Changes to Privacy Policy

We may update this Privacy Policy periodically, including to reflect changes in our practices or for other operational, legal, or regulatory reasons. Upon such updates, we will post the revised Privacy Policy on the Marketplace. Continued use of the Marketplace after updates constitutes your acceptance to the changes.

Collection and Use of Personal Information

We collect personal information about you from various sources depending on your interaction with us. “Personal information” refers to data that uniquely identifies, relates to, describes, or can be linked to you.

The following sections outline the categories and specific types of personal information we collect.

Information You Provide Directly:

• Contact Information: Name, email, address, and phone number
• Account Information: Username, password, security questions
• Order Information: Purchase details, billing and shipping addresses, and payment confirmation
• Shopping Activity: Products viewed, added to cart, purchase history
• Support Communications: Messages and attachments you submit to us
• Seller Information: Business name, Tax ID, product listings

Information Automatically Collected:

We collect information about your interactions with the Marketplace using cookies, web beacons, and similar technologies, including:

• Device type and browser
• IP address and geolocation
• Pages visited and actions taken
• Log and transaction data

Information from Third Parties:

We may receive personal information about you from service providers, shipping carriers, analytics platforms, and advertising partners.

These may include payment processors (e.g., Stripe, PayPal, Adyen, BlueSnap, Payroc), marketing vendors, and data enhancement partners.

Our payment processors collect payment information, including bank account, credit, or debit card information and billing address, to process your payment and fulfill your orders.

We are not responsible for the accuracy of third-party information or their policies.

Sharing and Use of Information

Ridgerunner shares Personal Information and Proprietary Business Information only as necessary to operate the Marketplace, facilitate transactions, fulfill orders, provide customer support, and comply with legal obligations.

• Sellers and merchants from whom a purchase is made
• Payment processors and financial institutions
• Logistics, shipping, and fulfillment providers
• Cloud, infrastructure, and technology service providers and infrastructure partners

All such parties are contractually required to use Personal Information only for authorized purposes and to maintain appropriate data protection safeguards.

Sellers and vendors receiving shopper information are responsible for complying with applicable data protection and privacy laws. Ridgerunner may impose contractual or platform-based requirements governing such use.

User Generated Content

The Services may allow you to post seller/business or product reviews and other user-generated content.

If you choose to submit user-generated content to any public area of the Services, it will become public and accessible to anyone.

We cannot control who will have access to the information you choose to share and cannot guarantee privacy or security once disclosed.

Ridgerunner is not responsible for:

• misuse of publicly shared data
• third-party access to your content
• downstream use of your information

How We Use Your Personal Information

We use your personal information to provide you with the Services, which includes:

• Facilitating transactions between buyers and sellers
• Processing payments via third-party processors
• Enabling order fulfillment by Vendors
• Sending notifications about your account, purchases, returns, exchanges, and transactions
• Creating, maintaining, and managing your account
• Facilitating shipping and returns (through Vendors)
• Enabling reviews and user participation

We use your personal information for customer support, including assisting with shipping inquiries, return coordination, and dispute communication between users and Vendors.

Ridgerunner acts solely as a facilitative platform and does not control or guarantee outcomes of transactions, shipping, or returns.

We use your personal information for:

• Marketing and promotional communications
• Advertising and personalization
• Analytics and platform improvements
• Fraud detection and prevention
• Legal and regulatory compliance

Cookies & Other Tracking Technology

We use cookies to:

• Operate and improve the Marketplace
• Enhance user experience
• Analyze usage
• Enable secure transactions

We may allow third parties to use cookies for analytics and advertising.

Blocking cookies may impact functionality and does not prevent all data sharing.

How We Share Your Personal Information

Ridgerunner does not sell Personal Information to third parties. We may share your personal information:

With Vendors

• Only as necessary to complete transactions
• Limited to fulfillment, shipping, and order-related functions

With Service Providers

• Payment processors (Adyen, Stripe, PayPal, BlueSnap, Payroc)
• Cloud providers
• Analytics platforms
• Customer support systems

With Legal and Compliance Authorities

• When required by law
• To enforce Terms
• To protect rights and safety

With Business Partners

• For operational and marketing purposes

Ridgerunner does not control third-party data usage and is not liable for their actions.

Where Ridgerunner processes Personal Information on behalf of business users, such processing may be governed by a Data Processing Addendum.

These service providers and partners act as data processors or independent controllers, as applicable.

De-Identified Data

We may collect, create, and use data that has been aggregated, anonymized, or otherwise processed so that it cannot reasonably be used, alone or in combination with other information, to identify any individual, business, or specific transaction (“De-Identified Data”).

We:

• Maintain such data in de-identified form
• Do not attempt to re-identify such data
• Require third parties receiving such data to agree not to attempt re-identification

De-Identified Data is not considered Personal Information.

Ridgerunner will not attempt to re-identify such data except as permitted by applicable law.

Platform Intelligence and Analytics

We may generate anonymized and aggregated insights derived from platform activity (“Platform Intelligence”), including insights related to product demand, pricing trends, supply and demand dynamics, and fulfillment performance.

• Improve marketplace efficiency
• Optimize matching of buyers and sellers
• Enhance pricing and operational strategies
• Develop, train, improve analytics, data-driven services, including artificial intelligence and machine learning systems

Platform Intelligence does not include Personal Information or Proprietary Business Information.

Platform Intelligence is derived from De-Identified Data and does not identify any individual or business.

Commercial Use of De-Identified Data

We may use, commercialize, license, and share De-Identified Data and Platform Intelligence for lawful business purposes, provided such data remains de-identified.

Third Party Sites

Our Marketplace may provide links to websites or other online platforms operated by third parties. If you follow these links to sites not affiliated or controlled by us, please review their privacy and security policies, as well as other terms and conditions. We do not guarantee or are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of the information found on them. Furthermore, information you provide on public venues, may be visible to other users of the Marketplace or those third-party platforms without any restrictions on its use by us or by a third party. Our inclusion of these links does not imply any endorsement of the content on these platforms or their owners or operators.

Data Security and Retention

We implement commercially reasonable safeguards to protect your data. Payment information is handled by third-party processors using encryption. Be aware that no security measures are impenetrable, and we cannot guarantee “perfect security.” Any information you send to us may not be secure during transit, so we strongly advise against using unsecured channels to communicate sensitive or confidential information with us. The duration of our retention of your personal information varies depending on various factors, such as our need to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce applicable contracts and policies. Users are responsible for safeguarding their account credentials. Users may request account deletion, subject to applicable laws and regulations governing such information.

HOWEVER:

• No system is completely secure
• Data transmission risks exist
• Ridgerunner does not guarantee absolute protection

Data is retained as necessary for:

• Service delivery
• Legal compliance
• Dispute resolution
• De-Identified Data may be retained indefinitely

Users are responsible for safeguarding account credentials.

User Rights

Depending on where you live and the laws subject to you, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

You may have a right to request access to personal information we hold about you, including details about how we use and share it.

You may have the right to request that we delete personal information we maintain about you.

You may have the right to request that we correct inaccurate personal information we maintain about you.

You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party under certain circumstances and with certain exceptions.

Right to opt out of sale, sharing, or targeted advertising. You may direct us not to “sell” or “share” your personal information or opt out of targeted advertising, as defined in applicable privacy laws.

You may have the right to request that we cease or limit our processing of your personal information.

Where we rely on consent to process your personal information, you may have the right to withdraw this consent.

You may have a right to appeal our decision if we decline to process your request.

We may send you promotional emails that you can opt out of at any time by using the unsubscribe option displayed in our emails. If you opt out, we may still send you non-promotional emails, such as those about your account or orders you’ve made.

You may exercise any of these rights as indicated on our Marketplace or by contacting us using the provided contact details. Before providing a substantive response to your request, we may need to collect information from you, such as your email address or account information, to verify your identity. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof of your authorization and may need you to verify your identity directly with us. We will respond to your request in a timely manner as required by applicable law.

Children’s Privacy

The Marketplace is not intended for children under the age of 18, and we do not knowingly collect personal information from them. If you are the parent or guardian of a child who has provided us with their personal information, please contact us using the provided contact details to request its deletion.

California Privacy Notice

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA/CPRA):

• Right to know what personal information we collect and how we use it
• Right to request access or deletion of your data
• Right to opt out of the sale or sharing of your personal data
• Right to limit use of sensitive personal information (if collected)
• Right to non-discrimination for exercising your rights

To exercise your rights, email us at Privacy@ridgerunner.com or click the “Do Not Sell or Share My Personal Information” link available on the Marketplace.

International Users

We may transfer, store, and process your personal information outside your country of residence, including the United States. This information is also processed by our staff and third-party service providers and partners in these countries. If we transfer your personal information out of Europe, we will rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses or any equivalent contracts issued by the relevant competent authority of the UK, as applicable, unless the data transfer is to a country that has been determined to provide an adequate level of protection.