The Gazelle Privacy Policy explains how personal information about you is collected, used and disclosed by ecoATM, LLC (doing business as Gazelle) (“Gazelle”, “we” or “us”) when you access and use Gazelle’s websites, applications and services that link to this Privacy Policy (collectively, the “Services”), contact Gazelle’s customer service team, engage with Gazelle on social media or otherwise interact with Gazelle. This Privacy Policy does not apply to any other kiosks, websites or other online or mobile services or applications of ecoATM, LLC or its subsidiaries or affiliates that do not link to this policy. Personal Information Collection Information You Provide to Us. We collect information you provide directly to us. For example, we collect information about you when you: (a) transact with us (e.g., sell, donate, ship, or purchase a device or offer to do any of the foregoing), (b) register to open an account with Gazelle, (c) sign up for special offers; (d) contact us for help or customer support; (e) complete a survey; (f) post content or provide us with feedback; or (g) enter promotions or sweepstakes. The types of personal information we may collect include your name, phone number, address, email address, zip code, payment information, demographic information, and education information. If you enter a contest or sweepstakes, we may collect your social security number. In some cases, we may also collect information you provide about others, such as when you purchase a gift card for someone and request that we deliver it electronically or if you decide to purchase and ship products to someone else. We will use this information to fulfill your requests and will not send communications to your contacts unrelated to your requests unless they separately consent to receive communications from us or otherwise engage with us. Providing certain information is purely optional on your part; however, not all features and services (such as selling, donating or purchasing a device or communicating with us) would be available to you if you elect not to provide any information. Information We Collect Automatically. We automatically collect information about you when you use our Services. For example, we may collect:

• Transactional Data: When you sell, donate, ship, purchase, or otherwise transact using the Services, we collect information about the transaction including device specifications, purchase price, and date and location of the transaction.
• Device Information: We collect information about the device you use to access our Services, including the hardware model, operating system and version, and unique device identifiers.
• Log and Usage Information: We automatically receive and collect information on our server logs from your browser, including your IP address, the Uniform Resource Locator (“URL”) that you just came from, which URL you next go to, browser type, browser language, date and time of your query, Gazelle cookie information, and the pages you request.
• Information Collected by Cookies and Similar Tracking Technologies: We (and our service providers) use different technologies to collect information, including cookies and web beacons. For more information about cookies and how to disable them, see “Cookies and Other Tracking Technologies” below.

Information We Collect From Other Sources. We may collect information about you from third parties, including but not limited to credit bureaus and publicly available sources. Information We Derive. We may derive information or draw inferences about you based on the information we collect. For example, we may make inferences about your location based on your IP address. Use of Personal Information We primarily use your personal information to provide the Services to you. We also use your personal information to: (a) send you marketing messages and to customize, measure, and analyze the advertising and content you see; (b) fulfill any transactions, including your requests for products and services and send you related information (including by text message), such as confirmations, receipts, invoices, updated offers, and customer experience surveys; (c) personalize and improve your experience on our Services and offerings to you; (d) monitor and analyze trends, usage and activities in connection with our Services, including conducting research (for example, we may contact you for feedback about our products); (e) respond to your comments and questions and provide you with customer support; (f) send you technical notices, security alerts and administration messages, including providing you with updates and notices about the Services, our Privacy Policy and terms and conditions; (g) communicate with you regarding the Services; (h) communicate with you about products, services and events and provide you with new, information and offers from us, our affiliates and from third parties that may be of interest to you; (i) facilitate contests, sweepstakes, and promotions and process and deliver entries and rewards; (j) detect, investigate and prevent fraud, security incidents and other malicious, deceptive or illegal activity and, where necessary, to protect the rights and property of ourselves and third parties; (k) comply with our legal, regulatory and financial obligations; (l) diagnose problems with our servers and software, including debugging to identify and repair errors in our Services; and (m) carry out any other purpose described to you at the time the information was collected. Cookies and Other Tracking Technologies We use various technologies to collect information, and this may include placing cookies on your computer. A “cookie” is a small file containing a string of characters that is sent to your computer and stored on your hard drive when you visit a website; many major Web services use them, including to provide useful features for their users. . Most browsers are initially set up to accept cookies. You can usually reset or adjust your browser to remove or refuse all cookies or to indicate when a cookie is being sent; however, if you reject or remove cookies, it could affect the availability and functionality of the Services. Gazelle uses cookies for the following general purposes: (a) to provide you with personalized content and messaging and to provide and improve our Services and your experience; (b) to display the most appropriate advertisements, based on your interests and activity on our web site; and (c) to help us analyze and estimate our traffic and use of features on the Services; and (d) to keep track of items you put into your shopping cart and to alert you if you leave items in your shopping cart. We may also use “pixel tags,” which are small graphic files that can collect information such as the IP address of the computer that downloaded the page on which the tag appears; the URL of the page on which the pixel tag appears; the time (and length of time) the page containing the pixel tag was viewed; the type of browser that retrieved the pixel tag; and the identification number of any cookie previously placed by that server on your computer. We may use pixel tags, either provided by us or by our third party advertisers and ad networks, to collect information about your visit, including the pages you view, the links you click and other actions taken in connection with our sites and Services and use them in combination with our cookies to provide offers and information of interest to you. We also may allow certain analytic services and providers of applications used on the Services (e.g. sharing buttons) to collect information by placing cookies on the Services that will track certain performance of our Services, such as, web traffic, click-throughs, etc., in order to assist us and our service providers in better understanding the interests of our users and to better serve those interests. Third-Party Advertising and Analytics We may use other companies under agreements with us to serve advertisements and provide analytics services on our behalf. These companies may collect and use information about your visits to the Services and other Web sites (including your IP address, web browser, pages viewed, time spent on pages, links clicked and conversion information). This information may be used by Gazelle and others to, among other things, provide advertisements about goods and services likely to be of greater interest to you and to better understand your online activities. These companies typically use cookies, web beacons and/or pixel tags to collect this information. To learn more about behavioral advertising in general and the options that you have, including your option or to opt-out of this type of advertising, you can visit www.aboutads.info/choices or change your settings using the consent management tool on our Services. We may also work with third parties to serve ads to you as part of a customized campaign on third-party platforms (such as Facebook or Instagram). As part of these ad campaigns, we or third-party platforms may convert information about you, such as your email address and phone number, into a unique value that can be matched with a user account on these platforms to allow us to learn about your interests and to serve you advertising that is customized to your interests. Note that the third-party platforms may offer you choices about whether you see these types of customized ads. Personal Information Sharing and Disclosure Gazelle does not share personal information about you with other people or third parties except when we have your permission or at your instruction, or under the following circumstances:

• To vendors, service providers, and consultants who work on behalf of Gazelle and perform services for us, including web hosting, shipping and delivery, payment processing, assisting with promotions, and providing technical services;
• In response to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims;
• When we believe it is necessary to share information in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of Gazelle’s terms of use or to otherwise protect the rights, property and safety of Gazelle, our users, the public or others;
• If we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements;
• With our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests;
• Personal information is shared between and among Gazelle and our current and future parents, affiliates, and subsidiaries and other companies under common control and ownership; and
• In connection with or during negotiations concerning any merger, sale of company assets, financing or acquisition by another company.

We may also share aggregated or de-identified information that cannot reasonably be used by third parties to identify you. Links to Third Party Sites The sites displayed as search results or linked to by the Services are developed by people over whom Gazelle exercises no control. These other sites may place their own cookies on your computer, collect data or solicit personal information. We may present links in a format that enables us to understand whether they have been followed. We use this information to understand and improve the quality of Gazelle’s search technology. Social Media Plug-ins Social media plug-ins of social networks such as Facebook, Twitter, LinkedIn, Yahoo, Windows and Google plus (among others) are integrated on Gazelle’s website. Where Gazelle sites contain a plug-in to a social network, these are clearly marked (e.g. with a Facebook button). If you chose to click on one of these buttons or links, your browser connects directly to the servers of the relevant social network. The social network directly transmits the content of the plugin to your browser. If you are registered on the relevant social network and logged into your respective account the social network receives the information that the web page was used by you. If you interact with a social network plug-in (e.g. you press the Facebook “Like” feature, the Twitter “Tweet this” feature and Google plus “1+” button or equivalent) or drop a comment on the appropriate web page, the corresponding information is directly transmitted to the relevant social network from your browser. If you are not registered with the social network or you are logged out before you visit Gazelle’s website, there is the possibility that at least your IP address will be submitted to and stored by the social network. If you interact with us through a social media platform, plug-in etc. then you may be permitting us to have on-going access to some limited information from your social network profile (such as name, email address, photo, gender, location, the people/sites you follow etc.). If you do not want the social network to collect the information about you described above, or to share it with Gazelle and other third parties, please review the privacy policy of the relevant social network and/or log out of the relevant social network before you visit Gazelle’s site. As with other sites, you may be able delete any existing cookies placed on your computer by the social network via your browser. Your Choices Ability to Edit and Delete Your Account Information Registered users can edit their Gazelle account information, including contact preferences, at any time from their “My Account” account management page which you can find at www.gazelle.com/account/login. You can delete your Gazelle registered account by requesting an account deletion via this Form. You must provide us with the email address of the registered account. After we have confirmed your request, we will delete your account. Email Communications Preferences You will have the opportunity to opt out of receiving promotional email communications at any time by following the instructions set out in those communications. If you opt out, we may continue to send you certain non-promotional email communications relating to the Services, such as (a) communications related to fulfilling a transaction, (b) service announcements, (c) notices regarding Gazelle’s legal terms and this Privacy Policy; and (d) administrative messages, which are considered part of your Gazelle account. You will not have the opportunity to opt-out of receiving such notices. SMS Text Messages Please review our Gazelle Text Message Terms and Conditions here for more information about managing text messages received from us. Transfers of data to the United States and other countries Gazelle is headquartered in the in the United States and we have operations and service providers in the United States and other countries. Therefore, we and our service providers may transfer your personal information to, or store or access it in, jurisdictions that may not provide levels of data protection that are equivalent to those of your home jurisdiction. We will take steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it. Third Parties Gazelle does not control the privacy policies of third parties, and you are subject to the privacy policies of those third parties where applicable. We encourage you to ask questions before you disclose your personal information to others. For more information about each such third party, please refer to the third party’s privacy policy. Changes to this Privacy Policy We may amend this Privacy Policy at any time by posting the amended terms on this site. We will notify you of such changes by revising the date at the top of the policy and in some cases, we may provide you with additional notice to the primary email address specified in your Gazelle account or by placing a notice on our site. Children Gazelle is intended for general audiences. Gazelle does not knowingly collect or maintain information from users under 13, and no part of the Services are targeted to attract anyone under 13. Your CA, CO, CT, DE, IA, MT, NE, NH, NJ, OR and TX Privacy Rights Consumers residing in California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, or Texas are afforded certain additional rights with respect to their personal information under the California Consumer Privacy Act (“CCPA”), the Colorado Privacy Act (“CPA”), the Connecticut Consumer Data Privacy Act (“CTDPA”), the Delaware Personal Data Privacy Act (“DPDPA”), the Iowa Consumer Data Protection Act (“ICDPA”), the Montana Consumer Data Privacy Act (“MTCDPA”), the Nebraska Data Privacy Act (“NDPA”), the New Hampshire Privacy Act (“NHPA”), the New Jersey Data Privacy Act(“NJDPA”), the Oregon Consumer Data Privacy Act (“OCDPA”), and the Texas Data Privacy and Security Act (“TDPSA”). This section applies if you are a resident of California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, or Texas, this section applies to you. Collection of Personal Information. In the last 12 months, we collected the following categories of personal information: identifiers (such as name and contact information, IP address, and government-issued identification number), commercial information (such as time, date and location of a transaction), internet or other electronic network activity information (such as browsing behavior), demographic information (such as data gathered from credit bureaus or from your survey responses), education information, audio, electronic, visual or similar information (such as customer support calls), and inferences we make (such as your approximate location based on IP address). For more details about the personal information we collect, including the categories of sources, please see “Personal Information Collection” above. Use and Disclosure of Personal Information. We collect the categories of personal information listed above for the business and commercial purposes described in “Use of Personal Information.” We share the following categories of information for business purposes with the following categories of recipients:

Category of Personal Information

identifiers commercial information internet or other electronic network activity information demographic information education information audio, electronic, visual or similar information inferences

Categories of Recipients

Our vendors such as shipping and delivery services providers, payment processors, internet services providers, data analytics providers, operating systems and platforms; advertising networks and marketing providers; government entities or law enforcement or service providers acting on their behalf; and social networks. Sales of Personal Information. California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, and Texas law requires that we provide transparency about personal information we “sell,” which for purposes of these laws broadly means scenarios in which we have shared personal information with third parties in exchange for valuable consideration. We do not, and will not, sell your identifying information (such as your name, email address, phone number, or postal address); however, as described above in “Cookies and Other Tracking Technologies” and “Third-Party Advertising and Analytics,” we do allow our advertising partners to use cookies and other technologies to collect personal information about you in order to show you advertisements that are targeted to your interests. In order to opt out of disclosures to these third parties for targeted advertising, please change your settings using the consent management tool on our Services here: Do Not Sell My Personal Information Retention: Personal information we collect may be retained for as long as needed to fulfill legitimate business purposes, including the purposes outlined in “Use and Disclosure of Personal Information”, under the Your California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, and Texas Privacy Rights subsection, or for a time period specifically required or allowed by applicable regulations or laws. Your Consumer Rights: Subject to certain limitations, the CCPA, CPA, CTDPA, DPDA, ICDPA, MTCDPA, NDPA, NHPA, NJDPA, OCDPA, and the TDPSA, provide California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, and Texas consumers the right to request to know, or access in a readily useable format, more details about the categories and specific pieces of personal information we collect, to delete their personal information, to correct their personal information, to opt out of any “sales” that may be occurring, and to not be discriminated against for exercising these rights. California, Colorado, Connecticut, Oregon, and Texas consumers may make a rights request by calling 1-800-429-3553 or visiting this Form.  We will verify your request by asking you to provide identifying information and information related to your recent interactions with us. If you would like to use an authorized agent to exercise your rights, we may request evidence that you have provided such agent with power of attorney or that the agent otherwise has valid written authority to submit requests on your behalf. We will not discriminate against you if you exercise your rights under these laws. Utah Consumer Privacy Act (“UCPA”) Subject to certain limitations, the UCPA provides Utah consumers with the right to request to know, or access in a readily useable format, more details about the categories and specific pieces of personal information we collect, to delete their personal information, to opt out of any sales or targeted advertising that may be occurring, and to not be discriminated against for exercising these rights. Utah consumers may make a rights request by calling 1-800-429-3553 or visiting this page. To exercise your right to opt out of the processing of your Personal Data for purposes of targeted advertising click on the “Do Not Sell My Personal Information” link in our website footer. Virginia Consumer Data Protection Act (“VCDPA”) For the purpose of this section, “Personal Data” means any information that is linked or reasonably linkable to an identified or identifiable natural person. Personal Data does not include de-identified data, publicly available information (as these terms are defined under the VCDPA) or any other Personal Data otherwise excluded from the scope of the VCDPA.If you are a Virginia resident, you may exercise the following rights with respect to your Personal Data:To confirm whether or not we process your Personal Data and request access to such data;

• To delete Personal Data you have provided to us or that we have obtained about you, subject to exceptions;
• To correct inaccuracies in your Personal Data;
• To opt-out of the processing of your Personal Data for purposes of: (i) targeted advertising; (ii) the sale of Personal Data; and (iii) the processing of your Personal Data for certain types of profiling in furtherance of decisions that produce legal or similarly significant effects;
• To obtain a copy of your Personal Data in a portable and, to the extent technically feasible, readily usable format;
• To appeal any decision with regard to your privacy request.

Please note that there are exceptions and limitations to each of the rights listed above. If you are a Virginia resident, to exercise your right to opt out of the processing of your Personal Data for purposes of targeted advertising or the sale of Personal Data, where permitted by law, click here: Do Not Sell My Personal Information To exercise any other privacy rights described above, please submit your request via our online form Notice to Nevada Residents We do not currently sell your covered information as those terms are defined under applicable Nevada law. You may still submit an opt-out request and we will honor that request as required by Nevada law if we were to engage in such a sale in the future. If you are a Nevada resident and would like to opt-out of the sale of your covered information, please submit your request by calling 1-800-429-3553 or visiting this Form. You may also be required to take reasonable steps as we determine from time to time in order to verify your identity and/or the authenticity of the request. Request for Information If you have questions, concerns or suggestions, please feel free to send an email to gaselle@gmail.com Last Update: March 3, 2025