EU-U.S. Data Privacy Framework

Updated August 2026

1. Adherence to Data Privacy Framework Principles

Melissa Data Corporation complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, set forth by the U.S. Department of Commerce. Melissa Data Corporation has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
Melissa's Privacy Policy is available at https://www.melissa.com/privacy.

2. Right to Access, Amend or Delete Personal Information (Your Rights Under the EU GDPR and UK GDPR)

Under the EU General Data Protection Regulation (GDPR) and the UK GDPR, individual data subjects in the European Union and the United Kingdom have the right to know what personal data about them is stored in Melissa databases and to ensure that such personal data is accurate and relevant for the purposes for which Melissa collected it. Individuals may review their own personal data stored in the databases and correct, erase, or block any data that is incorrect, as permitted by applicable law and Melissa policies. Upon reasonable request and as required by the EU-U.S. DPF Principles, Melissa allows individuals access to their personal data, in order to correct or amend such data where inaccurate. Individuals may edit their personal data by logging into their account profile or by contacting Melissa Technical Support by email or phone at: ConsumerRequest@melissa.com or +1-800-635-4772 (MELISSA) option 4. In making modifications to their personal data, individuals must provide only truthful, complete, and accurate information. To request complete erasure of personal data, individuals are required to submit a written request. Melissa will endeavor to respond in a timely manner to all reasonable written requests to view, correct, amend, or delete personal data.
Melissa will offer EU and UK individuals whose personal information has been transferred to us the opportunity to choose whether the personal information it has received is to be used for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual. An individual may opt out of such uses of their personal information by contacting us at ConsumerRequest@melissa.com.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, Melissa commits to resolve complaints about our collection or use of your personal information transferred to the U.S. pursuant to the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. EU and UK individuals with inquiries or complaints should first contact Melissa at: ConsumerRequest@melissa.com. Melissa is committed to addressing all such inquiries and complaints in a timely manner, and has further committed to refer unresolved complaints to JAMS, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please visit https://www.jamsadr.com/dpf-dispute-resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you. In addition, in certain and in limited situations, individuals may invoke binding arbitration before the Data Privacy Framework Panel.

The EU-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. DPF are set forth by the U.S. Department of Commerce. The United States Federal Trade Commission (FTC) has jurisdiction over Melissa's compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.

5. Third Parties and Onward Transfers

Melissa may provide personal data to third parties that act as agents or subcontractors to perform tasks on behalf of and under specific instructions. Such third parties must agree to use personal data only for the purposes for which they have been engaged by Melissa and must contractually agree, through European Commission model clauses and/or similar agreements, to comply with the EU-U.S. DPF Principles or another mechanism permitted by applicable EU or UK data protection law for transfers and processing of personal data. Melissa also may disclose personal data for other purposes or to other third parties when an individual has consented to or requested such disclosure.
In addition, Melissa may be required to disclose an individual's personal information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements. As part of the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and its commitments under European Commission model clauses agreements, Melissa retains its liability and responsibility under the Principles for appropriate onward transfers of personal data to third parties.