State Law Privacy Notice

How to Contact Us About Your Privacy

1. Fill out our Consumer Privacy Request form
2. Call us at 1-800-635-4772 (MELISSA), extension 4

Updated January 2026

I. About Melissa’s State Law Privacy Notice

To protect your privacy, various U.S. states have enacted comprehensive consumer privacy laws that give residents specific rights regarding their personal data. This notice applies to residents of states including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Florida, Minnesota, Maryland, Indiana, Kentucky and Rhode Island. Residents of California should refer to the Privacy Notice for Residents of California for the specifics of that state law.

This notice is intended to inform residents of the other specified states regarding their rights under the following data privacy laws:

• Colorado: The Colorado Privacy Act (“CPA”).
• Connecticut: The Connecticut Data Privacy Act (“CTDPA”).
• Virginia: The Virginia Consumer Data Protection Act (“VCDPA”).
• Utah: The Utah Consumer Privacy Act (“UCPA”).
• Texas: The Texas Data Privacy and Security Act (“TDPSA”).
• Oregon: The Oregon Consumer Privacy Act (“OCPA”).
• Montana: Montana Consumer Data Privacy Act (“MTCDPA”).
• Delaware: Delaware Personal Data Privacy Act (“DPDPA”).
• Iowa: Iowa Act Relating to Consumer Data Protection (“ICDPA”).
• Nebraska: Nebraska Data Privacy Act (“NEDPA”).
• New Hampshire: New Hampshire Data Privacy Act (“NHDPA”).
• New Jersey: New Jersey Data Privacy Act (“NJDPA”).
• Tennessee: Tennessee Information Protection Act (“TIPA”).
• Florida: Florida Digital Bill of Rights (“FDBR”).
• Minnesota: Minnesota Consumer Data Privacy Act (MNCDPA”).
• Maryland: Maryland Online Data Privacy Act (“MODPA”).
• Indiana: Indiana Consumer Data Protection Act (“ICDPA”), effective January 1, 2026.
• Kentucky: Kentucky Consumer Data Protection Act (“KCDPA”), effective January 1, 2026.
• Rhode Island: Rhode Island Data Transparency and Privacy Protection Act (“RIDTPPA”), effective January 1, 2026.

Residents of these states may invoke their state-specific consumer rights by submitting a request to a “controller” of “personal data.” For purposes of this notice, the following general definitions are relevant (please refer to each state law for the specific wording of each definition and any other defined terms):

A "Controller" is a person (or business) that determines the purpose for and means of processing personal data.

"Personal data" is any information that is linked or reasonably linkable to an identified or identifiable natural person. "Personal data" does not include de-identified data or publicly available information.

"Publicly available information" means information that is lawfully made available through federal, state or local government records, and information that a controller has a reasonable basis to believe is lawfully made available to the general public.

Data Minimization and Purpose Limitation: We limit our collection of personal data to what is adequate, relevant and reasonably necessary to provide the services you have requested. In Maryland, we further restrict the processing of your information to only that which is strictly necessary for the specific product or service you interact with.

II. Consumer Personal Data Rights

As a resident of one of the states identified above, you may invoke your consumer rights by submitting a consumer request to Melissa specifying the consumer rights you wish to invoke.

Your consumer rights are:

Right to Know and Access
You have the right to confirm whether we are processing your personal data and, subject to successful identity verification, to access a copy of that data.

Right to Correct Inaccuracies
You have the right to correct inaccuracies in your personal data, based on the nature of the personal data and our purposes for processing that personal data.

Right to Delete
You have the right to delete personal data provided by or obtained about you.

Right to Data Portability
You have the right to obtain a copy of the personal data that you previously provided to us in a portable and readily usable format, if technically possible. (Indiana residents also have the right to request a representative summary of the personal data previously provided to us.)

Right to Opt-Out
You have the right to opt-out of the processing of your personal information for purposes of (1) targeted advertising, (2) the sale of personal data, or (3) profiling in furtherance of decisions that produce legal or similarly significant effects on you. We will also collect opt-in or opt-out consent, depending on the state in which you reside.

For more information about the categories of personal data Melissa collects, the purpose for collecting that data, the categories of personal data we share with third parties and the categories of third parties with whom we share the data, please see our Melissa Privacy Policy.

III. Consumer Requests

If you are a resident of one of the states identified on this page and would like to submit a consumer request to Melissa, go to our Consumer Privacy webform and select the Consumer Request option(s) you would like to exercise. You can also email us at ConsumerRequest@melissa.com or call us at 1-800-800-6245 ext. 4.

Verification and Security: To protect your information from unauthorized access and tampering, state laws and regulations require us to verify your identity.

• Proportionate Verification: Our verification process is designed to be proportionate to the risk associated with your request. For purposes of verification, we will match information you provide against our records but will not require you to create a new account or provide a government ID for simple opt-out requests. For high-risk requests (such as Right to Access), we may require further authentication to ensure legal compliance and data security.
• Identity Protection: We are legally prohibited from disclosing certain highly sensitive pieces of data in a "Right to Know" report. Instead, we will confirm the existence of that data in our systems.

Any individual, regardless of state of residence, may request to have their personal information deleted from our Melissa Lookups and other database products, and to opt out of the sale or sharing of their personal information. If you would simply like to request deletion of your information, select “Right to Delete” and/or “Right to Opt-Out of Sale” in the Consumer Privacy webform.

If we decline to take action regarding your request, you may appeal such decision within a reasonable period of time by emailing ConsumerRequest@melissa.com.