California

For purposes of the Privacy Policy, “personal information” has the meaning given in the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”), as well as the meaning given to “personal data” under other U.S. state privacy laws. Unless otherwise specified, personal information includes “sensitive personal information” as defined by the CCPA.

If you are a California resident, this section provides more details on how we collect, use and disclose personal information of California residents in operating our business, and your rights with respect to your personal information.

Collection of Personal Information

We collect and have collected in the past twelve (12) months the following categories of personal information:

• Identifiers, such as your name, contact information, and unique personal identifiers (e.g., device ID);

• Demographic information, such as your date of birth;

• Biometric information. We may, subject to your consent, collect images of your face for identity verification and fraud-prevention purposes;

• Commercial information, including transactions (such as order details and transaction history) that you perform on Temu;

• Internet/network activity information, such as information about your interactions with and use of Temu Service, and your interactions with advertisements and our emails;

• General geolocation information, based on IP address;

• Audio and video information, such as videos and/or audio you provide to our seller support team;

• Professional or employment-related information, such as information about your position or role in your company;

• Inferences about you based on the information we collect; and

• Sensitive personal information, such as government identification numbers, biometric information, account login credentials, and financial account information.

We collect such information for the purposes described below, which may include:

• Creating and maintaining your account;

• Verifying your identity and preventing fraud;

• Processing orders, payments, and delivery;

• Improving, optimizing, and maintaining our services;

• Communicating with you;

• Administering contests and other promotions;

• Marketing to you;

• For advertising purposes;

• Maintaining the security of our platform; and

• Legal compliance, complying with legal requests and investigations as we deem reasonable, and protecting the rights of you, us, and others.

Details on these purposes are described further in the “How and Why We Process Your Information” section of the Privacy Policy. Details of the categories of sources of personal information that we collect are described further in the “What Information We Collect” section of the Privacy Policy. Please note that the categories of personal information collected and the examples of information disclosed to third parties vary based on the nature of your interactions with us.

Categories of Personal Information Disclosed for Business Purposes

We disclose and have disclosed in the past twelve (12) months the following categories of personal information for business purposes to the categories of third parties listed below. Details of the categories of third parties are described further in the “How and Why We Share Your Information” section of the Privacy Policy.

• We disclose identifiers with service providers, payment processors, advertising partners and business and marketing partners;

• We disclose demographic information with service providers and payment processors;

• We disclose commercial information with service providers and payment processors;

• We disclose internet/network activity information with service providers and advertising partners;

• We disclose audio and video information with service providers;

• We disclose professional or employment-related information with service providers and payment processors; and

• We disclose sensitive personal information with service providers and payment processors.

Categories of Personal Information “Sold” or “Shared”

Temu collects personal information (including certain identifiers and internet/network activity information described in the “Collection of Personal Information” section above) about your interactions with the Service over time, which help us to measure the effectiveness of the advertisements shown to you to promote the Service on third party platforms and websites. In addition, we may share, including via cookies and similar technologies, the relevant categories of personal information described in the table below with our advertising partners to optimize the effectiveness of our advertisements presented on third party platforms and websites. Our use of some of these services may constitute the “sale” or “sharing” of personal information (as defined under the CCPA) to/with third party advertising partners.

The following table lists the categories of personal information that are “sold” or “shared”, and have been “sold” or “shared” in the past twelve (12) months as defined by the CCPA, and the categories of third parties who receive such information. Details of the categories of third parties are described further in the “How and Why We Share Your Information” section of the Privacy Policy. We have not sold or shared the personal information of Sellers under the age of 16.

You may opt-out of such sales or sharing by clicking on “Your Privacy Choices” in the footer of our website. Alternatively, you can set your browser to transmit a “global privacy control” (“GPC”) signal or another approved “universal opt-out mechanism” to opt out of the “sale” and “share” of your personal information. If we detect that your browser is transmitting a GPC or other recognized universal opt-out signal when you visit one of our websites, we will opt that browser on your device out of targeting cookies on that website. Please note that if you return to that website from a different device, or from a different browser on the same device, you may need to apply the GPC or other signal for that browser and/or device as well. However, if you are logged into your account, or we otherwise recognize you, we will endeavor to link your GPC or other signal-based opt-out request to your account and recognize it across browsers and devices that we recognize as being associated with you. Additionally, some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals.

Data Retention

We generally retain personal information to fulfill the purposes for which we collected it or as disclosed to you at the point of collection, as well as for the purposes of satisfying any applicable legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes.

CCPA Sensitive Personal Information Disclosure and De-identified Information Disclosure

Temu does not use or disclose sensitive personal information for purposes other than those expressly permitted under CCPA § 1798.121 and California Code of Regulations § 7027(m). For example, Temu does not collect or process your sensitive personal information to infer characteristics about you. We process biometric information and government identifiers for identity verification, fraud prevention and legal compliance purposes, and we process login credentials and financial account information to securely log in, process orders, and enforce our agreements or policies. Additionally, we do not attempt to re-identify deidentified information that was derived from personal information, unless expressly permitted by applicable laws.

Your Privacy Rights

In addition to the rights provided in the “Your Rights and Choices” section of the Privacy Policy and as a California resident, you may have the rights listed below and any additional rights granted by the CCPA in relation to personal information that we have collected about you. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law.

Right to know / access. The right to request information about the categories of personal information we collect, the categories of sources from which we collect personal information, the purposes for which we process personal information, the categories of third parties to whom we disclose your personal information, and the specific pieces of personal information Temu has collected about you.

Right to delete. The right to request that we delete personal information we maintain about you.

Right to correct. The right to request that we correct inaccurate personal information we maintain about you.

Right to opt out of sale or sharing. The right to opt out of selling your personal information, or sharing your personal information for advertising purposes. For information on how we process opt-out preference signals, see the Categories of Personal Information “Sold” or “Shared” section above.

You may exercise any of these rights by submitting a request using the details set out in the “Contact Us” section in the Privacy Policy. We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity before providing a substantive response to the request. You may also designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof showing that you have authorized them to act on your behalf, and we may need you to verify your identity directly with us.