Temu | Consumer Health Data Privacy Policy

Last updated: November 1, 2024

This Consumer Health Data Privacy Policy provides information regarding how Whaleco Inc. ("Temu," "we," "our," or "us") processes "consumer health data" as defined by applicable consumer health privacy laws. In the event of a conflict between Temu's Privacy Policy and this Consumer Health Data Privacy Policy, this Consumer Health Data Privacy Policy will control with respect to the processing of consumer health data.

What Consumer Health Data Do We Collect

We collect consumer health data in connection with certain of our services. The type(s) of consumer health data we may collect depends on your interactions with us. For example, we may collect information you provide about your health, health care services, tests, reports, medications, or invoices when you submit a customer service request or complaint related to your health, including photographs and customer support calls that may be recorded related to your health conditions, which may be considered biometric data under certain laws although we do not extract any identifier template(s) from this data.

How and Why We Use Your Consumer Health Data

We may use consumer health data as necessary to provide you with the services that you have requested or authorized. This may include order processing and fulfillment, communicating with you regarding orders, products, and services, providing you with customer support services, optimizing features, fixing errors, and improving our services and our business.

We may also use your consumer health data for compliance purposes and to prevent, detect, investigate, and respond to fraud, violations of our Terms of Use and policies, or other misconduct.

We may deidentify consumer health data so that it cannot reasonably be reidentified by us or by another person. If we deidentify information that was originally based on consumer health data, we maintain and use that information in deidentified form and will not attempt to reidentify the data, except as otherwise permitted under applicable law and for the purposes described in this policy.

How and Why We Disclose Your Consumer Health Data

We may disclose the consumer health data described in this Consumer Health Data Privacy Policy as necessary to provide you with a service you request, to comply with our legal obligations, or for certain security-related purposes, as described above. We may also disclose consumer health data with:

Service providers

Third parties that provide services on our behalf or help us operate our services or our business (such as customer support). These third-party service providers have access to only the consumer health data needed to perform their functions and services but shall not use such data for other purposes. Some of these service providers may be Temu affiliates.

Professional advisors, authorities, and regulators

We may disclose your consumer health data to our professional advisors (e.g., lawyers, auditors, bankers, and insurers), in response to legal processes (e.g., responding to subpoenas or requests from U.S. government or law enforcement authorities), and with other parties in order to enforce our agreements or policies, protect the rights, property and safety of Temu, users and others, and to detect, prevent and address actual or suspected fraud, violations of Temu's Terms of Use, other illegal activities, security issues, or when it is required by law.

Business transferees

We may disclose your consumer health data to acquirers and other relevant participants in the rare event of business transactions such as a merger, acquisition, or reorganization. If Temu intends to transfer information about you, Temu will inform you by email or by putting up a notice on the Temu app and on Temu.com.

Third parties designated by you

We may disclose your consumer health data to third parties where you have instructed us. We may disclose the consumer health data required for the products or services you request to third parties designated by you.

Your Controls and Choices

Under applicable laws, you may have certain rights regarding your consumer health data, including the right to access or delete your consumer health data. You may exercise these rights by submitting a request via our privacy choices web form or by contacting us using the information provided below. We will use information you provide in your request to verify your identity, and we may request additional information if necessary to complete the verification process.

If your request to exercise a right under applicable law is denied, you may appeal that decision by contacting us as described below. If you have questions or would like to communicate with us about this Consumer Health Data Privacy Policy, please email us at privacy@temu.com or contact us by mail at the following address:

Whaleco Inc.

Suite 355

31 St. James Avenue

Boston, Massachusetts 02116, USA