collect the following personal data that you voluntarily provide to us for the following purposes:

  • Create a Member Account. If you create an account, you may provide us with your first and last name to verify your identity, email address, phone number, username, password, beneficiary information, postal address, birthdate, and Social Security number. If you chose to complete online forms through your account – such as a request to change your beneficiary, PERACare Enrollment, or a Retirement Application – you will be asked to provide other types of personal information.
  • Create an Employer or Vendor Account. If you create an account, you may provide us with your username, password, and company information.
  • Member and Vendor Login. When you sign into your account, you will provide us with your username and password.
  • Email. During your visit to the Sites, you may send an email to us. Your email address and the contents of your message will be collected. The information collected is not limited to text characters and may include audio, video, and graphic information formats included in the message. Although the system regards all messages it receives from users as confidential, please be advised that because the Internet is a public domain, messages sent to PERA outside of a PERA secured page could be intercepted or accessed by a third party.
  • Contact Us. If you contact us, and depending on your request, you may provide us with your name, Social Security number, birthdate, email address, postal address, and phone number.
  • Live Webinars. If you sign up for a live webinar, you will provide us with your first and last name, email address, city, and company information. You may also provide your birthdate and other employment information. Zoom provides our live webinar feature. Zoom may collect, record, and store the information you provide in your registration. Please review Zoom’s privacy policy here.
  • Blog and Social Media. If you choose to engage with our blog or social media pages by posting a comment or sharing a post, we may collect the information that you post as well as your name and email address. Please note that your comment will also be visible to the public, so you should never share information that you would like kept private. You can learn more about PERA’s social media guidelines on our Social Media Policies page.
  • Careers. If you apply for a job with us, you will provide us with your first and last name, postal address, email address, phone number, education information, employment history, and any other information you choose to include. Paycom provides our online career application feature. Paycom may collect, record, and store the information you provide in your registration. Please review Paycom’s privacy policy here.

Personal Data as You Navigate Our Sites

We automatically collect certain personal data through your use of our Sites and our use of cookies and other tracking technologies, such as the following:

  • Usage Information. For example, the pages on the Sites you access, the frequency of access, and what you click on while on the Sites.
  • Device Information. For example, hardware model, operating system, application version number, and browser.
  • Mobile Device Information. Aggregated information about whether the Sites are accessed via a mobile device or tablet, the device type, and the carrier.
  • Location Information. We may collect source location information from our web application firewall.

For more information on our cookie usage see our “Cookies and Other Tracking Technologies” section below.

Personal Data We Collect About You from Other Sources

In some cases, we may receive personal data about you from other sources. This includes state governmental entities and operating systems and platforms.

2. How We Use Your Personal Data

In addition to the purposes stated above, we may use all the personal data we collect in accordance with applicable law such as to:

  • Maintain and improve our Sites and Services;
  • Protect the security and integrity of our Sites and Services;
  • Investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or violations of our Terms of Use, and to otherwise fulfill our legal obligations;
  • Monitor compliance with and enforce this Privacy Policy and any applicable agreements and policies;
  • Defend our legal rights and the rights of others;
  • Fulfill any other purposes for which you provide it;
  • For any purpose that is reasonably necessary to or compatible with the original purpose for which we collected the personal data as disclosed to you; and
  • Comply with applicable law.

3. How We Share Your Personal Data

We may share the personal data that we collect about you in the following ways:

  • With your consent or at your direction, such as when you chose to share information or publicly post content and reviews (for example, social media or blog posts);
  • With vendors who perform data or Site-related services on our behalf (e.g., email, hosting, maintenance, backup, analysis, etc.);
  • To vendors to prepare, deploy and analyze advertising content relating to the services we provide to you;
  • To the extent that we are required to do so by law;
  • In connection with any legal proceedings or prospective legal proceedings;
  • To establish, exercise, or defend our or a third party’s legal rights, including providing information to others for the purposes of fraud prevention;
  • With any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal data where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal data;
  • With any other person or entity where you consent to the disclosure; and
  • For any other purpose disclosed by us when you provide the personal data or for any other purpose we deem necessary, including to protect the health or safety of others.

Additionally, during your visit to the Sites, you may complete a transaction, such as changing your named beneficiary. You will be entering information into PERA’s secured pages which PERA is bound to keep confidential under Colorado Revised Statute § 24-51-213(1). The information volunteered by you in completing the transaction will be shared as necessary to perform the statutory duties of PERA, to operate a program authorized by law, or as authorized by state or federal statute or regulation. PERA will need to share your information as necessary with PERA’s advisers, third-party administrators, and other agents. In each case, those parties are bound by confidentiality agreements with PERA. Please refer to PERA’s HIPAA Privacy Notice for information regarding how PERA treats personal health information governed by the Health Insurance Portability and Accountability Act.

You authorize your wireless operator (AT&T, Sprint, T-Mobile, US Cellular, Verizon, or any other branded wireless operator) to disclose your mobile number, name, address, email, network status, customer type, customer role, billing type, mobile device identifiers (IMSI and IMEI) and other subscriber status and device details, if available, to our third party service provider, solely to verify your identity and prevent fraud for the duration of the business relationship.

PERA does not disclose personal data collected from the Sites to third parties for the third parties’ direct marketing purposes.

4. Cookies and Other Tracking Technologies

How We Use Cookies

Like many other companies, we use cookies and other tracking technologies (collectively, “Cookies”). Cookies are small files of information that are stored by your web browser software on your computer hard drive, mobile or other devices (e.g., smartphones or tablets).

We use Cookies to:

  • Estimate audience size and usage patterns;
  • Understand and save your preferences for future visits, allowing us to customize the Sites and Services to your individual needs;
  • Recognize when you return to the Sites.

We set some Cookies ourselves, while separate entities set other Cookies. We use Cookies other entities set to provide us with useful information, to help us improve our Sites and Services, to conduct advertising, and to analyze the effectiveness of advertising.

How You Can Opt Out of Cookies

You can block Cookies by changing your Internet browser settings to refuse all or some Cookies. If you choose to block all Cookies (including essential Cookies) you may not be able to access all or parts of the Site.

You can find out more about Cookies and how to manage them by visiting www.AboutCookies.org or www.allaboutcookies.org.

Google Analytics

We use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses Cookies or other tracking technologies to help us analyze how users interact with the Sites and Services, compile reports on their activity, and provide other services related to their activity and usage. The technologies used by Google may collect information such as your IP address, time of visit, whether you are a returning visitor, and any referring website. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google’s privacy policies. Learn more about Google’s partner services and to learn how to opt out of tracking of analytics by Google.

5. “Do Not Track” Signals

There is currently no industry agreed upon response to a Do Not Track signal. At this time, our Sites do not respond differently based on a user’s Do Not Track signal.

6. Security

To help ensure that your information is protected and only available to you, PERA uses User IDs and passwords, multifactor authentication, Secure Sockets Layer (SSL), and third-party certification.

SSL Protocol provides a method that encrypts information passed between the PERA server(s) and your browser to prevent others from accessing your information. This method uses a “challenge handshake” (or other such secure handshake authentication) and public/private key encryption on both sides (the server and the client) to help ensure that only your browser can translate the information being sent by PERA.

Third-party certification refers to a neutral third-party who has verified the authenticity of a Website and has issued the owner(s) of that Website a unique certificate. PERA’s Website has been certified by Entrust, a certificate provider.

Although we maintain these commercially reasonable security measures to protect the personal data we collect and store from loss, misuse, destruction, or unauthorized access, no security measure or modality of data transmission over the Internet is 100% secure. As such, we cannot guarantee absolute security.

7. Third Party Links

The Sites may contain links to other websites for your information and convenience. Such third-party websites may include social media platforms. You can learn more about our social media guidelines on our Social Media Policies page. We have no control over the privacy practices or the content of such other websites. Please review the privacy information provided by these sites. The responsibility for the content and accuracy of information on sites accessed by linking from our Sites rests with the entities providing the information. This includes any responsibility for updating information upon which visitors may rely. The inclusion of links from our Sites to others does not imply any endorsement by PERA of any product, service or vendor. Any mention of products, services, or vendors is for informational purposes only.

8. Children’s Privacy

The Sites and Services are not intended for children under 13 years of age. We do not knowingly collect, use, or disclose personal data from children under 13.

9. Your Privacy Choices

PERA services rely on the accuracy of your information. If you believe any of your information in our possession is inaccurate, you can make a request by contacting us via one of the methods outlined below under the section titled “How to Contact Us.” We will require evidence of your identity before fulfilling such request.

10. How to Contact Us

To contact us for questions or concerns about our privacy policies or practices please contact us via our Contact Us page.