Do Not Share or Sell My Personal Information
Exercise your privacy rights under state privacy laws. Learn how to opt-out of the sale or sharing of your personal information and how Pro ESA Letter protects your data.
Your Right to Opt-Out
Under various state privacy laws including the California Consumer Privacy Act (CCPA), Colorado Privacy Act (CPA), Virginia Consumer Data Protection Act (VCDPA), and others, you have the right to direct businesses not to sell or share your personal information. Pro ESA Letter respects these rights and provides this page to explain your options.
Legal Compliance Notice
Pro ESA Letter does not sell personal information in the traditional sense. However, under certain state laws, sharing personal information with third parties for targeted advertising or analytics may be considered a sale. We provide this page to ensure compliance with applicable privacy laws and to respect your privacy preferences.
Depending on your state of residence, you may have the following rights regarding the sale or sharing of your personal information:
Right to Opt-Out of Sale/Sharing
The right to direct businesses not to sell or share your personal information with third parties.
Right to Opt-Out of Targeted Advertising
The right to opt-out of the processing of your personal information for targeted advertising purposes.
Right to Opt-Out of Profiling
The right to opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.
Right to Limit Use of Sensitive Data
The right to limit the use and disclosure of your sensitive personal information.
State-Specific Rights
Your specific rights may vary depending on your state of residence:
| State | Law | Opt-Out Rights | Effective Date |
|---|---|---|---|
| California | CCPA/CPRA | Opt-out of sale/sharing, limit sensitive data use | January 1, 2020 |
| Colorado | CPA | Opt-out of sale, targeted advertising, profiling | July 1, 2023 |
| Virginia | VCDPA | Opt-out of sale, targeted advertising, profiling | January 1, 2023 |
| Connecticut | CTDPA | Opt-out of sale, targeted advertising, profiling | July 1, 2023 |
| Utah | UCPA | Opt-out of sale, targeted advertising | December 31, 2023 |
| Other States | Various | Limited rights under specific circumstances | Varies |
Ways to Submit a Request
You may exercise your opt-out rights through either of the following methods:
Send your opt-out request to support@proesaletter.com, including your name and the request you’d like to make.
Global Privacy Control (GPC)
We automatically honor the GPC browser signal — if enabled, no separate request is needed. See below for details.
What Happens After You Opt-Out
When you submit a valid opt-out request, we will:
- Verify your identity to ensure the request is legitimate
- Process your opt-out request within the timeframe required by law (typically 15-45 days)
- Stop selling or sharing your personal information with third parties
- Notify any third parties to whom we have sold or shared your information to stop further use
- Send you a confirmation of your opt-out status
- Honor your opt-out preference for at least 12 months before asking you to reaffirm your choice
Processing Timeframes
We will process your opt-out request within 15 days of receipt for California residents, and within 45 days for residents of other states (with a possible 45-day extension for complex requests). We will notify you if we need additional time.
Categories of Personal Information
Your opt-out right applies to the following categories of personal information that we may sell or share:
| Category | Examples | Sold/Shared? | Opt-Out Available? |
|---|---|---|---|
| Identifiers | Name, email, phone number, IP address | Limited | Yes |
| Commercial Information | Purchase history, services obtained | No | N/A |
| Internet Activity | Browsing history, search history, website interactions | Limited | Yes |
| Geolocation Data | General location information | Limited | Yes |
| Sensitive Personal Information | Health information, racial/ethnic origin | No | N/A |
| Inferences | Profiles reflecting preferences, characteristics | Limited | Yes |
Third Parties We May Share Information With
When we share personal information that may be considered a sale under certain laws, it is typically with the following types of third parties:
- Advertising and marketing partners for targeted advertising
- Analytics providers to understand website usage
- Social media platforms for advertising purposes
- Data analytics companies for market research
- Third-party service providers acting as our processors
Service Providers vs. Third Parties
We distinguish between service providers (who process data on our behalf under contract) and third parties (who use data for their own purposes). Your opt-out right generally applies to sharing with third parties, not service providers who are contractually prohibited from using your data for their own purposes.
When Opt-Out Rights Do Not Apply
Your right to opt-out of the sale or sharing of personal information does not apply in the following circumstances:
Healthcare Operations
Sharing with healthcare providers for treatment, payment, or healthcare operations under HIPAA.
Legal Compliance
Disclosures required by law, court order, or government request.
Service Providers
Sharing with service providers who process data solely on our behalf under contract.
Business Transfers
Transfers as part of a merger, acquisition, or sale of all or part of our assets.
Global Privacy Control (GPC)
We honor the Global Privacy Control (GPC) signal, a browser-based mechanism that lets you communicate your privacy preferences automatically. If we detect a GPC signal from your browser, we treat it as a valid opt-out request — no separate submission needed.
About Global Privacy Control
GPC is a browser-based specification that allows users to signal their privacy preferences through browser settings. You can learn more about GPC and how to enable it at globalprivacycontrol.org.
Why We Verify Your Identity
To protect your personal information from unauthorized access, we must verify your identity before processing most opt-out requests. This ensures that only you or someone you authorize can exercise your privacy rights.
What If We Cannot Verify Your Identity?
- Deny the request and explain why we could not verify your identity
- Offer alternative methods of verification
- Provide guidance on how to submit a verifiable request
- Not charge a fee for verification attempts
Security Measures
All information collected for verification purposes is used solely to verify your identity and process your request. We do not use this information for any other purpose, and we delete verification information after processing your request, in accordance with our data retention policies.
Contact Our Privacy Team
To submit an opt-out request or ask questions about this policy, please contact us:
Privacy Team
Pro ESA Letter