Privacy Policy
Privacy Policy - Notice of Compliance
Our compliance practices include:
- Annual registration and disclosure with state data broker registries where required.
- Adherence to opt-out and “Do Not Sell or Share” provisions under U.S. privacy laws.
- Implementation of technical and organizational safeguards to protect consumer data.
- Regular data hygiene processes including NCOA, CASS certification, and suppression of opt-outs.
- Clear procedures for handling consumer requests, data subject inquiries, and removal requests.
- Compliance with all federal regulations governing commercial email (CAN-SPAM) and data use transparency.
Student Marketing Lists, a Division of AmeriList, Inc. is committed to full compliance with all applicable federal and state privacy, data protection, and data broker laws. We adhere to the requirements of the California Consumer Privacy Act (CCPA/CPRA) and comparable laws in Colorado, Connecticut, Delaware, Indiana, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Vermont, and Virginia, including all related consumer rights provisions and data broker registration obligations. Student Marketing Lists, a Division of AmeriList, Inc. also complies with applicable federal regulations such as the CAN-SPAM Act, Telephone Consumer Protection Act (TCPA), Fair Credit Reporting Act (FCRA), Gramm-Leach-Bliley Act (GLBA), and other privacy and data security statutes. Our policies and practices are continuously reviewed to ensure ongoing adherence to evolving privacy standards and to uphold our commitment to lawful, transparent, and responsible data management.
Here’s how we collect and use information from you in our efforts to provide the highest quality user experience:
IP Address
Cookies
Registration
Submission Forms
Your Security
Outside Links
Disclosure
Privacy and Data Protection Policy
How We Process Privacy Requests
Choice/Opt-out
California Residents (CCPA):
- The categories of personal information we’ve collected, and the categories of sources from which we got the information
- The business purposes for which we’ve shared their personal information
- The categories of third parties with whom we’ve shared their personal information
- Access to the specific pieces of personal information we’ve collected and to request deletion of that personal information, subject to certain exceptions
- The right to opt out of the sale of their personal information
- The right not to be discriminated against for exercising their CCPA privacy rights
- The right to correct inaccurate personal information
- Social security, driver’s license, state identification card, or passport numbers
- An account login, financial account, debit card, or credit card number in combination with any required security codes
- Precise geolocation
- Racial and ethnic origins, religious or philosophical beliefs, and union memberships
- Contents of mail, email, and text messages to unintended recipients
- Genetic data
- Biometric information if used to uniquely identify a person
- Personal health information
- Personal information related to a person’s personal life or sexual orientation
Colorado Resident Privacy Rights
- Access to the specific pieces of personal information we’ve collected, and to request deletion of that personal information
- The right to opt out of the sale of their personal information
- The right to opt out of targeted advertising
- The right to request correction of inaccurate personal information and to request limit disclosure or use of your sensitive personal information.
- Racial or ethnic origin
- Religious beliefs
- Sexual orientation
- Citizenship or immigration status
- Biometric or genetic data
- Information regarding an individual’s medical history, mental or physical health condition, medical treatment, or diagnosis
- Personal data from a known child
Connecticut Resident Privacy Rights
- Access the specific pieces of their personal information we’ve collected, and request deletion of that personal information
- The right to opt out of the sale of their personal information
- The right to opt out of targeted advertising
- The right to request correction of inaccurate personal information and to request limit disclosure or use of your sensitive personal information.
- Racial or ethnic origin
- Religious beliefs
- Sexual orientation
- Citizenship or immigration status
- Biometric or genetic data
- Information regarding an individual’s medical history, mental or physical health condition, medical treatment, or diagnosis
- Personal data from a known child
- Precise geolocation at a radius of 1,750 feet or less
Delaware Personal Data Privacy Act
- Scope and Applicability:
- The Act applies to businesses operating in Delaware or targeting Delaware residents, handling a specified amount of personal data.
- It covers businesses that control or process the personal data of 10,000 or more consumers annually or derive more than 50% of their gross revenue from the sale of personal data.
- Consumer Rights:
- Right to Access: Consumers can request access to their personal data held by a business.
- Right to Correction: Consumers can request corrections to inaccurate personal data.
- Right to Deletion: Consumers can request the deletion of their personal data.
- Right to Data Portability: Consumers can request a copy of their personal data in a portable format.
- Right to Opt-Out: Consumers can opt out of the sale of their personal data, targeted advertising, and profiling.
Indiana Consumer Data Protection Act
- Scope and Applicability:
- The ICDPA applies to entities conducting business in Indiana or targeting Indiana residents.
- It primarily affects businesses that process personal data of 100,000 or more consumers annually or derive over 50% of their gross revenue from the sale of personal data.
- Consumer Rights:
- Right to Access: Consumers can request access to their personal data held by a business.
- Right to Correction: Consumers can request corrections to inaccurate personal data.
- Right to Deletion: Consumers can request the deletion of their personal data.
- Right to Data Portability: Consumers can request a copy of their personal data in a portable format.
- Right to Opt-Out: Consumers can opt out of the sale of their personal data, targeted advertising, and profiling.
Iowa Consumer Data Protection Act
- Scope and Applicability:
- The ICDPA applies to entities conducting business in Iowa or targeting Iowa residents.
- It primarily affects businesses that control or process personal data of 100,000 or more consumers annually, or control or process personal data of 25,000 or more consumers and derive over 50% of their gross revenue from the sale of personal data.
- Consumer Rights:
- Right to Access: Consumers can request access to their personal data held by a business.
- Right to Correction: Consumers can request corrections to inaccurate personal data.
- Right to Deletion: Consumers can request the deletion of their personal data.
- Right to Data Portability: Consumers can request a copy of their personal data in a portable format.
- Right to Opt-Out: Consumers can opt out of the sale of their personal data, targeted advertising, and profiling.
Kentucky Consumer Data Protection Act
- Scope and Applicability:
- The KCDPA applies to entities conducting business in Kentucky or targeting Kentucky residents.
- It primarily affects businesses that control or process personal data of 25,000 or more consumers annually or derive over 50% of their gross revenue from the sale of personal data.
- Consumer Rights:
- Right to Access: Consumers can request access to their personal data held by a business.
- Right to Correction: Consumers can request corrections to inaccurate personal data.
- Right to Deletion: Consumers can request the deletion of their personal data.
- Right to Data Portability: Consumers can request a copy of their personal data in a portable format.
- Right to Opt-Out: Consumers can opt out of the sale of their personal data, targeted advertising, and profiling.
Montana Consumer Data Protection Act
The Montana Consumer Data Protection Act (effective October 1, 2024) is a legislative measure enacted to protect the personal data of Montana residents. It establishes specific rights for consumers and sets forth various obligations for businesses that handle personal data. Here are the key aspects of the MCDPA:
- Scope and Applicability:
- The MCDPA applies to entities conducting business in Montana or targeting Montana residents.
- It affects businesses that control or process the personal data of 50,000 or more consumers, households, or devices annually or derive more than 25% of their gross revenue from the sale of personal data.
- Consumer Rights:
- Right to Access: Consumers can request access to their personal data held by a business.
- Right to Correction: Consumers can request corrections to inaccurate personal data.
- Right to Deletion: Consumers can request the deletion of their personal data.
- Right to Data Portability: Consumers can request a copy of their personal data in a portable format.
- Right to Opt-Out: Consumers can opt out of the sale of their personal data, targeted advertising, and profiling.
Nebraska Data Privacy Act
- Scope and Applicability:
- The NDPA applies to entities conducting business in Nebraska or targeting Nebraska residents.
- It affects businesses that control or process personal data of a significant number of consumers, typically 50,000 or more annually, or derive a substantial portion of their revenue from the sale of personal data.
- Consumer Rights:
- Right to Access: Consumers can request access to their personal data held by a business.
- Right to Correction: Consumers can request corrections to inaccurate personal data.
- Right to Deletion: Consumers can request the deletion of their personal data.
- Right to Data Portability: Consumers can request a copy of their personal data in a portable format.
- Right to Opt-Out: Consumers can opt out of the sale of their personal data, targeted advertising, and profiling.
New Hampshire Data Privacy and Security Act
New Hampshire’s Senate Bill 255, also known as the New Hampshire Data Privacy and Security Act, (effective January 1, 2025) represents a significant step towards comprehensive data privacy legislation in the state. The bill aims to enhance the protection of personal data for New Hampshire residents by establishing clear rights for consumers and responsibilities for businesses. Here are the key aspects of Senate Bill 255:
- Scope and Applicability:
- The bill applies to businesses that conduct business in New Hampshire or target New Hampshire residents.
- It specifically affects businesses that control or process the personal data of at least 50,000 consumers, households, or devices annually or derive more than 50% of their gross revenue from the sale of personal data.
- Consumer Rights:
- Right to Access: Consumers can request access to the personal data a business holds about them.
- Right to Correction: Consumers can request corrections to any inaccurate personal data.
- Right to Deletion: Consumers can request the deletion of their personal data.
- Right to Data Portability: Consumers can request a copy of their personal data in a portable, easily accessible format.
- Right to Opt-Out: Consumers have the right to opt out of the sale of their personal data, targeted advertising, and profiling.
Oregon Consumer Privacy Act
- Right to Access: Consumers can confirm whether a business is processing their personal data and request details about the categories of data collected, the purpose of processing, and any third-party disclosures.
- Right to Correction: Consumers have the right to request correction of inaccurate personal data held by a business.
- Right to Deletion: Consumers can request deletion of their personal data, including data they provided directly, data obtained from other sources, and derived data.
- Right to Data Portability: Consumers can obtain a copy of their personal data in a transferable format that allows them to easily move it to another business.
- Right to Opt-Out: Consumers can opt out of the sale of their personal data and targeted advertising. Additionally, they have the right to opt in for the processing of “sensitive data” such as social security numbers, passport numbers, or data revealing race, religion, or sexual orientation.
Tennessee Information Protection Act (TIPA)
- Access, Correction, and Deletion: Consumers have the right to:
- Confirm whether a business is processing their personal information.
- Access a copy of their personal information.
- Request correction of any inaccuracies in their data.
- Request deletion of their personal information, subject to certain exceptions.
- Data Portability: Consumers can obtain their personal information in a usable and portable format to transfer it to another business.
- Opt-Out Rights: Consumers have the right to opt out of:
- The sale of their personal information.
- Targeted advertising based on their personal information.
- Profiling that results in automated decisions that have a significant impact on them.
New Jersey Data Protection Act
- Right to Know: Consumers can confirm whether a business is processing their personal data and accessing details about the categories of data collected, the purpose of processing, and any third-party disclosures.
- Right to Correction: Consumers have the right to request correction of inaccurate personal data held by a business.
- Right to Deletion: Consumers can request deletion of their personal data, with some exceptions for businesses with legal obligations to retain data.
- Right to Portability: Consumers can obtain a copy of their personal data in a transferable format that allows them to move it to another business.
- Right to Opt-Out: Consumers can opt out of the processing of their personal data for:
- Targeted advertising.
- Sale of personal data (except for consumers under 18, where opt-in is required).
- Profiling in furtherance of automated decisions that produce legal or similar effects concerning them.
Virginia Resident Privacy Rights
- Access the specific pieces of their personal information we’ve collected, and request deletion of that personal information
- The right to opt out of the sale of their personal information
- The right to opt out of targeted advertising
- The right to request correction of inaccurate personal information and to request to limit disclosure or use of your sensitive personal information.
- Racial or ethnic origin
- Religious beliefs
- Sexual orientation
- Citizenship or immigration status
- Biometric or genetic data
- Information regarding an individual’s medical history, mental or physical health condition, medical treatment, or diagnosis
- Personal data from a known child
- Precise geolocation at a radius of 1,750 feet or less
Utah Resident privacy rights
- Access the specific pieces of their personal information we’ve collected, and request deletion of that personal information
- The right to opt out of the sale of their personal information
- The right to opt out of targeted advertising
- The right to request correction of inaccurate personal information and to request to limit disclosure or use of your sensitive personal information.
- Racial or ethnic origin
- Religious beliefs
- Sexual orientation
- Citizenship or immigration status
- Biometric or genetic data
- Information regarding an individual’s medical history, mental or physical health condition, medical treatment, or diagnosis
- Personal data from a known child
- Precise geolocation at a radius of 1,750 feet or less
Texas Resident Privacy Rights
- Access the specific pieces of their personal information we’ve collected, and request deletion of that personal information
- Confirm that the data controller is processing their data
- Correct inaccuracies in their personal data
- Delete their personal data
- Obtain a copy of their data in a portable and readily usable format
- Opt out of having their data processed for the purpose of targeted advertising, the sale of their data, or profiling that produces a legal or significant effect on the consumer.
- Racial or ethnic origin
- Religious beliefs
- Mental or physical health diagnosis
- Sexual orientation
- Citizenship or immigration status
- Genetic or biometric data
- Children’s data
- Precise geolocation data
Vermont Data Broker Act
The Data Broker Act defines the term’ data broker’ as any business or unit of businesses that knowingly collects and sells, or licenses to third parties, ‘brokered personal information’ of a consumer (i.e., a Vermont resident) with whom the business does not have a direct relationship. “Brokered personal information” includes any of the following data elements about a consumer, if categorized or organized for dissemination to third parties:
- Name
- Address
- Date or place of birth
- Mother’s maiden name
- Unique biometric data that can identify or authenticate a consumer (e.g., fingerprint, retina, or iris image)
- Name or address of a member of the consumer’s immediate family or household
- Social security number or other government-issued identification number, or
- Any other information that, alone or in combination with the other information sold or licensed, would allow a reasonable person to identify the consumer with reasonable certainty
Right to Knowledge of Personal Information Collected, Distributed or Sold
- Categories of Personal Information Collected: This may include, but is not limited to, identifiers; demographic characteristics; commercial or transactional information; geographic data; internet or electronic network activity; employment-related information; and consumer interests or preferences.
- Sources of Personal Information: These may include data compilers, public records, surveys or questionnaires, third-party list brokers, and other authorized data providers.
- Business or Commercial Purpose for Collection or Sale: Such purposes may include providing data marketing and analytics services, audience targeting, measuring the effectiveness of marketing campaigns, and the development or enhancement of products and services.
- Categories of Third Parties with Whom Personal Information Has Been Shared or Sold: This may include business-to-business (B2B) or business-to-consumer (B2C) clients utilizing data to identify and engage with their target audiences.
Compliance with Daniel’s Law:
Student Marketing Lists, a Division of AmeriList, Inc. takes all reasonable measures to identify and exclude records associated with individuals protected under Daniel’s Law and will honor all verified requests for removal from its databases and systems. The Company maintains internal compliance protocols to ensure continued adherence to the requirements of Daniel’s Law and other applicable privacy statutes.
Definition of Covered Persons:
Enforcement and Compliance:
Deletion Requests
You have the right to request that Student Marketing Lists, a Division of AmeriList, Inc. erase any of your personal data that we have collected from you, subject to certain exceptions. Once we obtain your request via https://studentmarketinglist.com/ccpa/, we will delete your personal information from our records.
Please submit a request to us by either:
- Visiting https://studentmarketinglist.com/ccpa/
- Sending mail to:
AmeriList, Inc
Attn: Privacy – Compliance
40 Ramland Road South, Ste. 203B
Orangeburg, NY 10962
The mailed request should include your contact information and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. In addition, you should provide sufficient information that allows us to reasonably verify that you are the person about whom we collected the personal information or an authorized representative.
Appeals Process
Consumer Advocacy
Internal Monitoring
Policy Changes
Contacting Us
Questions?
For any questions related to our privacy policy, please email: privacy.compliance@amerilist.com. You may also send correspondence to:
AmeriList, Inc.
Attn: Privacy Policy Department
40 Ramland Road South, Suite 203B
Orangeburg, NY 10962
This policy was last revised on 10/29/2025