1. Who We Are

AmeriList, Inc. is a marketing services and data brokerage company based at 10 Esquire Rd, Ste 11B, New City, NY 10956. We help businesses and organizations reach customers through direct mail, email, telemarketing, digital advertising, and data services.

AmeriList is not a traditional data compiler and generally does not independently originate, compile, scrape, or aggregate consumer information directly from consumers or public websites for the purpose of creating proprietary consumer databases. Instead, AmeriList primarily acts as a broker, reseller, and marketing services provider, working with established third-party data compilers, data providers, and other authorized sources to fulfill our clients’ marketing and audience requirements. The consumer and business information made available through AmeriList is generally obtained from third-party data providers that represent that their information has been collected, compiled, or made available in accordance with applicable requirements. We register as a data broker in states that require it, including Texas and Vermont.

When we act for clients

When we process data on behalf of a client (for example, cleaning or updating a client’s own customer file), we act as that client’s service provider or processor. Requests about that data should go to the client. If you contact us, we will direct you to them where we can.

This Policy covers:

• Consumer and business data we license, sell, or process in our marketing services
• Information collected through amerilist.com and our other websites
• Business contact information of our customers, prospects, and vendors

2. Information We Collect and Its Sources

The table below lists the categories of personal information we handle, where it comes from, who receives it, and whether we have sold that category in the last 12 months.

Sources, in plain terms: national data compilers and resellers; public records and government sources such as USPS; list owners such as publishers, retailers, and nonprofits; consumer surveys; our clients; and our own website and business interactions (such as a business card at a trade show).

3. Sensitive Information and Minors

Sensitive information

Some state laws treat certain data as sensitive, such as health information, racial or ethnic origin, religion, sexual orientation, citizenship status, precise geolocation, and government ID numbers.

Some data we license may include, or be inferred to include, sensitive information, such as self-reported health interests or ethnicity segments. Where state law requires consent to process sensitive data, we rely on our data suppliers to have obtained that consent, and we honor requests to limit its use.

Maryland residents. We do not sell sensitive data about Maryland residents, and we do not process it except where strictly necessary to provide a service or as permitted by Maryland law.

We never sell Social Security numbers, driver’s license numbers, financial account numbers, or account login credentials.

Minors and student data

We do not knowingly collect or sell personal information of children under 13. We do not knowingly sell personal information of minors under the ages listed below, or process it for targeted advertising, without consent required by law. Where permitted by law, student data for high school students is used for offline direct mail only, and any digital targeting is directed to the parent or household, not the student.

If we learn we have collected data in violation of these rules, we will delete or suppress it.

4. How We Use Information

We use personal information for these business purposes:

• Marketing data services: licensing lists for direct mail, email, telemarketing, and digital campaigns, and selecting audiences by demographics, interests, or geography.
• Data hygiene and enhancement: verifying, correcting, standardizing, and appending data (for example NCOA, CASS, DSF2, deceased and prison suppression, email and phone append).
• Audience modeling and targeting: building segments of people with similar characteristics, and matching client lists to digital ad platforms using hashed or de-identified data.
• Campaign measurement: tracking responses and measuring results for clients.
• Operating our business: running our website, filling orders, billing, customer support, and marketing our own services.
• Compliance and security: honoring opt-outs and suppression requests, preventing fraud, auditing, and meeting legal obligations.

Profiling

We use automated methods to group people into marketing segments. We do not use personal information for profiling that produces legal or similarly significant effects, such as decisions about credit, employment, housing, insurance, education, or healthcare. Our data is not a consumer report and may not be used for any purpose covered by the Fair Credit Reporting Act.

If we plan to use personal information for a purpose materially different from those above, we will give notice and obtain any consent required by law first.

5. How We Share and Sell Information

Our business includes licensing and selling consumer and business marketing data. Under many state laws, this counts as a “sale” of personal information. You can opt out at any time (Section 7).

Categories of third parties we sell or disclose to:

• Businesses using data for prospecting and customer acquisition
• Advertising and marketing agencies
• Direct mail, lettershop, and printing providers
• Email and telemarketing service providers
• Digital advertising platforms and onboarding providers
• Data analytics, modeling, and enhancement providers
• Nonprofit and fundraising organizations
• Publishers and media organizations
• Political organizations, where permitted by law
• Other data brokers and resellers

We also share information:

• With service providers that help us operate, such as hosting, email delivery, data processing, billing, and security vendors. They may use it only to perform services for us.
• For legal reasons, to comply with a subpoena, court order, or regulatory request, enforce our agreements, or protect the rights and safety of AmeriList, our clients, or others.
• In a corporate transaction, such as a merger, acquisition, or sale of assets, including during due diligence.
• As de-identified or aggregate data, which can no longer reasonably be linked to you. We do not attempt to re-identify it.

Our own customers’ contact information. We do not sell or rent the business contact information of our own customers to other companies for their marketing.

6. Our Website, Cookies, and Online Tracking

What we collect on our website: your IP address, browser and device type, pages visited, time on page, and referring site. We also collect what you submit in forms, such as your name, company, email, phone, and order details.

How we use it: to respond to inquiries, process orders and counts, send newsletters and offers you request, understand how visitors use our site, and diagnose technical problems. Payment details are handled by our payment processor; we do not store full card numbers on our website.

Cookies and similar technologies. We use cookies, pixels, and analytics tools including Google Analytics, Meta Pixel, and LinkedIn Insight Tag, to operate the site, measure traffic, and show you AmeriList ads on other sites. These third parties may set their own cookies and collect data about your browsing.

Your choices:

• Block or delete cookies in your browser settings. Some site features may stop working.
• Global Privacy Control: we treat a GPC signal from your browser as a valid request to opt out of the sale or sharing of your personal information for that browser.
• Opt out of interest-based ads through the NAI and DAA opt-out tools. These are cookie-based, so repeat them on each browser and device.

Email marketing. You can unsubscribe from AmeriList marketing emails anytime using the link in each email.

7. Your Privacy Rights and How to Exercise Them

Depending on where you live, you may have the following rights. We extend the right to opt out of sale to all U.S. residents, regardless of state.

• Right to know / access: the categories and specific pieces of personal information we hold about you, its sources, our purposes, and the categories of third parties we disclosed or sold it to, covering at least the prior 12 months.
• Right to correct inaccurate personal information.
• Right to delete personal information, subject to legal exceptions.
• Right to portability: a copy of your data in a usable format.
• Right to opt out of the sale or sharing of your personal information, targeted advertising, and profiling with legal or similarly significant effects.
• Right to limit use of sensitive personal information.
• Right to a list of third parties we disclosed your data to (Oregon and Minnesota residents; see Section 9).
• Right to non-discrimination: we will not deny service, charge different prices, or provide lower quality because you exercised these rights.

How to submit a request

• Online: Data Privacy Request Form
• Toll-free: 1.800.457.2899
• Email: privacy.compliance@amerilist.com
• Mail: AmeriList, Inc., Attn: Privacy – Compliance, 10 Esquire Rd, Ste 11B, New City, NY 10956

Please include your name, current and past addresses, and email so we can find all matching records. You may submit requests for multiple or prior addresses.

Verification

To protect you, we verify identity before releasing or deleting data. We match the details you provide against our records and may ask follow-up questions. Opt-out requests do not require verification beyond what is needed to find your record.

Authorized agents

You may use an authorized agent. The agent must provide signed written permission or a valid power of attorney, and we may ask you to verify your identity directly. Agents submitting more than 100 requests at once should contact privacy.compliance@amerilist.com for batch processing.

Response times

We will acknowledge your request within 10 days of receipt and process it within 30 days from the time we received it, or sooner where required by law.

Deletion and suppression

When you ask us to delete or opt out, we keep a minimal record (such as name and address) in a suppression file. This is what prevents your data from being sold again when we receive new files from suppliers. We may also keep data where the law allows, such as to complete a transaction, prevent fraud, or meet legal obligations. Our response will tell you what we deleted, de-identified, or kept for suppression.

Appeals

If we deny your request in whole or part, you may appeal within 45 days of our decision. Email privacy.compliance@amerilist.com with the subject “Privacy Rights Appeal” and include your original request. We will respond in writing within 45 days (60 days in Colorado). If your appeal is denied, you may contact your state attorney general:

8. Other Marketing Choices

• All direct mail: register with DMAchoice, run by the Association of National Advertisers, to reduce marketing mail from many companies at once.
• Telemarketing: register at the National Do Not Call Registry. We scrub telemarketing lists against the federal and state Do Not Call lists.
• Prescreened credit offers: opt out at OptOutPrescreen.com or 1-888-567-8688.
• A specific company’s mail: contact that company directly. Opting out with AmeriList stops us from selling your data, but companies that already received it may still have it.

9. State-Specific Disclosures

The rights in Section 7 apply under the consumer privacy laws of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, and similar laws as they take effect. Below are additional disclosures specific to certain states.

California

We sell personal information as described in Sections 2 and 5. We do not offer financial incentives in exchange for personal information. California residents may use the Do Not Sell or Share My Personal Information and Limit the Use of My Sensitive Personal Information links in our website footer, or any of the methods in Section 7. We also honor verified deletion and opt-out requests submitted through any statewide mechanism we are required by law to participate in.

California Shine the Light. California residents may request information about disclosures to third parties for their direct marketing purposes by emailing privacy.compliance@amerilist.com.

Oregon and Minnesota

Residents may request a list of the specific third parties (not just categories) to whom we disclosed their personal data. Submit this through the Data Privacy Request Form or by emailing privacy.compliance@amerilist.com, and state that you are requesting a list of third parties.

Rhode Island

We may sell personal information to the categories of third parties listed in Section 5, under a license agreement. Not every category receives every type of data; it depends on the data, its intended use, and legal and contractual limits.

Texas

AmeriList, Inc. is a data broker under Texas law. To conduct business in Texas, a data broker must register with the Texas Secretary of State. Information about data broker registrants is available on the Texas Secretary of State website.

Vermont

AmeriList is registered as a data broker with the Vermont Secretary of State. Vermont’s data broker law prohibits acquiring brokered personal information through fraud or using it to stalk, harass, commit fraud, or discriminate illegally. We require clients to use data only for lawful marketing purposes.

New Jersey — Daniel’s Law

AmeriList complies with Daniel’s Law (N.J. Stat. § 56:8-166.1 et seq.). We do not knowingly sell or disclose the home address or unpublished phone number of covered persons, including active or retired judges, prosecutors, and law enforcement officers, and their household family members. We honor verified nondisclosure requests within 10 business days of receipt.

Nevada

Nevada residents may opt out of the sale of covered information using the methods in Section 7.

10. Retention, Security, and Other Terms

Retention. We keep personal information in our marketing data products until you ask us to delete it, or until we no longer need it or have reason to believe it is no longer accurate. We keep order and billing records as long as needed for tax and accounting purposes. We keep suppression and opt-out records indefinitely so we can continue honoring your request.

Security. We use administrative, technical, and physical safeguards, including encryption in transit, access controls, firewalls, and employee training. We require clients and vendors to protect the data they receive. No system is completely secure, and we cannot guarantee absolute security.

Where we store and process data. We process and store information in the United States. Where permitted by law, contractors and service providers working on our behalf may access this information to help process it, and some of them may be located outside the United States. If you access our website from outside the U.S., your information will be transferred here.

Links to other sites. Our website may link to sites we do not control. Their privacy practices are their own.

Changes to this Policy. We review this Policy at least once a year and update it as laws change. We post changes here with a new “Last updated” date. For material changes, we will give additional notice as required by law.

Accessibility. To request this Policy in another format, email privacy.compliance@amerilist.com or call 1.800.457.2899.