Appriss Retail Privacy Notice

Last Updated: May 7, 2026

1. Scope

This Privacy Notice describes how Appriss Retail Holdings, Inc. (“Appriss Retail”) and its family of companies (collectively, “we,” “us,” or “our”) collect, use, disclose and otherwise process information that identifies you (“Personal Information”) in its capacity as a business or “controller”.  

This Privacy Notice applies to Personal Information processed by us, both online and offline, including through our website www.apprissretail.com and other websites and digital properties that link to this Privacy Notice (any linked, online property, a “Site” and collectively, the “Services”). 

2. Appriss Retail as a Service Provider

This Privacy Notice does not apply to Personal Information we process on behalf of our customers. We refer to our customers as “Retailers” for the purpose of this Privacy Notice. Retailers may license our products and services on behalf of themselves, or the other store brands affiliated with the Retailer. When processing information on behalf of a Retailer, Appriss Retail is acting as a “Service Provider” (sometimes referred to as a “Processor”). Personal Information we process on behalf of our Retailers is subject to the terms of separate written contracts we enter to provide services to those Retailers.  

If you are an individual who wants to exercise your privacy rights with respect to Personal Information we process on behalf of a Retailer, please contact the Retailer directly.  

3. Information We Collect as a Controller

Appriss Retail acts as a Controller of data only in the business-to-business context or with respect to our own employees. 

The categories of Personal Information we collect depend on how you interact with us and our Services: 

• Identifiers, such as name, email address, physical address, phone number, social media profile information, usernames, online identifiers (e.g., marketing ID or cookie identifier), or other similar identifiers.   

• Professional Information, such as your employer, job title, business contact information, areas of expertise, or other information about your affiliated organization. 

• Device Information, such as your IP address, device type, operating system and version, MAC address, user settings, carrier information, or browser type. 

• Internet or Other Electronic Network Activity, such as browsing history, search history pages visited before and during use of our Services, information on your interaction with us and use of our services, including links clicked, content interacted with, and frequency and duration of activities.  

• Preferences, such as your stated interests, newsletter frequency preferences, or other communication preferences. 

• Inferences drawn from other information we collect to create a profile reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, or aptitudes. 

We do not intentionally collect Sensitive Personal Information (as defined under applicable law, including, but not limited to, precise geolocation, racial or ethnic origin, biometric data, health data, or financial account information) through our Sites in our capacity as a Controller. If such data is inadvertently submitted, please Contact Us. 

4. How We Collect Information as a Controller

• Directly from you, when you request information about our products or services, use our “Talk With Us”, or register for our webinars or events. 

• Automatically through our Services, including usage data (features used, content viewed, navigation paths) device data (operating system, browser type, IP address), and through cookies and similar technologies. 

• From other sources, such as social networks (when you grant permission), third-party business partners, and publicly available sources. 

5. Online Technologies Used to Collect Information as a Controller

We and third party providers may use cookies, pixel tags, and similar technologies (“Technologies”) to collect information automatically. These Technologies are described in our Cookie Notice. Categories include: 

• Essential Technologies: Required for Site operation, security, and fraud prevention. 

• Marketing-Related Technologies: Used to market our Services and deliver relevant commercial messages (e.g., Google DoubleClick ).  

• Performance and Analytics Technologies: Used to assess how our Services are used (e.g., Google Analytics). 

• Functionality Technologies: Support enhanced features, including remembering preferences. 

• Fraud and Abuse Prevention Technologies: Used to identify bot activity and protect our Sites. 

• Social Media Platforms: We maintain corporate social media accounts; interactions with those platforms are governed by the relevant platform’s privacy policy. 

Our use of certain technologies to display advertisements about our products to you on nonaffiliated websites, applications, and online services is considered “targeted advertising.” When we engage in those activities, we sell personal information to third-party advertisers and analytics companies.  Please see our cookie notice for more information on our use of these technologies and notice of right to opt out of sale/sharing/targeted advertising to opt out of sales and targeted advertising.  

6. How We Use Information as a Controller

• To provide our Services: To fulfill contracts, operate and improve our products and services. 

• To communicate with you: Regarding products and services your organization uses or has expressed interest in. 

• For research and analytics: To conduct market research, understand Site usage, and improve our Services. 

• For marketing and advertising: To send tailored communications and assess the effectiveness of our marketing. 

• For administrative purposes: To respond to inquiries, send technical notices, and manage our business. 

• For legal, fraud prevention, and safety purposes: To protect against harm, comply with legal obligations, and respond to legal process. 

• To create de-identified or aggregated data: We may de-identify Personal Information for business analytics and improvement purposes. We do not attempt to re-identify de-identified data. 

• We do not use Personal Information to train artificial intelligence or machine learning models.  

• For other purposes with your consent or as permitted by law. 

7. How We Disclose Information as a Controller

We may disclose Personal Information to the following categories of recipients:  

• Service Providers: Third-party companies that provide services on our behalf (e.g., hosting, analytics, marketing, customer support). These parties are authorized to use your Personal Information only as directed by us. 

• Advertising and Analytics Providers: Third-party partners whose tools we use to understand and improve our digital Services. 

• Professional Advisors: Lawyers, auditors, and similar professionals providing services to us. 

• Affiliates: Members of the Appriss Retail family of companies, including parents and subsidiaries. 

• Social Networks: If you interact with social media widgets on our Sites. 

• In Business Transactions: If we are involved in a merger, acquisition, reorganization, bankruptcy, or asset transfer, your information may be transferred as permitted by law and contract. 

• For Legal and Safety Purposes: To comply with legal obligations, respond to legal process, protect rights and property, or assist in investigations of suspected illegal activity. 

• With Your Consent or at Your Instruction. 

• The categories of Personal Information we disclose to each category of recipients are as follows: (i) Service Providers: all categories listed in Section 3; (ii) Advertising and Analytics Providers: Identifiers (online only), Device Information, Internet Activity, and Inferences; (iii) Professional Advisors: Identifiers and Professional Information only; and (iv) Affiliates: all categories as needed for the stated purpose. 

8. Automated Decision-Making Technology (ADMT)

Appriss Retail may use automated or algorithmic tools that process Personal Information to support business operations, including fraud detection, lead scoring, and analytics. To the extent any such tools meet the definition of “Automated Decision-Making Technology” (“ADMT”) under applicable law, meaning they replace or substantially replace human decision-making with respect to significant decisions affecting individuals, we will provide additional disclosures as required. 

Currently, our Sites and Services are directed to business contacts and employees; we do not use ADMT to make significant decisions about consumers in the context of our Controller activities, and we do not use Personal Information to train artificial intelligence or large language model systems. If either of these practices change, we will update this Privacy Notice and provide required pre-use notices, opt-out rights, and access to information about the ADMT’s logic and effects, as required under applicable laws. 

If you believe ADMT has been used to make a significant decision about you and wish to exercise applicable rights, please Contact Us. 

9. Your Privacy Choices

The privacy choices you have about your Personal Information are determined by your specific circumstances, the context, and applicable law, and are described below. 

• Email Communications: Use the unsubscribe link in any marketing email to opt out of future marketing communications. Transactional and administrative emails are not subject to opt-out. 

• Cookie Controls: When you visit our Sites you will be presented with a cookie consent banner. You may modify your choices at any time by clicking the “Your Privacy Choices” link in the footer of our website. Note that your opt-out is browser-specific; you will need to renew your choices if you use a different browser or device. 

• Global Privacy Control (GPC): We honor opt-out preference signals transmitted via GPC. Upon receipt of a valid GPC signal, we will process your opt-out of sale/sharing/targeted advertising and will confirm that your opt-out has been processed. GPC must be enabled separately for each browser and extension you use. 

10. Your Privacy Rights

We act as a Service Provider to our Retailer customers.  If you are an individual who wants to exercise your privacy rights with respect to Personal Information we process on behalf of a Retailer, please contact the Retailer directly.  

In accordance with applicable law, you may have various privacy rights with respect to the Personal Information we collect as a Controller.  For example, California, Colorado, Connecticut, Delaware, Minnesota, New Jersey, Oregon, Texas, and other states have passed privacy laws. If you are a California resident, please see our Notice to California Residents.  For other state residents or residents of other countries, such rights may include: 

• Access and Copy: Confirm whether we are processing your Personal Information; obtain a copy; or receive it in a portable, machine-readable format; 

• Correction: Request that inaccurate or incomplete Personal Information be corrected. 

• Deletion: Request Deletion of your Personal Information, subject to applicable exceptions. 

• Restriction or Objection: Request restriction to or objection to processing, including direct marketing or profiling.  

• Opt-Out of Sale or Sharing: Opt out of the “sale” or “sharing” of your Personal Information. 

• Opt-Out of Targeted Advertising: Opt out of the processing of your Personal Information for targeted advertising. 

• Opt-Out of Profiling: Opt out of profiling in furtherance of solely automated decisions that produce legal or similarly significant effects. 

• Right to Obtain List of Third Parties (Minnesota and Oregon residents): Obtain a list of specific third parties to which we have disclosed personal data.  

• Right to Review Profiling Data (Minnesota residents): If you are a Minnesota resident and your Personal Information is profiled in furtherance of decisions that produce legal or similarly significant effects concerning you, you have the right to question the result of the profiling, to be informed of the reason that the profiling resulted in the decision, and if feasible, to be informed of what actions you might have taken to secure a different decision (and the actions that you might take to secure a different decision in the future). If applicable, you also have the right to review the Personal Information used. If that information is inaccurate, you may request correction and the profiling reevaluated based upon the corrected data. 

• Withdraw Consent: Where processing is based on your consent withdraw that consent at any time (without affecting the lawfulness of prior processing). 

• Right to Appeal: If we deny your privacy rights request in whole or in part, you may appeal our decision by submitting a written appeal to privacy@apprissretail.com.   

• Submit a Complaint. While we are always willing and eager to listen and respond to your concerns about this Notice or our data practices, at any time you have the right to submit a complaint with the data protection authority or other regulatory body in charge of enforcing data protection laws in your jurisdiction.   

If you would like to exercise your right to opt out of sales or sharing, or targeted advertising, you can do so here: Notice of Right to Opt Out of Sale/Sharing/Targeted Advertising.  If you would like to exercise any of your other rights, you can do so here: Submit a Request. We will process such requests in accordance with applicable laws and will not discriminate or retaliate against you for the exercise of any privacy rights granted to you by applicable law. 

You may designate an authorized agent to submit requests on your behalf. If legally required, we will comply with your request upon verification of your identity and, to the extent applicable, the identity of the individual on whose behalf you are making such request. To do so, we will ask you to verify data points based on information we have in our records.  

11. Information Security

We take reasonable and appropriate technical and organizational measures to protect your Personal Information against unauthorized access, disclosure, alteration, or destruction. No system is completely secure, and we cannot guarantee the absolute security of your information. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized access, use, disclosure, or loss of Personal Information. 

12. Third Party Links and Content

Our Services may contain links to other websites/applications not controlled by us. We are not responsible for the privacy practices or content of those third-party services. We encourage you to review the privacy policies of any website or application with which you interact. 

13. International Data Transfers

Personal Information we collect may be transferred to, processed in, and stored in the United States or other countries, which may have data protection laws different from those in your country of residence. We take steps to ensure your Personal Information receives appropriate protections consistent with applicable law. 

14. Information Retention

We retain Personal Information for the period necessary to fulfill the purposes described in this Notice, unless a longer retention period is required or permitted by applicable law. Criteria we use to determine retention periods include: (i) the duration of our business relationship with you or your organization; (ii) our legal or contractual obligations to retain information; (iii) applicable statutes of limitations; (iv) the purposes for which the information was collected; and (v) whether a longer period is necessary to resolve disputes or enforce our agreements. 

15. Changes to This Privacy Notice

We may revise this Privacy Notice from time to time. If we make material changes, we will notify you via a prominent statement on our homepage and/or by email to the address on file, as required by applicable law, and will post an updated Notice on our Sites with a revised Last Updated date.  

16. Supplemental Disclsures for Specific Jurisdictions

Europe and the United Kingdom Legal Bases for Processing 

If you are located in the EU, EEA, or United Kingdom, the following table identifies the primary legal bases on which we rely when processing your Personal Information: 

16. Contact Us

To exercise a privacy right related to data we hold as a Controller, please submit the request to our portal here: Submit a Request 

To exercise a privacy right related to data we process on behalf of our Retailer customers, please contact the Retailer directly.  

For general questions regarding this Privacy Notice or our privacy practices: 

Email: privacy@apprissretail.com  

Mail: Appriss Retail, Attn: Privacy Department, 695 Town Center Drive, Suite 1100, Costa Mesa, CA 92626 

Accessibility:  If you have a disability that prevents access to this Notice, please contact us at ada@apprissretail.com. We will provide this Notice in an alternative format upon request.