Colorado Regulates Your Menu, Not Just Your Ads
Most states regulate what a cannabis retailer may say in an advertisement. Colorado went further and wrote rules about the shopping experience itself — what a price may appear next to, what a customer has to acknowledge before an order is accepted, and what a delivery screen may show. Those are build requirements, not marketing guidance.
Book a DemoRule 3-615(F)(2)
The price rule that breaks the standard marketplace pattern
Colorado forbids an online cannabis menu from showing a price until the shopper has picked a specific store. 1 CCR 212-3, Rule 3-615(F)(2) puts it directly: "For a Regulated Marijuana Store that utilizes an online platform provider: (a) The online platform provider must require that the patient or consumer choose a Regulated Marijuana Store before displaying the price of Regulated Marijuana to the patient or consumer; and (b) The Regulated Marijuana Store must receive verification that there has not already been a delivery of Regulated Marijuana to that private residence through the online platform provider that same business day."
Read that as two obligations landing on the platform layer rather than on the marketing team. First, a store-selection gate that has to sit in front of price. Second, a same-address, same-day delivery verification check the store must receive before fulfilling.
The first one outlaws the pattern almost every online menu is built around: browse everything, compare prices across stores, then decide where to buy. In Colorado the order is reversed. The shopper commits to a store, and only then does the catalog become a priced catalog. That is not a setting you toggle on a menu widget designed for the other forty-nine states — it changes routing, caching, what a category page renders before selection, and what a crawler is even shown.
The unresolved part, stated plainly
The rule speaks to a store "that utilizes an online platform provider." Separately, Rule 1-115 defines advertising as "the act of providing consideration for the publication" of a communication, and whether a licensee's own website is paid publication under that definition is not something MED has addressed. We are not going to tell you it is settled. Build so the store-selection gate is configurable, and let your counsel decide where your site sits.
Rule 6-105(K)(1)
The disclosure gate every Colorado online order passes through
Colorado requires a specific, logged step inside the order flow. Rule 6-105(K)(1): "Online orders must include the customer's name and date of birth... Prior to accepting the order, the store must provide and the customer must acknowledge receipt of: (i) A digital copy of the pregnancy warning required in Rule 6-115; and (ii) If accepting an order for Retail Marijuana Concentrate... the educational resource required in Rule 6-110(C.5). Licensees must maintain Standard Operating Procedures documenting their compliance."
Three things follow from that sentence. The order has to capture name and date of birth. The customer has to actively acknowledge the pregnancy warning, and the concentrate educational resource when a concentrate is in the order — conditional on cart contents, not a static footer. And the acknowledgment has to be documented well enough to stand behind in an SOP.
"Displayed a notice" is not the standard here. Acknowledged receipt is. That means a recorded event tied to the order, which is a checkout build requirement and a compliance recordkeeping one at the same time. Rule 6-105(K)(2) then requires the customer to be physically present on the licensed premises to take possession of retail marijuana.
The counterintuitive part
What Colorado does not require, and why that is the trap
Three things people assume about Colorado are wrong, and each one matters for how you build.
There is no statutory website age gate. A full-text search of the current rules for "age affirmation," "age gate," and "age screen" returns nothing. The mandatory web-side control in Colorado is the in-cart acknowledged disclosure under 6-105(K)(1), not a doorway screen. So nothing in the statute stands between a minor and your menu — the platform does. That is an argument for shipping a real one by default rather than treating it as optional because the rule book does not name it.
There is no banner ad ban. The statute at C.R.S. §44-10-203(3)(a)(IV) authorizes MED to prohibit banner ads on mass-market websites, but MED never adopted it, and the word "banner" appears zero times in 1 CCR 212-3. Plenty of secondary marketing guides state the ban as fact. It is not in the rules.
And there is no restriction on the word "dispensary" in Colorado. Zero hits in the rules. Operators who have worked in other states sometimes carry that assumption across the state line; it does not apply here.
One labeling rule is easy to misfile as advertising: Rule 3-1015(B)(8) says licensees "shall not use the word(s) 'candy' and/or 'candies'" on a container label or marketing layer, unless the business's registered Identity Statement contains it. That is a labeling rule. We call it out because it gets quoted as a site-wide advertising restriction, and it is not one.
Rule 3-705(B)
The concentrate warning your category pages have to carry
Concentrate advertising in Colorado must carry a Division-determined overconsumption notice. MED published four required warning statements, covering psychotic symptoms, mental health problems, Cannabis Hyperemesis Syndrome, and cannabis use disorder or dependence. Where a concentrate or vape category page or a promotion constitutes advertising, that notice has to appear verbatim.
Verbatim is the operative word, and it is why this belongs in the platform rather than in a copy deck. A required statement that has to appear exactly, on every page in a category, and change everywhere at once when the Division updates it, is a template-level field. Handled in the page builder, it is one edit. Handled by hand, it is a list of pages someone forgot.
The rest of Colorado's advertising rules shape the surrounding copy. No deceptive or misleading advertising (3-705(A)). No claiming products are safe because they are state-regulated (3-725) or because they were tested (3-730). No content targeting anyone under 21, including cartoon characters (3-740(B)). Location-based device marketing requires an installed app owned by a user 21 or older with a permanent, easy opt-out (3-745). No outdoor sign within 500 feet of a school, place of worship, or public playground (3-735). No unsolicited pop-up advertising on the internet at all, under Rule 3-750. And under Rule 3-720(B), television, radio, print and internet advertising is permitted only where at least 71.6 percent of the audience is reasonably expected to be at least 21.
Permits and the tracking rule
Delivery is legal in Colorado and barely deployed
Colorado allows delivery, but through a narrow permit path. A delivery permit is required and the local jurisdiction must have opted in. Deliveries go to private residences only. None between midnight and 8 a.m., though orders may be accepted around the clock. One delivery per consumer and one per residence per business day — the same constraint the verification check in 3-615(F)(2)(b) exists to enforce. A $1.00 per-delivery municipal surcharge applies, and EBT is prohibited.
The scale is the part operators underestimate. As of September 1, 2026, MED lists 10 retail and 3 medical delivery permits statewide. Thirteen. Delivery is real in Colorado and it is almost nowhere.
If you do hold a permit, Rule 3-615(E) removes the feature customers expect most. The vehicle must carry real-time GPS, but "The real-time location of the Delivery Motor Vehicle shall not be displayed to any patients or consumers." No live tracking map. Vehicles also carry no external markings identifying them as cannabis delivery. Status communication in Colorado is a state timeline, not a moving dot.
Permit and opt-in
A delivery permit is required and the local jurisdiction must have opted in.
Residences only
Private residences only, with no deliveries between midnight and 8 a.m.
One per day
One delivery per consumer and one per residence per business day, verified before fulfillment.
Surcharge and payment
A $1.00 per-delivery municipal surcharge applies, and EBT is prohibited.
No live map
Real-time vehicle location may not be displayed to patients or consumers.
Unmarked vehicles
Delivery vehicles carry no external markings identifying them as cannabis delivery.
The competitive picture
A contracting market changes what organic search is worth
As of September 1, 2026, MED lists 654 retail marijuana stores and 271 medical stores. The direction is down: MED's own 2025 Regulatory and Enforcement Update, published in February 2026, cites declining license numbers, and state sales fell from a 2021 peak of $2.23B to $1.32B in CY2025.
A shrinking market rewards different behavior than a growing one. There is no wave of new demand to catch, so share comes from stores that close and from shoppers who switch. Both of those get decided at the moment someone searches. Paid channels are largely closed to cannabis, which leaves the pages you own doing the work — real product, category and per-store pages that a search engine can read, rather than a menu embedded from somewhere else. Our cannabis SEO page covers the mechanics, and cannabis ecommerce software walks through what to evaluate.
The Colorado wrinkle is that the price gate makes this harder to get right than elsewhere. A store-selection requirement in front of price interacts directly with what a crawler sees on a category page. It is solvable, but it is architecture, not a plugin.
Colorado retailers on Buddy
More than 300 cannabis retail websites run on Buddy, rated 4.9 out of 5, with a typical storefront live in about 24 hours once the POS connection is in place. We are not publishing a Colorado-specific store count or client names until those numbers and permissions are confirmed.
More on how this works: Buddy for retailers, cannabis ecommerce software, compliance, cannabis SEO and the page builder.
FAQ
Colorado questions, answered.
Can a Colorado online menu show prices before the shopper picks a store?
No. Rule 3-615(F)(2)(a) of 1 CCR 212-3 requires that an online platform provider make the patient or consumer choose a Regulated Marijuana Store before the price of regulated marijuana is displayed. That reverses the usual browse-and-compare pattern: store selection comes first, priced catalog second. It is a build requirement rather than a marketing preference, so confirm with your counsel how it applies to your specific setup.
Does Colorado require a website age gate?
No. A full-text search of the current rules for "age affirmation," "age gate," and "age screen" returns nothing. The mandatory web-side control is the acknowledged in-cart disclosure under Rule 6-105(K)(1), not a doorway screen. That is exactly why the platform matters here: no statute stands between a minor and the menu, so whatever protection exists is the one your storefront ships with.
What has to happen before a Colorado store accepts an online order?
Under Rule 6-105(K)(1) the order must include the customer's name and date of birth, and before accepting it the store must provide, and the customer must acknowledge receipt of, a digital copy of the pregnancy warning required in Rule 6-115, plus the Rule 6-110(C.5) educational resource when the order includes retail marijuana concentrate. Licensees must maintain Standard Operating Procedures documenting compliance. Rule 6-105(K)(2) requires the customer to be physically present on the licensed premises to take possession of retail marijuana.
Does Colorado ban banner ads on websites?
No. The statute at C.R.S. §44-10-203(3)(a)(IV) authorizes the Marijuana Enforcement Division to prohibit banner advertising on mass-market websites, but MED never adopted that prohibition, and the word "banner" does not appear anywhere in 1 CCR 212-3. Several secondary marketing guides report the ban as current law. What does apply is Rule 3-750, which prohibits unsolicited pop-up advertising on the internet.
Can Colorado customers track their delivery on a live map?
No. Rule 3-615(E) requires the delivery vehicle to carry real-time GPS but states that the real-time location of the delivery motor vehicle shall not be displayed to any patients or consumers. Vehicles also carry no external markings identifying them as cannabis delivery. Colorado delivery is also small in practice: as of September 1, 2026 MED lists 10 retail and 3 medical delivery permits statewide, and delivery requires a permit plus local opt-in.
What warning do concentrate pages need to carry in Colorado?
Rule 3-705(B) requires concentrate advertising to carry a Division-determined overconsumption notice, and MED published four required warning statements covering psychotic symptoms, mental health problems, Cannabis Hyperemesis Syndrome, and cannabis use disorder or dependence. Where a concentrate or vape category page or promotion constitutes advertising, the notice has to appear verbatim, which makes it a template field rather than page-by-page copy.
See the Colorado rules running in a real storefront.
Bring your POS and one store's menu. We will walk the store-selection gate in front of price, the acknowledged in-cart disclosure and its record, the concentrate notice as a template field, and what your category pages look like in search. This page is informational and is not legal advice; the Colorado Marijuana Enforcement Division (MED), a division of the Department of Revenue, is the regulator, and your counsel should confirm anything you act on.
Book a Demo