We deliver more demographic and psychographic options than any other list company.
1.800.457.2899Legal
Last revised October 20, 2025. AmeriList is committed to lawful, transparent, and responsible data management.
At AmeriList, Inc., We take consumer privacy seriously. In compliance with all laws, regulations, and best practices, we have implemented comprehensive and secure data handling policies that ensure privacy, security, and transparency in the way we handle data.
As a registered list broker and marketing services provider, AmeriList adheres to strict standards for data collection, processing, and distribution. We do not publicly post or share sensitive personal information, and we maintain procedures to ensure compliance with consumer rights to access, opt out, correct, or delete personal data as required under applicable law.
AmeriList, Inc. is committed to full compliance with all applicable federal and state privacy, data protection, and list broker laws. We adhere to the requirements of the California Consumer Privacy Act (CCPA/CPRA) and comparable laws in Colorado, Connecticut, Delaware, Indiana, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Vermont, and Virginia, including all related consumer rights provisions and list broker registration obligations. AmeriList also complies with applicable federal regulations such as the CAN-SPAM Act, Telephone Consumer Protection Act (TCPA), Fair Credit Reporting Act (FCRA), Gramm-Leach-Bliley Act (GLBA), and other privacy and data security statutes. Our policies and practices are continuously reviewed to ensure ongoing adherence to evolving privacy standards and to uphold our commitment to lawful, transparent, and responsible data management.
Here’s how we collect and use information from you in our efforts to provide the highest quality user experience:
Your IP or “Internet Protocol” address and other site usage data is used to gather broad demographic information. This data helps us serve you by allowing us to understand how visitors use our web sites.
We use cookies and similar technologies to improve website functionality, analyze site usage, and enhance your browsing experience. Cookies may collect information such as your IP address, browser type, device information, pages visited, and interaction patterns. This data helps us deliver a more personalized experience but does not directly identify you by name. You can manage your cookie preferences through your browser settings.
Some of our pages include registration forms that require users to give us contact information (like your name) and unique identifiers (such as your email address). Customer contact information is not shared with any other company or organization, but used internally so that, when possible, you can enjoy member benefits without having to register more than once. We use customer contact information from registration forms to send you information related to our products and services if you consent to receiving such mailings. Your contact information may also be used to contact you when necessary for administrative purposes related to your account. We use your email as a unique identifier in our record system, to verify communications from you, and to send you newsletters and promotion offers that you ask to receive.
Our website uses forms for you to request information, products, and services. We collect financial information to bill you for the products and services you indicated. See “Your Security” below for more on how we safeguard your business and financial information.
AmeriList has taken the following important measures to protect against the loss, misuse or alteration of your personal or business information. We store no financial information on our site. When we do transmit your data, we use only Secure Servers using current encryption technology to encode your data safely. The personal data we store on our system is protected by firewalls and passwords
While on AmeriList.com, you may be led to other web sites. Be aware that other sites may collect data and personal information and operate according to their own privacy practices. Please remember that, once outside AmeriList.com, any information you submit is outside of our control.
To provide you with the best products and services, we sometimes team with business partners. When you indicate that you want to receive a product or service, or contact a person or organization, we share the data needed for you to receive what you have indicated. Your personal information may be shared with an outside company for the sole purpose of administering the products and services you have selected.
At AmeriList, Inc., we are deeply committed to the highest standards of compliance with all applicable privacy laws and regulations. Protecting the privacy and security of personal information is a responsibility we take very seriously.
Upon receiving your privacy request, AmeriList initiates an internal review to identify and process any applicable records within our systems and databases. Our compliance team will coordinate with the appropriate internal departments to ensure your request is handled accurately and in accordance with privacy regulations.A formal response will be provided within 45 days of receipt. If additional time is required, you will be notified along with the reason for the delay.
To submit a data removal or privacy-related request, individuals are required to complete AmeriList’sData Privacy Request Form, available at Data Privacy Request Form. Submission through this form is mandatory, as it enables AmeriList to collect the information necessary to verify the identity of the requester and to process the request in a secure and compliant manner.
AmeriList does not accept privacy or opt-out requests submitted via email or other communication channels. All such requests must be submitted exclusively through the form referenced above to ensure proper processing and removal from applicable databases.
If at any time you feel AmeriList has not adhered to this policy, email us at privacy.compliance@amerilist.com and we’ll do our best to determine any problem and quickly respond.
Under the California Consumer Privacy Act (2018; effective January 1, 2020), known as the “CCPA”, amended in 2020, California residents have certain rights regarding their personal information. The CCPA is a bill intended to enhance privacy rights and consumer protection for residents of California. Without being discriminated against for exercising these rights, California residents have the right to request that we divulge what personal data we collect from you, to eliminate that information, and to opt-out of the selling of your information, subject to certain restrictions. You also have the right to designate an agent to exercise these rights on your behalf. The security of your information is our top priority.
The intentions of the Act are to provide CA residents with certain rights regarding their personal information. This includes:
The categories of personal information we’ve collected, and the categories of sources from which we got the information.
The business purposes for which we’ve shared their personal information.
The categories of third parties with whom we’ve shared their personal information.
Access to the specific pieces of personal information we’ve collected and to request deletion of that personal information, subject to certain exceptions.
The right to opt out of the sale of their personal information.
The right not to be discriminated against for exercising their CCPA privacy rights.
The right to correct inaccurate personal information.
An account login, financial account, debit card, or credit card number in combination with any required security codes
Under Colorado’s Consumer Privacy Act (effective as of July 1, 2023), Colorado residents have certain rights regarding their personal information. This includes:
Access to the specific pieces of personal information we’ve collected, and to request deletion of that personal information
The right to request correction of inaccurate personal information and to request limit disclosure or use of your sensitive personal information.
Information regarding an individual’s medical history, mental or physical health condition, medical treatment, or diagnosis
Under Connecticut’s Data Privacy Act (effective as of July 1, 2023), Connecticut residents have certain rights regarding their personal information. This includes:
Access the specific pieces of their personal information we’ve collected, and request deletion of that personal information
The right to request correction of inaccurate personal information and to request limit disclosure or use of your sensitive personal information.
Information regarding an individual’s medical history, mental or physical health condition, medical treatment, or diagnosis
The Delaware Personal Data Privacy Act (effective January 1, 2025) is a state-level legislative measure aimed at protecting the personal data of Delaware residents. It sets forth various requirements and obligations for businesses that handle personal data. Here are some key aspects of the DPDPA:
The Act applies to businesses operating in Delaware or targeting Delaware residents, handling a specified amount of personal data.
It covers businesses that control or process the personal data of 10,000 or more consumers annually or derive more than 50% of their gross revenue from the sale of personal data.
Right to Access: Consumers can request access to their personal data held by a business.
Right to Correction: Consumers can request corrections to inaccurate personal data.
Right to Deletion: Consumers can request the deletion of their personal data.
Right to Data Portability: Consumers can request a copy of their personal data in a portable format.
Right to Opt-Out: Consumers can opt out of the sale of their personal data, targeted advertising, and profiling.
The Indiana Consumer Data Protection Act (effective January 1, 2026) is a state-level legislative measure designed to protect the personal data of Indiana residents. It outlines various rights for consumers and imposes specific obligations on businesses that collect, process, or sell personal data. Here are some key aspects of the ICDPA:
The ICDPA applies to entities conducting business in Indiana or targeting Indiana residents.
It primarily affects businesses that process personal data of 100,000 or more consumers annually or derive over 50% of their gross revenue from the sale of personal data.
Right to Access: Consumers can request access to their personal data held by a business.
Right to Correction: Consumers can request corrections to inaccurate personal data.
Right to Deletion: Consumers can request the deletion of their personal data.
Right to Data Portability: Consumers can request a copy of their personal data in a portable format.
Right to Opt-Out: Consumers can opt out of the sale of their personal data, targeted advertising, and profiling.
The Iowa Consumer Data Protection Act (effective January 1, 2025) is a legislative measure designed to protect the personal data of Iowa residents. Similar to data protection laws in other states, the ICDPA grants specific rights to consumers and imposes various obligations on businesses that handle personal data. Here are the key aspects of the ICDPA:
The ICDPA applies to entities conducting business in Iowa or targeting Iowa residents.
It primarily affects businesses that control or process personal data of 100,000 or more consumers annually, or control or process personal data of 25,000 or more consumers and derive over 50% of their gross revenue from the sale of personal data.
Right to Access: Consumers can request access to their personal data held by a business.
Right to Correction: Consumers can request corrections to inaccurate personal data.
Right to Deletion: Consumers can request the deletion of their personal data.
Right to Data Portability: Consumers can request a copy of their personal data in a portable format.
Right to Opt-Out: Consumers can opt out of the sale of their personal data, targeted advertising, and profiling.
The Kentucky Consumer Data Protection Act (KCDPA) is a proposed state-level legislative measure aimed at protecting the personal data of Kentucky residents. These acts are designed to provide consumers with specific rights regarding their personal data and impose various obligations on businesses that collect, process, or sell personal data. Here are the key aspects of the KCDPA:
The KCDPA applies to entities conducting business in Kentucky or targeting Kentucky residents.
It primarily affects businesses that control or process personal data of 25,000 or more consumers annually or derive over 50% of their gross revenue from the sale of personal data.
Right to Access: Consumers can request access to their personal data held by a business.
Right to Correction: Consumers can request corrections to inaccurate personal data.
Right to Deletion: Consumers can request the deletion of their personal data.
Right to Data Portability: Consumers can request a copy of their personal data in a portable format.
Right to Opt-Out: Consumers can opt out of the sale of their personal data, targeted advertising, and profiling.
The Montana Consumer Data Protection Act (effective October 1, 2024) is a legislative measure enacted to protect the personal data of Montana residents. It establishes specific rights for consumers and sets forth various obligations for businesses that handle personal data. Here are the key aspects of the MCDPA:
The MCDPA applies to entities conducting business in Montana or targeting Montana residents.
It affects businesses that control or process the personal data of 50,000 or more consumers, households, or devices annually or derive more than 25% of their gross revenue from the sale of personal data.
Right to Access: Consumers can request access to their personal data held by a business.
Right to Correction: Consumers can request corrections to inaccurate personal data.
Right to Deletion: Consumers can request the deletion of their personal data.
Right to Data Portability: Consumers can request a copy of their personal data in a portable format.
Right to Opt-Out: Consumers can opt out of the sale of their personal data, targeted advertising, and profiling.
The Nebraska Data Privacy Act (effective January 1, 2025) is a state-level legislative measure designed to protect the personal data of Nebraska residents. This Act grants specific rights to consumers and imposes various obligations on businesses that handle personal data. While the precise details can vary based on amendments and interpretations, here are the key aspects generally covered by such data privacy acts:
The NDPA applies to entities conducting business in Nebraska or targeting Nebraska residents.
It affects businesses that control or process personal data of a significant number of consumers, typically 50,000 or more annually, or derive a substantial portion of their revenue from the sale of personal data.
Right to Access: Consumers can request access to their personal data held by a business.
Right to Correction: Consumers can request corrections to inaccurate personal data.
Right to Deletion: Consumers can request the deletion of their personal data.
Right to Data Portability: Consumers can request a copy of their personal data in a portable format.
Right to Opt-Out: Consumers can opt out of the sale of their personal data, targeted advertising, and profiling.
New Hampshire’s Senate Bill 255, also known as the New Hampshire Data Privacy and Security Act, (effective January 1, 2025) represents a significant step towards comprehensive data privacy legislation in the state. The bill aims to enhance the protection of personal data for New Hampshire residents by establishing clear rights for consumers and responsibilities for businesses. Here are the key aspects of Senate Bill 255:
The bill applies to businesses that conduct business in New Hampshire or target New Hampshire residents.
It specifically affects businesses that control or process the personal data of at least 50,000 consumers, households, or devices annually or derive more than 50% of their gross revenue from the sale of personal data.
Right to Access: Consumers can request access to their personal data held by a business.
Right to Correction: Consumers can request corrections to inaccurate personal data.
Right to Deletion: Consumers can request the deletion of their personal data.
Right to Data Portability: Consumers can request a copy of their personal data in a portable format.
Right to Opt-Out: Consumers can opt out of the sale of their personal data, targeted advertising, and profiling.
The Oregon Consumer Privacy Act (effective July 1, 2024) empowers Oregon residents with control over their personal data collected by certain businesses. Here’s a breakdown of the key provisions:
Right to Access: Consumers can confirm whether a business is processing their personal data and request details about the categories of data collected, the purpose of processing, and any third-party disclosures.
Right to Correction: Consumers have the right to request correction of inaccurate personal data held by a business.
Right to Deletion: Consumers can request deletion of their personal data, including data they provided directly, data obtained from other sources, and derived data.
Right to Data Portability: Consumers can obtain a copy of their personal data in a transferable format that allows them to easily move it to another business.
Right to Opt-Out: Consumers can opt out of the sale of their personal data and targeted advertising. Additionally, they have the right to opt in for the processing of “sensitive data” such as social security numbers, passport numbers, or data revealing race, religion, or sexual orientation.
The Tennessee Information Protection Act (effective July 1, 2025) grants Tennessee residents' control over their personal data and places obligations on businesses that handle it. Here’s a comprehensive look at TIPA’s key provisions:
Confirm whether a business is processing their personal information.
Access a copy of their personal information.
Request correction of any inaccuracies in their data.
Request deletion of their personal information, subject to certain exceptions.
Data Portability: Consumers can obtain their personal information in a usable and portable format to transfer it to another business.
The sale of their personal information.
Targeted advertising based on their personal information.
Profiling that results in automated decisions that have a significant impact on them.
The New Jersey Data Protection Act (effective on January 15, 2025) grants New Jersey residents' control over their personal data and imposes obligations on businesses that collect and process it. Here’s a breakdown of the key provisions:
Right to Know: Consumers can confirm whether a business is processing their personal data and accessing details about the categories of data collected, the purpose of processing, and any third-party disclosures.
Right to Correction: Consumers have the right to request correction of inaccurate personal data held by a business.
Right to Deletion: Consumers can request deletion of their personal data, with some exceptions for businesses with legal obligations to retain data.
Right to Portability: Consumers can obtain a copy of their personal data in a transferable format that allows them to move it to another business.
Targeted advertising.
Sale of personal data (except for consumers under 18, where opt-in is required).
Profiling in furtherance of automated decisions that produce legal or similar effects concerning them.
Under Virginia’s Consumer Data Protection Act (effective as of January 1, 2023), Virginia residents have certain rights regarding their personal information. This includes:
Access the specific pieces of their personal information we’ve collected, and request deletion of that personal information
The right to opt out of the sale of their personal information.
The right to opt out of targeted advertising.
The right to request correction of inaccurate personal information and to request to limit disclosure or use of your sensitive personal information.
Information regarding an individual’s medical history, mental or physical health condition, medical treatment, or diagnosis
Under Utah’s Consumer Privacy Act (effective as of December 31, 2023), Utah residents have certain rights regarding their personal information. This includes:
Access the specific pieces of their personal information we’ve collected, and request deletion of that personal information
The right to opt out of the sale of their personal information.
The right to opt out of targeted advertising.
The right to request correction of inaccurate personal information and to request to limit disclosure or use of your sensitive personal information.
Information regarding an individual’s medical history, mental or physical health condition, medical treatment, or diagnosis
Texas is the latest state to pass new resident privacy protection laws. Known as the Texas Data Privacy and Security Act (effective March 1, 2024), Texas residents will have certain rights regarding their personal information. This includes:
Access the specific pieces of their personal information we’ve collected, and request deletion of that personal information
Confirm that the data controller is processing their data.
Correct inaccuracies in their personal data.
Delete their personal data.
Obtain a copy of their data in a portable and readily usable format.
Opt out of having their data processed for the purpose of targeted advertising, the sale of their data, or profiling that produces a legal or significant effect on the consumer.
7 Children’s data
The Accelerating to list brokers and Consumer Protection Act went into full effect on January 1, 2019. The list broker Act imposes specific registration, disclosure, and security requirements on list brokers. Additionally, the list broker Act prohibits any person or entity from fraudulently acquiring or using brokered personal information.
The list broker Act defines the term’ list broker’ as any business or unit of businesses that knowingly collects and sells, or licenses to third parties, ‘brokered personal information’ of a consumer (i.e., a Vermont resident) with whom the business does not have a direct relationship. “Brokered personal information” includes any of the following data elements about a consumer, if categorized or organized for dissemination to third parties:
Name
Unique biometric data that can identify or authenticate a consumer (e.g., fingerprint, retina, or iris image)
Any other information that, alone or in combination with the other information sold or licensed, would allow a reasonable person to identify the consumer with reasonable certainty
You have the right to request that AmeriList, Inc. disclose specific details regarding the collection, use, disclosure, or sale of your personal information within the preceding twelve (12) months. Upon receipt and verification of a verifiable consumer request, AmeriList will provide the following information, as applicable:
In alignment with AmeriList, Inc.’s ongoing commitment to privacy and data protection, the Company strictly adheres to the provisions of Daniel’s Law (N.J. Stat. § 56:8-166.1 et seq.) and all related regulations. AmeriList does not knowingly engage in the sale, rental, disclosure, or brokerage of any personal information pertaining to individuals protected under Daniel’s Law, including active or retired law enforcement officers, judicial officers, prosecutors, and other covered persons.
AmeriList takes all reasonable measures to identify and exclude records associated with individuals protected under Daniel’s Law and will honor all verified requests for removal from its databases and systems. The Company maintains internal compliance protocols to ensure continued adherence to the requirements of Daniel’s Law and other applicable privacy statutes.
For the purposes of this policy, "Covered Persons" refers to individuals who are currently serving, have served, or are retired from roles as judicial officers, prosecutors, law enforcement officers, and other positions protected under Daniel’s Law. This protection also extends to immediate family members of such individuals, provided they reside in the same household.
AmeriList, Inc. implements rigorous measures to ensure the integrity of our data handling processes, with specific protocols in place to identify and protect the information of Covered Persons. Our employees receive thorough training on these measures, ensuring that the principles outlined in this policy are integrated into our daily operations.
We are committed to continuously reviewing and updating our practices to remain in strict compliance with Daniel’s Law and other privacy regulations. This commitment underlines our dedication to safeguarding the personal information of all individuals, reflecting our core values of respect, integrity, and privacy.
For any inquiries or concerns regarding our Privacy and Data Protection Policy, please contact our Data Protection Dept at privacy.compliance@amerilist.com
You have the right to request that AmeriList erase any of your personal data that we have collected from you, subject to certain exceptions. Once we obtain your request via https://www.amerilist.com/data-privacy-rights-request, we will delete your personal information from our records.
Visiting https://www.amerilist.com/data-privacy-rights-request
10 Esquire Rd Ste 11B
The mailed request should include your contact information and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. In addition, you should provide sufficient information that allows us to reasonably verify that you are the person about whom we collected the personal information or an authorized representative.
If we deny your privacy request, you have the right to appeal to our decision. To submit an appeal, please contact us at privacy.compliance@amerilist.com within 45 days of receiving our response. Please include your original request, the reason you believe our decision was in error, and any additional supporting information.
We will review your appeal and provide a written response within 45 days of receipt, explaining the outcome and the reasons for our decision. If your appeal is denied, you may contact your state’s regulatory authority or your states Department of Justice or the applicable state attorney general’s office for further review.
AmeriList, Inc. maintains a Privacy Advocate responsible for addressing consumer inquiries and concerns relating to data privacy and the protection of personal information. The Privacy Advocate shall review each inquiry in good faith and take appropriate measures to investigate and resolve potential compliance issues in accordance with applicable data protection laws and internal policy standards.For all privacy-related inquiries, please contact us via email at privacy.compliance@amerilist.com.
Our Privacy Advocate also ensures that all aspects of our privacy policy are upheld and that all employees receive the appropriate training and resources to ensure privacy compliance.
AmeriList, Inc. may update this policy from time to time. Any changes to this policy will be posted here along with an updated revision date.
If at any time you feel AmeriList has not adhered to this policy, email us at privacy.compliance@amerilist.com and we’ll do our best to determine any problem and quickly respond.
For any questions related to our privacy policy, please email: privacy.compliance@amerilist.com
10 Esquire Rd Ste 11B
