Brazil

What Information We Collect

Information that you provide

When you register a Temu account in Brazil, we do not utilize facial recognition technology to verify your identity, and therefore Our Face Verification Processing notice is not applicable to you.

Information from third-party sources

We may collect tax information and documents (e.g., Inscrição Estadual, Cadastro Nacional da Pessoa Jurídica, Nota Fiscal Eletrônica de Serviços) from our service providers to prevent fraud and provide the Service.

Your Rights as a Data Subject

In addition to the rights provided in the “Your Rights and Choices” section of the Privacy Policy, you have the following rights which can be exercised in accordance with applicable law:

• right to confirm the existence of the processing;

• right to anonymization, blocking or erasure of unnecessary or excessive data or data processed in noncompliance with the provisions of the applicable law;

• right to data portability;

• right to information about public and private entities with which Temu has shared your personal information;

• right to information on the possibility of not giving consent and the consequences of such refusal;

• right to object to unlawful processing based on legal grounds other than consent;

• right to revoke consent; and

• right to petition the National Data Protection Authority (ANPD).

Legal Basis

Applicable data protection laws require a legal basis for our use of personal information. Our legal basis varies depending on the specific purpose for which we use your personal information. We use:

• Performance of a contract. We process your personal information as necessary to perform the contracts you enter into with us (such as the Temu Seller Services Agreement) when you register for, access or use our Service. This includes when we use your personal information to develop, improve, support, and provide the Service, allowing you to use the Service.

• Legitimate interests. We use your personal information where necessary for the purposes of the legitimate interest pursued by us or third parties and/or our customer. This includes when we optimize features, analyze performance metrics, fix errors, improve the Service and our business, and detect and prevent fraud and abuse in order to protect the security of our customers, ourselves, or others.

• Your consent. We process your personal information when you have given us your prior consent for a specific purpose that we communicate to you. When you consent to our processing your personal information for a specified purpose, you may withdraw your consent at any time, and we will stop processing your data for that purpose. Your withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal (please note, however, that we may still be entitled to process your personal information if we have another legal basis other than consent for doing so).

• Compliance with a legal obligation. We may use your personal information where it is necessary for compliance purposes and to comply with the applicable laws, as described in the “How and Why We Process Your Information” section.

• These and other legal bases depending on the purposes we described in the “How and Why We Process Your Information” section in accordance with applicable laws.

We store the information described in the “What Information We Collect” section in servers located in the United States.

If you have any questions or comments about the Privacy Policy, your personal information, or to exercise one of your legal rights in relation to that personal information, please send an email to Temu’s Data Protection Officer using the details set out in the “Contact Us” section in the Privacy Policy.