State Law Privacy Notice

How to Contact Us About Your Privacy

1. Fill out our Consumer Privacy Request form
2. Call us at 1-800-635-4772 (MELISSA), extension 4

Updated August 2025

I. About Melissa’s State Law Privacy Notice

In recent years, some U.S. states have enacted consumer privacy laws that give residents of those states certain rights relating to their personal data. At present, those states include California, Colorado, Connecticut, Virginia, and Utah. Residents of California should refer to the Privacy Notice for Residents of California for the specifics of that state law. This notice is intended to inform residents of the other specified states regarding their rights under the following data privacy laws:

• Virginia: The Virginia Consumer Data Protection Act (“VCDPA”), effective January 1, 2023.
• Colorado: The Colorado Privacy Act (“CPA”), effective July 1, 2023.
• Connecticut: The Connecticut Data Privacy Act (“CTDPA”), effective July 1, 2023.
• Utah: The Utah Consumer Privacy Act (“UCPA”), effective December 31, 2023.
• Texas: The Texas Data Privacy and Security Act (“TDPSA”), effective July 1, 2024.
• Oregon: The Oregon Consumer Privacy Act (“OCPA”), effective July 1, 2024.
• Montana: Montana Consumer Data Privacy Act (“MTCDPA”), effective October 1, 2024.
• Delaware: Delaware Personal Data Privacy Act (“DPDPA”), effective January 1, 2025.
• Iowa: Iowa Act Relating to Consumer Data Protection (“ICDPA”), January 1, 2025.
• Nebraska: Nebraska Data Privacy Act (“NEDPA”), January 1, 2025.
• New Hampshire: New Hampshire Data Privacy Act (“NHDPA”) effective January 1, 2025.
• New Jersey: New Jersey Data Privacy Act (“NJDPA”), January 15, 2025.
• Tennessee: Tennessee Information Protection Act (“TIPA”), effective July 1, 2025.

Residents of these states may invoke their state-specific consumer rights by submitting a request to a “controller” of “personal data.” For purposes of this notice, the following general definitions are relevant (please refer to each state law for the specific wording of each definition and any other defined terms):

A "Controller" is a person (or business) that determines the purpose for and means of processing personal data.

"Personal data" is any information that is linked or reasonably linkable to an identified or identifiable natural person. "Personal data" does not include de-identified data or publicly available information.

"Publicly available information" means information that is lawfully made available through federal, state, or local government records, and information that a controller has a reasonable basis to believe is lawfully made available to the general public.

2. Consumer Personal Data Rights

As a resident of one of the states identified above, you may invoke your consumer rights by submitting a consumer request to Melissa specifying the consumer rights you wish to invoke.

Your consumer rights are:

Right to Know and Access
You have the right to confirm whether or not we are processing your personal data and to access that personal data.

Right to Correct Inaccuracies
You have the right to correct inaccuracies in your personal data, based on the nature of the personal data and our purposes for processing that personal data.

Right to Delete
You have the right to delete personal data provided by or obtained about you.

Right to Data Portability
You have the right to obtain a copy of the personal data that your previously provided to us in a portable and readily usable format, if technically possible.

Right to Opt-Out
You have the right to opt-out of the processing of your personal information for purposes of (1) targeted advertising, (2) the sale of personal data, or (3) profiling in furtherance of decisions that produce legal or similarly significant effects on you. We will also collect opt-in or opt-out consent, depending on the state in which you reside.

For more information about the categories of personal data Melissa collects, the purpose for collecting that data, the categories of personal data we share with third parties, and the categories of third parties with whom we share the data, please see our Melissa Privacy Policy.

3. Consumer Requests

If you are a resident of one of the states identified on this page and would like to submit a consumer request to Melissa, go to our Consumer Privacy Request Form and select the Consumer Request option(s) you would like to exercise. You can also email us at ConsumerRequest@melissa.com or call us at 1-800-635-4772 (MELISSA) ext. 4.

In order to prevent improper or potentially fraudulent requests, you are required to submit an “authenticated consumer request.” This means that we must verify your identity by requesting personal information for validation, such as an image of your driver’s license. If we are unable to authenticate your request, we are not required to comply with the request and we may request that you provide additional information.

 However, any individual, regardless of state of residence, may request to have their personal information deleted from our Melissa Lookups and other database products, and to opt out of the sale or sharing of their personal information. If you would simply like to request deletion of your information, select “Right to Delete” and/or “Right to Opt-Out of Sale” in the Consumer Privacy Request Form.

If we decline to take action regarding your request, you may appeal such decision within a reasonable period of time by emailing ConsumerRequest@melissa.com.