Appriss Retail Privacy Notice

Last Updated: October 2025

1. Scope

This Privacy Notice describes how Appriss Retail Holdings, Inc. (“Appriss Retail”) and its family of companies (collectively, “we,” “us,” or “our”) collect, use, disclose and otherwise process, and disclose information that identifies you (“Personal Information”) in its capacity as a business or “controller”.

This Privacy Notice applies to Personal Information processed by us, both online and offline, including through our websites www.theretailequation.com and www.apprissretail.com and other websites and digital properties that link to this Privacy Notice (any linked, online property, a “Site” and collectively, the “Services”).

2. Appriss Retail as a Service Provider

This Privacy Notice does not apply to Personal Information we process on behalf of our customers. We refer to our customers as “Retailers” for the purpose of this Privacy Notice. Retailers may license our products and services on behalf of themselves or the other store brands affiliated with the Retailer. When processing information on behalf of a Retailer, Appriss Retail is acting as a “Service Provider” (sometimes referred to as a “Processor”). Personal Information we process on behalf of our Retailers is subject to the terms of separate written contracts we enter to provide services to those Retailers. If you are an individual who wants to exercise your privacy rights with respect to Personal Information we process on behalf of a Retailer, please contact the Retailer directly.

3. Information We Collect as a Controller

Appriss Retail acts as a Controller of data only in the business-to-business context or if you are an employee of Appriss Retail.

The categories of Personal Information we collect as a Controller depends on how you interact with us, our Services, and the requirements of applicable law. We collect information that you provide to us and information we obtain automatically when you use our Services (our websites, and interactions we have in the business-to-business context).

• Identifiers, such as your first and last name, email address, physical address, phone number, social media profile information, usernames, signature, profile pictures or similar photos, online identifiers (e.g., marketing ID or cookie identifier), or other similar identifiers that may be provided to Appriss Retail.
• Professional Information, such as your current or previous employers, job title, business contact information (e.g., address and telephone number), areas of expertise, or other information about the organization with which you may be affiliated.
• Device Information, such as information pertaining to the device through which you interact with our Sites, your IP address, the type of device used to interact with the Services, that device’s operating system and version, MAC address, user settings, carrier information, or your browser type.
• Internet or Other Electronic Network Activity, such as browsing history, search history, IP address, MAC address, information on a consumer’s interaction with us and our services, which may include pages that you visit before, during and after using our services, information about the links you click, the types of content you interact with, the frequency and duration of your activities, and other information about how you use our services, including your operating system, your web browser software, the type of handheld or mobile device you used to access the web page, and the language and time zone settings on your web browser.
• Preferences, such as your stated interests, how frequently you wish to receive our newsletters, or other communication preferences.
• Inferences drawn from other information we collect to create a profile about you, which may reflect your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, or aptitudes.

4. How We Collect Information as a Controller

• • We Collect Information Directly. We collect information directly from individuals when they interact with our Services, such as when you request information about our products or services, request customer support, use our “Contact Us” or similar features on our Sites, or register to attend our seminars, webinars, or other presentations.
  • We Collect Information Automatically Through Our Services. We collect some information automatically when you use our Services.
    • Usage data. We collect information about your interactions with the Services, such as the features and functionality of the Services you use, the content you view, your searches, how long you spent on a page or screen, sites from which you link or browse to in the Services, navigation paths between pages or screens, information about your activity on a page or screen, access time, duration of access, and other actions on the Services.
    • Device data. We collect information about your computer or mobile device, such as its operating system type and version number, manufacturer and model, browser type, screen resolution, IP address, unique device identifiers, or general location information such as city, state, or geographic area.
    • Cookies and similar technology. We, as well as third parties that provide content, analytics, or other functionality on our Services, may use cookies, pixel tags, and other technologies (collectively, “Technologies”) to automatically collect information through your use of our Services.
  • We Collect Personal Information from Other Sources. This may include: (i) social networks, when you grant us permission to access your Personal Information on one of those networks, (ii) third-party business partners, such as those we may offer co-branded services or engage in joint marketing activities, and (iii) publicly available sources.

5. Online Technologies Used to Collect Information as a Controller

We, as well as third parties that provide content, analytics, or other functionalities in relation to our Services, may use certain Technologies to automatically collect information through your use of our Services and distinguish you from other users of the Services. We may use Technologies in various ways, as described by the following categories:

• Essential Technologies. These Technologies are essential to our ability to offer our Services and include technologies that allow you access to our Services, applications, and enable tools that we use to identify irregular website behavior, prevent fraudulent activity, improve security, or allow you to make use of embedded functionalities or features of our Services.
• Marketing-Related Technologies. These technologies help us market our Services or deliver relevant commercial messages. For example, we use Google’s DoubleClick  For more information about Google’s use of your Personal Information, please visit Google’s privacy policy. To learn more about how to control Google’s use of your information for ads, please click here.
• Performance and Analytics- Related Technologies. These Technologies help us assess the performance of our Services, including as part of our analytic practices to help us understand how individuals use our Services. We share information about the privacy practices of some of the performance-related Technologies we use. For example, we use Google Analytics. You may wish to review Google Analytics’ Notice to better understand how Google uses your Personal Information (including for its own purposes, e.g., for profiling or linking it to other data). To learn more about how to opt-out of Google Analytics’ use of your information, please click here.
• Functionality-Related Technologies. These Technologies allow us to operate our Services and offer enhanced functionality when accessing or using our Services. This may include identifying you when you sign into our Services or keeping track of your specified preferences, interests, or past viewing activities.
• Analytics. These Technologies allow us to better understand how our digital Services are used and to continually improve and personalize our Services.
• Fraud and Abuse Prevention Providers. We may use third-party services to protect our Sites from fraud and abuse. For example, we may use technology to evaluate various device-and-user based analytics to estimate whether the activity is from an automated program (i.e., a “bot”) or a human.
• Social Media Platforms. We maintain corporate social media accounts that may contain information such as job postings, links to blog posts, whitepapers, product related announcements or other information that may be relevant to Retailers and prospective customers. If you visit one of our corporate social media accounts, the social media site, like any other third-party site, may collect Personal Information. Your interactions with these platforms are governed by the privacy policy of the company providing it.

6. How We Use Information as a Controller

We may use the Personal Information we collect as a Controller for a variety of business purposes, including to provide our Services, for administrative purposes, and to market our products and Services, as described below.

• To provide our Services, including to fulfill our contracts with Retailer customers and to operate, troubleshoot, and improve our Services.
• To communicate with you, including interactions on behalf of your affiliated organization, particularly regarding the products and services the organization uses or has shown interest in.
• For research and analytical purposes, including to conduct market research, understand how you use our Sites, products, and Services, conduct customer surveys, understand the methods and devices you use to access, and the effectiveness of, our Sites and other digital properties, and to make improvements to our Sites, products, and Services.
• For marketing and advertisement purposes, including to market, provide, and assess the effectiveness of our Sites and products and Services, which may include us sending communications to you that are tailored to you and your interests.
• For our administrative purposes, such as to respond to you or notify you of a change in our business that may affect you, including when you reach out to us with a comment, request, or question or to send you technical notices, updates, security alerts, and other administrative messages.
• For legal, fraud prevention, and safety purposes, including to defend or protect us, you, our client, or third parties, from harm or in legal proceedings; maintain the security of our clients, employees, and property; respond to court orders, lawsuits, subpoenas, and government requests; address legal and regulatory compliance; notify you of any other legal or safety issues; and comply with our legal obligations.
• For other legitimate business purposes, including to operate and improve or business, internal administration, data analysis, billing, detecting, preventing, and responding to actual or potential fraud, illegal activities, or intellectual property infringement, and for any other business purpose permitted by law.
• For other purposes or with your consent. We may use Personal Information for other purposes that are clearly disclosed to you at the time you provide Personal Information or with your consent.
• De-identified and Aggregated Information. We may use Personal Information to create de-identified and/or aggregated information, such as demographic information, information about the device from which you access our Services, or other analyses we create. We use deidentified data for the purposes outlined in this Privacy Notice and afford it the same protections as all other Personal Information we process pursuant to applicable data protection and other laws. We may also collect, use and share “Aggregated Data” such as statistical or demographic data for any purpose. Aggregated Data may be derived from your Personal Information but is not considered Personal Information as this data does not directly or indirectly reveal an individual.
• Other Purposes. We may also use your Personal Information for other purposes as requested by you or as required or permitted by applicable law.

7. How We Disclose Information as a Controller

We may disclose the Personal Information we collect as a controller to third parties for a variety of business purposes, including to provide our Services, to protect us or others, in the event of a major business transaction such as a merger, sale, or asset transfer, or as otherwise communicated to you at the time of collection, and as described below.  We may also disclose your information to third parties if appropriate and permitted or required by law.

• Disclosures to Provide our Services. The categories of third parties with whom we may disclose your Personal Information are described below.
  • Service Providers. We may disclose your Personal Information with third party companies and individuals that provide services on our behalf or help us operate the Sites and our products and services (e.g., hosting, research and analytics, marketing, customer support, and data enrichment). These third parties may use your Personal Information only as directed or authorized by us and are prohibited from using or disclosing your information for any other purpose, unless otherwise stated.
  • Advertising or Analytics Providers. We may disclose your Personal Information to our third-party advertising or analytics providers. We leverage the tools and Technologies offered by these partners to better understand how our digital Services are used and to continually improve and personalize our Services.
  • Professional Advisors. We may disclose your Personal Information to our professional advisors, such as lawyers and auditors, where necessary in the course of the professional services that they render to us.
  • Affiliates. We may disclose your Personal Information with the Appriss Retail family of companies, including our affiliates, parents, and subsidiaries, including for our administrative purposes, IT management, or for them to provide services to you or support and supplement the Services we provide.
  • Social Networks. Your Personal Information may be disclosed to social networks if you visit our corporate social media accounts by clicking a social media widget from our Sites (e.g., X or LinkedIn).
• Disclosures In the Event of a Merger, Sale or Other Asset Transfer. If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, purchase or sale of assets, or transition of service to another provider, your information may be sold or transferred as part of such a transaction, as permitted by law and/or contract.
• Disclosures to Protect our Company or We may disclose your Personal Information with government entities or in the context of private or public litigation if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement or national security requests and legal process, such as a court order or subpoena; protect your, our, or others’ rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.
• Disclosures With your Consent or at Your Instruction. We may disclose your Personal Information in cases where you instruct us to, or request that we do so, or when providing our Services to or performing a contract with you requires such disclosure.

8. Your Privacy Choices

The privacy choices you have about your Personal Information are determined by your specific circumstances, the context, and applicable law, and are described below.

• Email Communications. If you receive an unwanted email from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails regarding products or Services you have requested. We may also send you certain non-promotional communications regarding us and our Services, and you will not be able to opt out of those communications.
• Tracking Technologies. You can control our use of certain Tracking Technologies in the following ways:
  • Cookie Controls. When you visit one of our Sites that collects Personal Information through Collection Technologies, you will be presented with a banner which offers you a choice about whether to accept or reject our use of cookies and similar tracking technologies, the use of which may constitute a “sale” or “share” of Personal Information under applicable law. If you wish to amend your choices, you can do so by clicking the “Your Privacy Choices” link found in the bottom right footer of our website. Please note that your request to opt-out of sale/sharing will be linked to your browser identifier only. If you use a different computer or Internet browser to access our sites, you will need to renew your cookie management choices.
  • Browser Controls. You may also stop or restrict the placement of certain Technologies in your browser or remove them by adjusting your preferences as your browser permits. These tools are generally available in the help section of browsers. You can also use the quick links, based on the browser type that you are using: Internet Explorer, Google Chrome, Firefox, and Safari.
  • Device Controls. You may opt-out of personalized advertisements on some mobile applications by following the instructions for Android, iOS, and others. Please note that cookie-based opt-outs may not stop all mobile tracking, such as tracking done on mobile
  • Ad Industry Opt-outs. The online advertising industry also provides websites from which you may opt out of receiving targeted ads from data partners and other advertising partners that participate in self-regulatory programs. You can access these and learn more about targeted advertising and consumer choice and privacy by visiting the Network Advertising Initiative, the Digital Advertising Alliance, the European Digital Advertising Alliance, and the Digital Advertising Alliance of Canada. Please note you must separately opt out in each browser and on each device.

9. Your Privacy Rights

We act as a Service Provider to our Retailer customers.  If you are an individual who wants to exercise your privacy rights with respect to Personal Information we process on behalf of a Retailer, please contact the Retailer directly.

In accordance with applicable law, you may have various privacy rights with respect to the Personal Information we collect as a Controller, as outlined below. If you would like to exercise any of these rights, you can do so here: Submit a Request.  Such rights may include:

• Access and Obtain a Copy of your Personal Information, including: (i) confirming whether we are processing your Personal Information; (ii) obtaining access to or a copy of your Personal Information; (iii) receiving an electronic copy of Personal Information that you have provided to us, or asking us to send that information to another company in a structured, commonly used, and machine-readable format;
• Request Correction of your Personal Information where it is inaccurate or incomplete. In some cases, we may provide self-service tools that enable you to update your Personal Information.
• Request Deletion of your Personal Information.
• Request Restriction of or Object to our processing of your Personal Information where the processing of your Personal Information: (i) is based on our legitimate interest for direct marketing purposes; (ii) involves processing or sharing of your sensitive Personal Information for certain non-essential purposes, or in contexts that require your consent; and (iii) for profiling in furtherance of decisions that produce legal or similarly significant effects that concern you;
• Withdraw your Consent to our processing of your Personal Information. Where our processing is based on your consent or subject to your objection, please note that your withdrawal will only take effect for future processing and will not affect the lawfulness of processing before the withdrawal.
• Opt-Out of Your Personal Information Being Used for Certain Purposes, such as: (1) the “sharing” of your Personal Information or (2) the “sale” of your Personal Information (as those terms may be defined by applicable law).
• Submit a Complaint. While we are always willing and eager to listen and respond to your concerns about this Notice or our data practices, at any time you have the right to submit a complaint with the data protection authority or other regulatory body in charge of enforcing data protection laws in your jurisdiction.

We will process such requests in accordance with applicable laws and will not discriminate or retaliate against you for the exercise of any privacy rights granted to you by applicable law.

• Verification Methods. Once you submit a request, we will verify that you are the consumer to which the request pertains by matching the identifying information provided by you (g., name, email address, account-related information) to the information we maintain. Depending on the type of request you submit, we will attempt to match either two or three of the data points you provided.  If we are unable to verify your request with the data points you provided, we may reach out to you for additional information to verify your request.
• Authorized Agent. You can select an “authorized agent” to submit requests on your behalf. We will require the authorized agent to have a written authorization confirming that authority. We may also require you to verify your own identity directly with us. Once your authorized agent is verified, they may submit a request in the typical way described above.

10. Information Security

We take information security very seriously and take steps to ensure that your information is treated securely.   No system is 100% secure, and we cannot ensure or warrant the security of any information you provide to us. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized access, use, disclosure, or loss of Personal Information.

11. Third Party Links and Content

Our Services may contain links to other websites/applications and other websites/applications may reference or link to our Services. These third-party services are not controlled by us. We encourage you to read the privacy policies of each website and application with which they interact. We do not endorse, screen, or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Providing Personal Information to third-party websites or applications is at your own risk.

12. International Data Transfers

All information processed by us may be transferred, processed, and stored anywhere in the world, including, but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live. We endeavor to safeguard your information consistent with the requirements of applicable laws.

13. Information Retention

We retain your Personal Information for the period necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by applicable law. Please note that in many situations we must retain all, or a portion, of your Personal Information to comply with our legal obligations, resolve disputes, enforce our agreements, to protect against fraudulent, deceptive, or illegal activity, or for another one of our business purposes.

14. Changes to This Privacy Notice

We may revise this Privacy Notice from time to time in our sole discretion. If there are any material changes to this Privacy Notice, we will notify you as required by applicable law.

15. Supplemental Disclsures for Specific Jurisdictions

• • United States. Some US states have privacy laws that require specific disclosures and afford residents of those states with additional privacy rights. Please see our Notice at Collection and Supplemental Notice for Residents of Certain States.
  • Europe and the United Kingdom. The table below contains a list of the primary legal bases on which we rely when processing Personal Information from the United Kingdom, the EU and EFTA states.

16. Contact Us

To exercise a privacy right related to data we hold as a Controller, please submit the request to our portal here: Submit a Request

To exercise a privacy right related to data we process on behalf of our Retailer customers, please contact the Retailer directly.

If you have general questions regarding this Privacy Notice or our privacy practices, please contact Appriss Retail’s Privacy Department at privacy@apprissretail.com, or write to us at the following mailing address:

Appriss Retail
Attn: Privacy Department
220 Progress
Suite 175
Irvine, CA 92618
Phone: 1-888-588-0671

17. Notice at Collection and Supplemental Notice for Residents of Certain Other States

California law requires us to disclose the following information with respect to our information practices. If you are a California resident, this section applies to you in addition to the rest of the Privacy Notice.

• • • The “Information We Collect” section identifies the categories of Personal Information we collect, and the “How We Collect Information” details the sources from which we obtain such information.
    • We collect and use Personal Information for the business or commercial purposes described in the “How We Use Information” section above.
    • We disclose the above categories of Personal Information for business or commercial purposes as described under “How We Disclose Personal Information” section above.
    • We retain your Personal Information as described under the “Information Retention” section above.

Our use of certain Technologies may be considered a “sale” or “share” under applicable state laws. The list below summaries the categories of Personal Information that we may sell or share through such Technologies. We do not “sell” or “share” your Personal Information in any other context or as the terms are commonly and we do not knowingly sell or share the Personal Information of consumers under 16 years of age.

• • • Identifiers (Online Identifiers Only)
    • Device Information
    • Internet and Other Electronic Network Activity
    • Inference Information

You can learn how to opt out of the selling or sharing of your Personal Information by visiting our Notice of Right to Opt Out.

Subject to certain limitations, California residents have the privacy rights as outlined above under the “Your Privacy Rights” section above.