Temu | Privacy Policy

Last updated: April 4, 2025

This Privacy Policy describes how Whaleco Technology Limited, an Irish company ("Temu", "we", "us" or "our") handles personal information that we collect through our digital properties that link to this Privacy Policy, including our website (www.temu.com), Temu's mobile application (collectively, the "Service"), and other activities as described in this Privacy Policy. At Temu, we care deeply about privacy. We strive to be transparent about our privacy practices, including how we treat your personal information. This Privacy Policy explains how we collect, use, share, and otherwise process the personal information of users in connection with our Service.

What Information Do We Collect

In the course of providing and improving our products and services, we collect your personal information for the purposes described in this Privacy Policy. All of the personal information we collected from the Republic of Korea ("Korea") is stored in and processed directly on our server located in the United States. The following are the types of personal information that we collect. We collect personal information listed below with your consent, based on Articles 15 (1) 1 and 22 (1) 7 of the Personal Information Protection Act ("PIPA”).

Information that you provide

When you create an account, place an order at checkout, contact us directly, or otherwise use the Service, you may provide some or all of the following information:

Account and profile

In order to create and manage your Temu account, we may collect your mobile phone number or email address as the login credentials for your account. If you choose to sign up or login in via external third-party services, such as Facebook or Google, you agree we may collect your profile photo, username, and email address associated with the relevant third-party service provider. We also collect your profile information, account settings and preferences.

Purchases

In order to complete transactions and fulfill orders, we collect data related to your order on the Service (e.g., transaction history and confirmation of age range), payment information required to complete the transaction (e.g., payment card number or other third-party payment information required for payment), information provided by you for product sizing purposes, your shipping address (e.g., city, province, country of residence, and postal code), and recipient contact information (e.g., name and mobile phone number). In Korea, in accordance with applicable law, in order to complete customs clearance, we collect Personal Customs Code.

Customer support activity

When you communicate with our customer service team through customer support functions, social media, or any other means, we will collect your communication history with us as an ongoing effort to improve customer service and support.

Information when you contact us

When you contact us, we collect the information you send us, such as reports, feedback, or inquiries about your use of the Service or information about possible violations of our Terms of Use or other policies.

User-generated content

When you provide product reviews and ratings on the Service, we collect this information, including any accompanying images, videos, or text, as well as associated metadata.

Promotion and event participation

We collect information that you actively share when you participate in a contest, promotion, or survey, such as name, mobile phone number, and shipping address provided when you enter a sweepstakes, contest, or giveaway through the Service. We do this to notify you of a win, to verify your identity, and/or to send you a prize. In some cases, we may require additional information as part of the participation process, such as your desired prize selection. Such sweepstakes and contests are voluntary. We recommend that you read the rules and other relevant information for each sweepstake and contest that you enter. In addition, we collect information about your preferences for receiving marketing communications from us as well as your interactions with them.

Other data not explicitly listed here

We will use other data that you provide as described in this Privacy Policy or for any other purpose disclosed to you at the time we collect your information.

Information from third-party sources

We may combine the personal information that we receive from you with personal information that we obtain from other third-party sources, such as:

Data providers

Such as information services and data licensors that provide demographic and other information, which among other purposes help us detect fraud.

Our affiliate partners

Such as our affiliate network provider and publishers, influencers, and promoters who participate in our paid affiliate programs.

Marketing partners

Such as business partners with whom we collaborate on marketing events.

Public sources

Such as government agencies, public records, and other publicly available sources.

Other third-party services

We may obtain your information from other third-party services, such as:

• Social media services - from which we may collect information such as your username, profile picture, and email address associated with the relevant third-party service provider, if you choose to register or log in on the Service using said third-party service.

• Logistics service providers - to effectively complete order fulfillment, we will obtain your logistics information from logistics providers, such as delivery progress and delivery address.

Information collected automatically

To enhance your experience with our services and support the other purposes for which we collect personal information, we, our service providers, and our business partners may automatically record information about you, your computer, or mobile device and your interactions with the Service, our communications, and other online services over time, such as:

Device data

We collect certain information about the device you use to access the Service, such as device model, operating system information, language settings, unique identifiers (including identifiers used for advertising purposes).

Service usage information

We collect information about your interactions with the Service, including the pages you view, the duration on a page, the source from which you arrived at the page, your interactions with the page, whether you opened our emails, and whether you clicked the links within our emails.

Location data

We collect your approximate location data (e.g., IP address).

Cookies and similar technologies

We use cookies and similar technologies to measure and analyze how you use the Service, including the pages you view and how you interact with the content. Cookies and similar technologies are also used to enhance your experience with the Service, improve the Service, display advertisements to you, and measure the effectiveness of advertising and other content. We and our partners also use cookies to promote the Service on other websites. Web beacons are very small images or pieces of data embedded in an image, also known as "pixel tags" or "clear GIFs", that recognize cookies, the time and date the page was viewed, a description of the page on which the pixel tag was placed, and similar information from your computer or device. Some of these tools may enable us or third parties to collect information about how you act with our and other websites over time. To learn how to disable certain cookies, please read our Cookie and Similar Technologies Policy.

How and Why We Use Your Information

We use the personal information that we collect for various purposes, including to develop, improve, support, and provide the Service, allowing you to use its features while fulfilling and enforcing our Terms of Use. We may use your personal information for the following purposes:

Create and maintain your account

We use your personal information to create and maintain your user profile on the Service, enable the Service's account security features (e.g., sending security codes via email or SMS).

Orders and delivery of products and services

We use your personal information to receive and process orders, deliver products and services, process payments, and communicate with you regarding orders, products and services, and promotional offers.

Improve and optimize services and troubleshooting

We use your personal information to optimize features, analyze performance metrics, fix errors, and improve the Service and our business. As part of these activities, we may create aggregated or otherwise deidentified data based on the personal information we collect.

Personalize your experience

We use your personal information to recommend features, products, and services that may be of interest to you. Personal information will also be used to determine your preferences and personalize your experience with the Service.

Communicate with you and provide customer support

We use your personal information to communicate with you (e.g., announcements, updates, security alerts, support, and administrative messages) and provide customer support for your requests, questions, and feedback.

Sweepstakes, contests, and other promotions and events

We may use your user profile picture and account information to identify you in related promotions and events, and facilitate your invitations to friends who you want to invite to join the Service.

Marketing

We and our service providers may collect and use your personal information for marketing purposes in accordance with applicable laws. To the extent permitted by applicable law, we may send you direct marketing communications. You may opt out of our marketing communications as described in the “Your Controls and Choices” section below.

Interest-based advertising

We, our service providers, and our third-party advertising partners may collect and use your personal information for interest-based advertising purposes. In providing interest-based advertising, we follow the Self-Regulatory Principles for Online Behavioral Advertising as set forth by the Digital Advertising Alliance (DAA), which is an advocacy organization for responsible digital marketing and consumer privacy. You can learn more about interest-based advertising and your opt-out choices here.

Fraud prevention and security

We use your personal information to prevent, detect, investigate, and respond to fraud, unauthorized access to or use of the Service, violations of the Terms of Use, or other misconduct.

Compliance, legal obligations and protection

We may use your personal information for compliance purposes and to comply with applicable laws, lawful requests, and legal processes (e.g., responding to subpoenas or requests from government authorities); to protect our, your, and other users’ rights, privacy, safety, or property (including introducing and defending legal claims); to audit internal processes to ensure compliance with applicable law and contractual requirements and our internal policies; to enforce the terms and conditions that govern the Service; to prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activities, including cyberattacks and identity theft.

Legal claims based on your consent

In some cases, we may specifically ask for your consent to collect, use, or share your personal information, where required by applicable law.

Cookies and similar technologies for technical operations, performance enhancement, advertising, analytics, etc.

For more information about cookies and how we use them, please read our Cookie and Similar Technologies Policy.

How and Why We Share Your Information

At Temu, we care deeply about privacy. We may share your personal information with the following parties for the purpose of providing you with better services, providing you with personalized advertising and marketing communications, protecting your rights, and/or complying with legal requirements:

Affiliates

For the purpose of providing services to you (i.e. order fulfillment), we may share your personal information related to order fulfillment, such as shipping address, contact information, with our subsidiaries and affiliates. Other unrelated personal information will not be shared. These subsidiaries and affiliates either follow the same practices described in this Privacy Policy or follow practices at least as protective as those described in this Privacy Policy.

Service providers

Third parties that provide services on our behalf or help us operate the Service or our business (such as hosting, information technology, customer support, email delivery, order fulfillment and delivery, marketing, consumer research and website analytics). We generally require these service providers to use personal information only as necessary to perform the services or comply with applicable legal obligations.

Payment processors

We share your personal information with our payment processors as necessary to complete payments, process disputes, and/or process refunds.

Advertising and analytics partners

Third-party advertising, marketing, and analytics companies for the interest-based advertising and analytics purposes described in our Cookie and Similar Technologies Policy. For additional information and to learn about your right to opt out of such practices, see the Your Controls and Choices section, and the Cookie and Similar Technologies Policy.

Third parties designated by you

We may share your personal information with third parties where you have instructed us or provided your consent to do so. We may share the personal information required for the services you request with third parties designated by you. Please be aware that when you use third-party sites or services, their own terms and privacy policies will govern your use of those sites or services.

Business and marketing partners

Specialist third parties with whom we may collaborate in order to offer or promote the Service.

Professional advisors, authorities, and regulators

We may share your information with our professional advisors (e.g., lawyers, auditors, bankers and insurers), in response to legal processes (such as those issued by courts or authorities in your country of residence); and with other parties in order to enforce our agreements or policies, protect the rights, property and safety of Temu, users and others, and to detect, prevent and address actual or suspected fraud, violations of Temu's Terms of Use, other illegal activities, security issues or when it's required by law.

Business transferees

Acquirers and other relevant participants in business transactions (or negotiations of or due diligence for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale, or other disposition of all or any portion of the business or assets of, or equity interests in, us or our affiliates (including, in connection with a bankruptcy or similar proceedings).

Merchandise partners/other users

We may share with the merchandise partners the product reviews you leave, the return or refund reasons you request a return or refund, and customization information for customized/personalized items. Subject to your consent, to fulfill your order, we may share with the merchandise partner your name, shipping address, zip code, contact information, communications with our customer support functions, and your order information. For example, to address a query or complaint, or when the merchandise partner connects directly with logistics service providers. The merchandise partner will not receive your payment information or device data. Other unrelated personal information will not be shared.

Please note that, in using our Services, you may share personal information to others; for example, when other users view items on Temu, they may see item reviews you left. They will not see your profile photo and name if you hide your profile photo and name when leaving reviews.

For more details of how Temu shares your information with third parties, please see the following sections on “Delegation of Personal Information Processing” and “Third-Party Provision of Personal Information.”

Delegation of Personal Information Processing

We delegate processing of personal information to third-party companies located in Korea and overseas, enabling us to perform our contractual obligations and offer efficient services to you. In the case of delegation of personal information processing to third-party companies located overseas, personal information is transferred in accordance with Article 28-8 (1) 3 of the PIPA, as listed here.

Overseas transfer is necessary for the provision of our Service, so if you refuse the overseas transfer, you will not be able to use the Service. If you wish to refuse overseas transfer of personal information, please delete your account or contact our customer service center.

Third-Party Provision of Personal Information

Subject to your consent, we may provide your personal information to third parties in Korea for the performance of a contract, in accordance with Article 17 (1) 1 of the PIPA, as listed here.

You may refuse to consent to the provision of such information, but if you refuse to provide such information, it may limit the scope of Service we can provide you.

Additional Use or Provision of Personal Information

Temu uses and provides personal information solely within the scope with your consent. Pursuant to Articles 15(3) and 17(4) of the PIPA, we may use or provide personal information within a scope reasonably related to the initial purpose of the collection without your consent, taking into the following considerations:

• Whether the additional use/provision is related to the initial purpose of the collection;

• Whether the additional use/provision is foreseeable in light of the circumstances under which personal information was collected and practices regarding processing;

• Whether the additional use/provision unfairly infringe on your interests; and

• Whether the necessary security measures such as pseudonymization or encryption were taken.

In determining whether to additionally use or provide personal information, we will carefully and comprehensively consider various factors, including the applicable laws and regulations such as the PIPA, the purpose of use and provision of personal information, the method of use and provision of personal information, items of personal information to be used and provided, details of consent provided by you or matters notified to or disclosed to you, impact of use and provision of personal information on you, and measures taken to protect your personal information.

Your Controls and Choices

We provide you the ability to exercise certain controls and choices regarding our collection, use and sharing of your information. In accordance with applicable law, your controls and choices may include:

Rights to access, delete, and correct your personal information

You may have the right to access, delete, or correct your personal information. You could delete your account in the “settings” section of the app.

Opt-out from marketing communications

To manage your preferences or opt-out of marketing communications, you can take any of the following actions:

• Email promotional offers: If you do not want to receive emails from us regarding special promotions or offers, you may follow the unsubscribe options at the bottom of each email.

• Mobile promotional offers: When you provide us with your mobile phone number for marketing purposes, to the extent permitted by applicable law, we may send you certain marketing alerts via text message and standard data and messaging rates will apply. If you no longer wish to receive mobile marketing alerts from us, you can follow the instructions provided in these messages. Rest assured that you can continue to use Temu even if you stop authorizing Mobile promotional offers.

• Push notifications: You may receive push notifications when you use the mobile app. If you wish to adjust push notification settings, including turning them off, you may do so in your mobile device’s notification settings.

Change settings for cookies and similar technologies

Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. Please note that if you set your browser to disable cookies, the Service may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit https://www.allaboutcookies.org. You can also configure your device to prevent images from loading to prevent web beacons from functioning.

Links to third-party platforms

The Service may contain links to websites, mobile applications, and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. If you choose to connect to the Service through your social media account or another third-party platform, you may be able to use your settings in your account with that platform to limit the information we receive from it. However, please note that these links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. Moreover, we do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions. Therefore, we encourage you to read the privacy policies of the other websites, mobile applications and online services you use. If you revoke our ability to access information from a third-party platform, that choice will not apply to information that we have already received from that third party.

Do Not Track

Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals.

Declining to provide information

We need to collect personal information to provide certain services. If you do not provide the information we identify as required or mandatory, we may not be able to provide those services.

Other choices

Please see the Cookie and Similar Technologies Policy for additional choices and rights you may have and how to exercise such choices and rights.

Your Rights

You may exercise your rights related to your personal information, such as requesting access, modification or deletion, suspension of processing, or objecting to or requesting an explanation on an automated decision concerning your personal information pursuant to applicable law. You may also exercise your right of withdrawal of consent to the collection/use/provision of your personal information. To exercise your rights, you may contact us at our dedicated Contact us (Last Section).

Your right to request access to and suspension of processing of personal information may be limited by Articles 35(4) and 37(2) of the PIPA. Also, you may not be permitted to request deletion of personal information if such personal information is specified in other laws to be collected.

Where access is restricted

• Access is prohibited or restricted by law;

• The access is likely to harm another person's life or body, or unfairly infringe on another person's property or other interests.

Where suspension of processing is restricted

• There is a special provision in the law or it is inevitable to comply with legal obligations;

• The suspension is likely to harm another person's life or body, or unfairly infringe on another person's property or other interests;

• It will be difficult to perform the agreement with you due to reasons such as impossibility of providing the service agreed with you unless the personal information is processed, and you have not clearly expressed your intention to terminate the agreement.

Where deletion is restricted

• The personal information is specified to be collected in other laws and regulations.

Children

The Service is not intended for use by anyone under 14 years of age. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information through the Service from a child without the consent of the child’s parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.

Data Security and Retention

The security of your personal information is important to us. We use technical and administrative measures to help protect your personal information from loss, theft, misuse, unauthorized access, disclosure, alteration, and/or destruction. We also follow the Payment Card Industry Data Security Standard (“PCI-DSS”) in handling your credit card information. However, security risk is inherent in all internet and information technologies.

We destroy personal information when the information is rendered unnecessary by the expiration of its retention period or by achieving the purpose of processing. Temu will retain the personal information for as long as we provide the service to the customers in accordance with the contract between Temu and customers, and take action to destroy within 90 days upon the user's request to terminate the Temu service and delete the member's account; provided that Temu may retain such personal information for the statutory retention periods listed below.

Act on the Consumer Protection in Electronic Commerce (Article 6):

• Records on payment and supply of goods, etc.: 5 years

• Records on contract or withdrawal of subscription, etc.: 5 years

• Records on handling consumer complaints or disputes: 3 years

• Records on labeling and advertising: 6 months

Protection of Communications Secrets Act (Article 15-2):

• Website/app visit history: 3 months

Korean Commercial Code (Article 33):

• Commercial books (accounting books and balance sheets, etc.): 10 years

• Important documents related to business: 10 years

• Slips or similar documents: 5 years

Framework Act on National Taxes (Article 85-3):

• Books and evidentiary documents related to transactions: 5 years

Corporate Income Tax Law (Article 112, 116):

• Books and other important evidentiary documents related thereto: 5 years

• All documents evidencing the transaction: 5 years

Value-Added Tax Act (Article 71):

• Books and tax invoices or receipts: 5 years

The procedure for and methods of destroying personal information are as follows:

• Procedure of Destruction: Once the purpose of personal information collection and use has been achieved, the information is separately stored and then destroyed after retaining for a certain period of time pursuant to internal policies and applicable laws.

• Methods of Destruction: Personal information in electronic form is destroyed through means that will make the data irrecoverable, whereas personal information stored in a hard copy format is destroyed using a shredder.

Changes to the Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy, posting it on the Service and/or providing any notice required by applicable laws. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). We recommend that you review the Privacy Policy each time you visit our Service to stay informed of our privacy practices.

Privacy Office and Domestic Agent

Temu provides information on the privacy office and domestic agent in accordance with the PIPA and Act on Promotion of Information and Communications Network Utilization and Information Protection as follows.

Department in charge of protecting personal information and handling related complaints:

Data Protection Office

Email: privacy@temu.com

Domestic agent:

General Agent Co., Ltd. (Representative: Eun Mi Kim)

Address: 1216 Platinum Building, 28, Saemunan-ro 5ga-gil, Jongno-gu, Seoul, Republic of Korea

Phone number: (02) 736-8110

Email: temu@generalagent.co.kr

In order to seek remedies for personal information infringement, you may request assistance from the following agencies:

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)

• Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)

• Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)

• Korean National Police Agency: 182 (ecrm.cyber.go.kr)

• Korea Customs Service: 125 (www.customs.go.kr)

Contact Us

If you have any questions or comments about our Privacy Policy or the terms mentioned, you may contact us at any time:

• Send an email to Temu's Data Protection Office - privacy@temu.com

• Send post mail to the following address - Whaleco Technology Limited, First Floor, 25 St, Stephens Green, Dublin 2, Ireland