DDC Holdings LLC DBA Sellico (“Sellico,” “we,” “us,” or “our”) is committed to protecting your privacy and safeguarding your personal information.

This Privacy Policy describes how personal information is collected, used, shared, retained, and protected when users access the website (www.sellico.com), the client dashboard (app.sellico.com), and related services (collectively, the “Services”).

When delivering marketing and e-commerce services, Sellico may act both on its own behalf and on behalf of clients as their service provider.

By using the website or Services, users agree to the collection and use of information as described in this Privacy Policy.

1. Information We Collect

The following categories of information may be collected:

• Contact Information (for example, name, business name, email address, phone number, billing address).
• Business & Product Information (for example, store URLs, marketplace accounts, product catalogs, pricing, and creative assets provided).
• Payment Information (for example, payment card details processed via payment providers, billing contact details, and transaction history).
• Campaign & Usage Data (for example, ad performance metrics, order and funnel data, platform analytics, and interactions with dashboards and communications).
• Website & Technical Data (for example, IP address, device identifiers, browser type, pages visited, and other log and analytics data collected through cookies and similar technologies).

2. Legal Basis for Processing

Where required by applicable law, the following legal bases may be relied upon to process personal information:

• Contract: To enter into and perform agreements and deliver the Services requested.
• Legitimate interest: To operate, secure, and improve the Services, run and analyze campaigns, and communicate in a way that does not override user rights and freedoms.
• Legal obligations: To comply with laws, regulations, and valid legal requests.
• Consent: For certain uses, such as some cookies and marketing communications, where consent has been given. Consent may be withdrawn at any time without affecting processing that already occurred.

3. How We Use Information

Personal information may be used to:

• Provide, operate, and support the Services, including onboarding, account administration, and client support.
• Process payments, invoices, and transactions and prevent fraud.
• Plan, launch, optimize, and report on marketing and e-commerce campaigns across platforms and marketplaces.
• Communicate about accounts, campaigns, changes to the Services, and important notices.
• Improve and develop the Services, including training, analytics, quality assurance, and new features.
• Create insights and reports based on campaign performance, and use aggregated or de-identified data to understand trends and improve offerings.
• Send marketing communications where permitted by law, with opt-out available at any time.
• Comply with legal, regulatory, tax, and accounting requirements and enforce agreements.

4. Cookies

Essential, analytics, and marketing cookies and similar technologies may be used on the website and dashboard.

• Essential cookies are needed for the Services to function.
• Analytics cookies help measure usage and improve performance and usability.
• Marketing cookies may be used to show relevant content and measure marketing effectiveness.

Where required by law, consent is obtained for non-essential cookies, and users can manage preferences through the cookie banner or browser settings.

5. Sharing

Personal information is not sold.

Personal information may be shared with:

• Service providers and vendors that help operate the Services, process payments, host data, provide analytics, customer support, security, and marketing tools, under contracts limiting their use of the data.
• Marketplaces, ad platforms, and similar partners when necessary to launch and manage campaigns and fulfill requested services.
• Professional advisors such as lawyers, auditors, and accountants where needed for legitimate business purposes.
• Legal and regulatory authorities where required to comply with law, respond to valid legal process, or protect rights, safety, or property.
• Business transfers such as mergers, acquisitions, financings, or sales of all or part of the business, subject to appropriate safeguards.

6. Controller vs. Processor

Sellico’s role depends on the context of the processing:

• When Sellico decides what personal information to collect and how and why it is used in connection with its own Services, Sellico acts as a data controller.
• When Sellico handles personal information solely on behalf of a client in accordance with documented instructions, Sellico acts as a data processor or service provider.

Where required, data processing or service provider agreements may be entered into with clients to reflect these roles and responsibilities.

7. Data Retention

Personal information is retained for as long as reasonably necessary to:

• Provide and support the Services requested.
• Maintain and administer accounts while active.
• Comply with legal, tax, accounting, and reporting obligations and enforce agreements.

Campaign and performance data is typically retained for approximately three (3) years unless a longer or shorter period is required by law or earlier deletion is requested where feasible.

When personal information is no longer needed, it may be deleted, anonymized, or securely stored in accordance with applicable retention policies.

8. Security

Organizational, technical, and physical safeguards are used to protect personal information from unauthorized access, loss, misuse, or disclosure.

These measures may include access controls, encryption where appropriate, secure development and logging practices, and staff training.

However, no method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

9. Breach Notification

If a data breach occurs that is likely to result in a high risk to user rights and freedoms, notification will be provided to affected individuals and relevant authorities as required by applicable law.

10. International Transfers

Sellico is based in the United States, and information may be processed in the U.S. and other countries where service providers or partners are located.

Where required, appropriate safeguards may be used to protect personal information transferred internationally.

11. Your Rights

Depending on location and applicable law, users may have the right to:

• Access the personal information held about them.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information, subject to certain exceptions.
• Request restriction of or object to certain processing.
• Request a copy of personal information in a portable format, where technically feasible.
• Withdraw consent where processing is based on consent.
• Opt out of marketing communications at any time by using the unsubscribe link in emails or by contacting Sellico.

To exercise these rights, contact sales@sellico.com and include “Privacy Request” in the subject line. Reasonable steps may be taken to verify identity before responding.

12. California Privacy Rights

If a user is a California resident, additional rights may apply under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

These may include the right to:

• Know the categories of personal information collected, used, disclosed, and, if applicable, sold or shared.
• Request access to specific pieces of personal information held.
• Request deletion of personal information, subject to certain exceptions.
• Correct inaccurate personal information.
• Not be discriminated against for exercising privacy rights.

Sellico does not sell personal information and does not share it for cross-context behavioral advertising as those terms are defined under CCPA/CPRA.

California residents may submit privacy requests using the contact details below.

13. Aggregated and De-Identified Data

Aggregated, anonymized, or de-identified data may be created from personal information in a manner that does not identify any individual.

This information may be used and shared for legitimate business purposes such as analytics, benchmarking, and improving the Services.

14. Children

The Services are intended for use by businesses and individuals 18 years of age or older.

Personal information is not knowingly collected from children under 18. If such information is believed to have been collected, contact should be made so appropriate deletion steps can be taken.

15. Third-Party Sites and Services

The Services may contain links to third-party websites, platforms, or services.

Sellico is not responsible for the privacy practices or content of those third parties, and their handling of information is governed by their own privacy policies.

16. Changes to This Policy

This Privacy Policy may be updated from time to time.

When material changes are made, the “Last Updated” date will be revised and additional notice may be provided where appropriate.

Continued use of the Services after the effective date of an updated Privacy Policy signifies acceptance of the changes.

17. Contact

If there are questions about this Privacy Policy or Sellico’s data practices, or if privacy rights need to be exercised, contact:

• Email: sales@sellico.com
• Website: https://www.sellico.com
  
  Last Updated: April 7, 2026