Privacy Notice for Residents of California

---

3 Ways to Contact Us About Your Privacy

1. Fill out form
2. Email us
3. Call us: 1-800-635-4772(MELISSA) ext. 4

---

Updated November 2023

1. CCPA Notice – Personal Information of California Residents

The California Consumer Protection Act of 2018 (“CCPA”) was enacted to enhance privacy rights for residents of the state of California. In November 2020, California voters passed Proposition 24, also known as the California Privacy Rights Act (“CPRA”), which amends and expands the CCPA. The new CCPA provisions, with the CPRA amendments, became effective on January 1, 2023. For ease of reference, these California consumer privacy laws collectively will be referred to herein as “CCPA.”

Under CCPA, a resident of California (“Consumer”) has certain rights related to their personal information. “Personal information” means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information does not include publicly available information or lawfully obtained, truthful information that is a matter of public concern. (Cal. Civ. Code § 1798.140(v)(2).)

This Privacy Notice for California residents supplements the information in Melissa’s Privacy Policy and describes how Melissa processes personal data we collect about individuals who resides in the state of California.

2. Your Consumer Rights Under CCPA

As a California resident, you may exercise the following rights in relation to the personal information about you that we have collected, subject to certain limitations and exceptions:

1. The right to know what personal information has been collected, disclosed, shared, or sold. (Cal. Civ. Code § 1798.110, 1798.115.)

⟩ You have the right to request the following information from the past 12 months, upon verification of your identity:

• The categories of personal information we have collected about you;
• The sources of that personal information, identified by category;
• Our business or commercial purposes for collecting or, if applicable, sharing or selling your personal information;
• The categories of third parties to whom the personal information was disclosed; and
• The specific pieces of personal information we have collected about you.
2. The right to request deletion of personal information. (Cal. Civ. Code § 1798.105.)

⟩ You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions.

3. The right to opt out of the sale or sharing of personal information. (Cal. Civ. Code § 1798.120.)

⟩ You have the right to direct us not to sell or share the personal information we have collected about you to third parties.

4. The right to correct inaccurate personal information. (Cal. Civ. Code § 1798.106.)

⟩ If we maintain inaccurate personal information about you, you have the right to request that we correct that inaccurate personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.

5. The right to limit use and disclosure of sensitive personal information. (Cal. Civ. Code § 1798.121.)

⟩ You have the right to request that we limit our use of your sensitive personal information to the use which is necessary to provide the services, and for certain business purposes

6. The right to non-discrimination and non-retaliation for exercising rights conferred by CCPA. (Cal. Civ. Code § 1798.125.)

⟩ By exercising your rights under CCPA, you have the right to not receive discriminatory treatment – for example, we cannot deny goods or services to you, nor can we charge you different prices for goods or services.

3. Personal Information We Collect

The table below summarizes:

1. Categories of Personal Information as defined per Ca. Civ. Code § 1798.140 (v)(1) & § 1798.80(e);
2. The kinds of Personal Information that we have collected within the last twelve (12) months from or about consumers within each category;
3. The sources of that Personal Information (organized by category); and
4. The business or commercial purposes for which we collect the Personal Information.

Please note that “Personal Information,” as defined by CCPA, does not include publicly available information that is available from federal, state, or local government records, or information that a business has a reasonable basis to believe is lawfully made available to the general public by the consumer or from widely distributed media, or information made available by a person to whom the consumer has disclosed the information if the consumer has not restricted the information to a specific audience. (Cal. Civ. Code § 1798.140(v)(2).) We are including “publicly available information” in the chart below where it is a source of personal information just for clarity.

The data we collect directly from you as a website user, application user, or business customer is used specifically for business-related purposes and is never integrated into or used for unrelated purposes such as our products or services.

Category under CCPA	Information We Collect Within Category(ies)	Sources of that Personal Information (by category)	Purpose of Collection
Identifiers* Personal information as described in Cal. Civ. Code § 1798.80(e)* Characteristics of protected classifications under California or federal law*	First & last names, maiden name, and/or alias Home address and billing address Username or user ID Internet Protocol (IP) address Email address Account name Social security number Title & employment information Age & date of birth Telephone number Driver’s license number Payment information, such as bank account or credit card information for customers	Information you provide Information collected passively via cookies and similar technology Data licensors/brokers Government entities Social networks Publicly available information	To verify the accuracy of our data To ensure fraud prevention To set up accounts for site usage, transactions, and subscriptions To verify your identity for a verifiable legal request To provide and improve our Melissa Lookups and other commercial products and services To communicate with you and to provide customer service To process your requests, purchases, and other communications about our website, mobile app, and online services For marketing of our products and services For product development and research
Commercial information	Property records	Data licensors/brokers Government entities Publicly available information	To verify the accuracy of our data To provide and improve our Melissa Lookups and other commercial products and services For product development and research
Biometric information* Sensory data*	Audio recordings taken during contact with you for customer support	Information directly collected from you	For customer service purposes To ensure legal and compliance obligations
Internet or other similar electronic network activity	Information regarding your interaction with our website, such as when you visited the website, how long you stayed, and the device from which you accessed the website (we do not save or store customer-supplied data)	Information collected passively via cookies, web beacons, or similar technology	To improve search results and website/app performance To perform website analysis To prevent fraud
Geolocation data	IP address of the devise you use to access our website and mobile applications	Information directly collected from you Information collected passively via cookies, web beacons and similar technology.	To improve search results and website/app performance To prevent fraud
Professional or employment-related information	Information regarding place of employment, position, salary Professional licenses or permits	Information you provide Data licensors/brokers Government entities Publicly available information	To verify the accuracy of our data To provide and improve our Melissa Lookups and other commercial products and services
Non-public education information (per the Family Educational Rights and Privacy Act)	We do not collect this category of information	Not applicable	Not applicable
Inferences drawn from other personal information	We do not collect this category of information	Not applicable	Not applicable

* Where multiple CCPA categories of information overlap, we have grouped them together here.

4. Personal Information We Sell, Share, or Disclose to Third Parties

The CCPA distinguishes between personal information that is disclosed for a business purpose (i.e., for our internal operating purposes: maintaining or servicing accounts, verifying customer information, processing payments) and personal information that is sold or shared for a commercial purpose (i.e., inducing a business or individual to buy or subscribe to our products and services). Melissa’s practices relating to the sale, sharing, or disclosure of personal information, for both business and commercial purposes, are described below.

Note: Our website and all products and services are intended for use by individuals over 18 years of age. We do not collect, sell, share, or disclose any information about anyone under 18 years of age.

Selling or Sharing to Third Parties

Melissa does not sell or share personal information to third parties that you provide to us when using this website or in relation to your use of the Services.

Separate from your use of our website and Services, we do share and sell personal information that we have collected through third-party licenses, data brokers, government entities, or publicly available sources. We do this to provide useful products to our customers that are typically used for address validation, identity verification, or for marketing and CRM (customer relationship management) purposes. Within the past twelve (12) months, we have sold or shared the following categories of information:

Category under CCPA	Personal Information We Have Sold or Shared	Categories of Third Parties to Whom We Have Sold or Shared Personal Information
Identifiers Personal information as described in Cal. Civ. Code § 1798.80(e) Characteristics of protected classifications under California or federal law	First & last names, maiden name, and/or alias Home address Username or user ID Email address Social security number Title & employment information Age & date of birth Telephone number Driver’s license number	Melissa subscribers and customers
Commercial information	Property records	Melissa subscribers and customers
Professional or employment-related information Sensory data*	Information regarding place of employment, position, salary Professional licenses or permits	Melissa subscribers and customers

Disclosing to Third Parties

Within the past twelve (12) months, the only circumstances under which we have disclosed your personal information for business purposes are for the following reasons:

• For payment processing;
• For data analytics purposes; or
• If required by applicable law, regulation or legal process, including in connection with lawful requests by law enforcement, national security, or other public authorities.

5. Consumer Requests Under CCPA

A resident of California may submit a verifiable consumer request to exercise their consumer rights. If you are a resident of California and would like to submit a CCPA verifiable consumer request to Melissa, go to our Consumer Privacy webform and select the Consumer Request option(s) you would like to exercise. You can also email us, or call us at 1-800-635-4772(MELISSA) ext. 4.

In order to prevent improper or potentially fraudulent requests under CCPA, consumers are required to submit “verifiable consumer requests.” A “verifiable consumer request” means a request that is made by:

• a consumer,
• by a consumer on behalf of the consumer’s minor child,
• by a natural person or a person registered with the Secretary of State, authorized by the consumer to act on the consumer’s behalf, or
• by a person who has power of attorney or is acting as a conservator for the consumer, and
• that the business can verify, using commercially reasonable methods.

Accordingly, in order to respond to your CCPA consumer request, we must verify your identity. This will require that you provide certain personal information for validation, such as an image of your driver’s license. If we are unable to satisfactorily verify your identity, we will be unable to fulfill your consumer request in accordance with the provisions of CCPA. However, any individual, regardless of state of residence, may request to have their personal information deleted from our Melissa Lookups and other database products. If you would simply like to request deletion of your information, select “Right to Delete” Consumer Privacy webform.