Temu | U.S. | Privacy Policy Addendum for U.S. Residents

This Privacy Policy Addendum for U.S. Residents (“U.S. Notice”) supplements the Temu Privacy Policy (“Privacy Policy”) and the Cookies and Similar Technologies Policy and provides additional details for residents of certain U.S. states on how we collect, use and disclose Personal Information, and the rights such residents may have with respect to that Personal Information.

For purposes of this U.S. Notice, “Personal Information” has the meaning given in the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”), as well as the meaning given to “personal data” under other U.S. state privacy laws. Unless otherwise specified, Personal Information includes “sensitive personal information” as defined by the CCPA and “sensitive data” as defined by other U.S. state privacy laws.

Collection of Personal Information

We collect and have collected in the past twelve (12) months the following categories of Personal Information:

• Identifiers, such as name, postal address, telephone number, unique personal identifier (e.g., device ID), online identifier, internet protocol (IP) address, email address or other similar identifiers;

• Customer Records, such as your account and profile information and customer records that contain Personal Information, such as username, name, email, telephone number, account credentials, communications preferences, billing and payment information, customer service and support tickets and records, and other information individuals provide us in order to register for, access, or make purchases via the Service;

• Customer Delivery Information, such as your shipping address, and consignee contact information;

• Commercial Information, such as order information or purchase history;

• Payment Information, such as financial details and payment method;

• Internet/ Network Activity Information, such as browsing history, search history, and information regarding a consumer’s interaction with the Service, or advertisements;

• General Location, based on IP address;

• Inferences, such as estimated advertising conversion information about your interaction with advertisements;

• Audio and Video Information, such as videos and/or audio you provide to our customer service team, and videos you provide for product reviews; and

• Sensitive Personal Information, including account log-in information, health data, contents of mail, email, and text messages.

Details of the categories of sources of Personal Information that we collect are described in the “What Information We Collect” section of our Privacy Policy. The purposes for which we use these categories of Personal Information are described further in the “How and Why We Use Your Information” section of our Privacy Policy.

Processing of Personal Information

The following table describes our collection, use, and disclosure of Personal Information currently and during the past twelve (12) months. Please note that the categories of Personal Information collected and the examples of information disclosed to third parties vary based on the nature of your interactions with us. For instance, Customer Delivery Information applies only to users who have made a purchase through our Service. To learn more about the categories of Personal Information that we collect, please see the “Collection of Personal Information” section above and the “What Information We Collect” section of our Privacy Policy. Details of the categories of third parties are described further in the “How and Why We Share Your Information” section of our Privacy Policy. Our relevant data retention practices are addressed in the “Data Security and Retention” section of our Privacy Policy. Additionally, we will not attempt to re-identify de-identified information that we derive from Personal Information, except for the purpose of determining whether our deidentification process satisfies legal requirements.

The Sale and Sharing of Personal Information

Temu uses services that employ cookies and similar technologies to collect Personal Information (including certain identifiers and internet activity information described in the “Collection of Personal Information” section above) about your use of our websites and other online services over time, which helps us to deliver targeted advertisements. In addition, we may share certain categories of Personal Information described in the table of the “Processing of Personal Information” section with our advertising and analytics partners, as well as business and marketing partners with whom we collaborate on marketing events and/or promotion of the Service for targeted advertising purposes. For example, we may share identifiers including your email address and telephone number with our advertising and analytics partners (in hashed form) and business and marketing partners. Our use of some of these services may constitute the “sale” or “sharing” of Personal Information (as defined by the applicable U.S. state privacy laws) to/with third party advertisers. We do not knowingly sell or share (as defined by the applicable U.S. state privacy laws) the Personal Information of minors under 16 years of age.

Your Privacy Rights

Depending on the state you live in, you may have some or all of the rights listed below and any additional rights granted by applicable U.S. state law in relation to Personal Information that we have collected about you. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law.

• Right to Know / Access. The right to request information about the categories of Personal Information we collect, the categories of sources from which we collect Personal Information, the purposes for which we process Personal Information, the categories of third parties, or a list of specific third parties, to whom we disclose your Personal Information, and a copy of the Personal Information that we have collected about you.

• Right to Delete. The right to request that we delete Personal Information we maintain about you.

• Right to Correct. The right to request that we correct inaccurate Personal Information we maintain about you.

• Right to Opt Out of Sale or Sharing. The right to opt out of selling your Personal Information and sharing your Personal Information for targeted advertising.

• Right to Opt Out of Targeted Advertising. The right to opt out of the processing of your Personal Information for the purposes of targeted advertising.

• Right to Opt Out of Profiling. The right to opt out of the processing of your Personal Information for profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. However, Temu does not engage in such profiling as defined by applicable U.S. state laws.

You may exercise these rights via our privacy choices web form or by contacting us using the contact information provided in the “How to Contact Us” section below. We will not discriminate against you for exercising any of these rights. For certain rights, we may need to collect information from you to verify your identity before providing a substantive response to the request. Depending on your location, you may designate, in writing or through a power of attorney document, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. In the event that your request is denied, you may have the right to appeal our decision regarding a request related to these rights by contacting us using the email provided in the “How to Contact Us” section below.

You may also be able to set your browser to transmit a “global privacy control” (“GPC”) signal or another approved “universal opt-out mechanism” to opt out of “selling” and “targeted advertising” (as defined by applicable U.S. state law). If you notify us of your preference through GPC, we will honor your request for the browser or device that sends the GPC signal. If you do not have an account or are not logged into your account, your request to opt out through the GPC will not apply to any account information. Please note that if you return to our website from a different device, or from a different browser on the same device, you may need to apply the GPC or other signal for that browser and/or device as well. To learn more about GPC, you can visit https://globalprivacycontrol.org/.

Additionally, some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals.

For the latest details of the privacy right requests we received and processed in the United States, please click here.

Sensitive Personal Information

Temu neither uses nor discloses Sensitive Personal Information (as defined by the CCPA) for purposes other than those expressly permitted under California Civil Code § 1798.121 and California Code of Regulations § 7027(m). For example, Temu does not collect or process your Sensitive Personal Information to infer characteristics about you.

Notice of Financial Incentive

We may offer certain promotions, such as our referral programs, where you can refer friends to earn rewards. These promotions provide certain perks, including rewards, exclusive offers, sweepstakes, contests, or other similar promotional campaigns.

When you participate in these promotions and use our services, you may need to provide contact information (such as email address, telephone number, or third-party login information). Since the above process involves the collection of Personal Information and offering of certain benefits, we might be considered to be offering a “financial incentive” (as such term is defined by applicable Californian law) in California. We have not assigned a monetary value to the data we collect through or in connection with the above promotions; however, based on our good faith reasonable estimate, the value we receive from your Personal Information is reasonably related to the value of the “financial incentive” we provide to individuals who participate in these promotions.

To withdraw from referral programs, you may stop participating or email us at privacy@temu.com.

How to Contact Us

Should you have any questions about our privacy practices or this U.S. Notice, please email us at privacy@temu.com or contact us by mail at the following address: Whaleco Inc., Suite 355, 31 St. James Avenue, Boston, Massachusetts 02116, USA.