Temu

EEA (including the EU), UK, Switzerland

Last Updated: May 7, 2025

For the purpose of this Privacy Policy, personal information shall have the meaning of “Personal Data” as referred to in the General Data Protection Regulation (“GDPR”), the UK GDPR and the Swiss Federal Act on Data Protection, i.e. meaning any information that relates to an identified or identifiable natural person (the "Data Subject").

Our Global Operations and Data Transfers

To support our global operations:

We store the information described in the “What Information We Collect” section in servers located in the European Economic Area (EEA).
Certain of our subsidiaries and affiliates, located globally, including outside the EU, EEA, UK and Switzerland, are given limited remote access to your Personal Data. See the “How and Why we Share your Information” section above for more information.
We may share your Personal Data with service providers, partners and other parties described in the “How and Why We Share Your Information”, which can be located globally, including outside the EU, EEA, UK and Switzerland.

We require that these parties commit to processing information in compliance with applicable privacy laws and to implementing appropriate security measures to protect your information.

We only transfer your information outside of the EU, EEA, UK and Switzerland where there are appropriate safeguards in place to ensure an adequate level of protection for your Personal Data, such as:

Adequacy decisions. These are decisions from the European Commission, the UK or the Swiss Government under Article 45 GDPR/UK GDPR (or equivalent decisions under other laws) which recognize that a country offers an adequate level of data protection. We transfer your Personal Data as described in “What Information We Collect” to some countries with adequacy decisions, such as the countries listed here; or
Standard contractual clauses. The European Commission has approved contractual clauses under Article 46 of the GDPR that allow companies in the EEA to transfer data outside the EEA. These (and their approved equivalents for the UK and Switzerland) are called standard contractual clauses. We rely on standard contractual clauses to transfer Personal Data as described in “What Information We Collect” to certain affiliates and third parties in countries without an adequacy decision.

In specific situations, we may rely on derogations provided for under the applicable law to transfer information to a third country.

Click the link to learn more about Adequacy decisions (or equivalent links under applicable laws) or Standard contractual clauses (or equivalent links under applicable laws).

Your Rights as a Data Subject

You have the following rights and choices which can be exercised in accordance with applicable law:

Right to access. You have the right to obtain from the controller confirmation as to whether or not Personal Data concerning you is being processed, and, where that is the case, access to the Personal Data and certain information about the processing.

Right to erasure. You have the right to request that we delete Personal Data we maintain about you without undue delay in some circumstances, such as where the Personal Data are no longer necessary in relation to the purposes for which they were processed, or you have withdrawn your consent on which the processing is based and where there is no other legal ground for the processing. In addition, you may have a right to request deletion of your Personal Data if you object to the processing and there are no overriding legitimate grounds for the processing, the Personal Data have been unlawfully processed, or the Personal Data has to be erased for compliance with a legal obligation in the EU or Member State to which we are subject.

Right to rectification. You have the right to request that we correct inaccurate Personal Data we maintain about you.

Right to restriction of processing. You have the right to request that we restrict the processing of your Personal Data in any of the following circumstances: (i) if the Personal Data is inaccurate, its processing may be restricted for the period of time it takes for us to verify its accuracy; (ii) if the processing is unlawful and you object to your Personal Data being deleted you can instead request that its processing be restricted; (iii) if we no longer need the Personal Data but you require us to retain it in order for you to bring, or defend against, a legal claim; or (iv) if you have objected to our processing of your Personal Data on the basis of legitimate interest and you are awaiting the conclusion of our assessment.

Right to data portability. You have the right to request that we provide the Personal Data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. This applies where the processing is based on consent or contractual necessity and the processing is carried out by automated means. Also, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

Right to object. You have the right to object, on grounds relating to your particular situation, at any time to processing of Personal Data concerning you, including profiling, which is based on a task carried out in the public interest or on a legitimate interest. We will no longer process the Personal Data in case of such objection unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Right to object (direct marketing). If we process Personal Data for direct marketing purposes, including profiling to the extent that it is related to such direct marketing, you have the right to object at any time to the processing of your Personal Data and opt out of such marketing. See section above on ‘Opt-out from Marketing Communications’ for further information.

Right to withdraw consent. You have the right to withdraw your consent at any time, where processing is based on your consent. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

Automated decision making. You have the right not to be subject to a decision when it is based solely on automated processing (i.e., an operation that is performed without any human intervention), if it produces a legal effect (i.e., impacts your legal rights) or significantly affects you in a similar way (e.g., significantly affects your financial circumstances or ability to access essential goods or services), except under certain conditions, for example when you have provided your consent or when Temu is authorized under EU law to conduct such processing. Temu does not make decisions based solely on automated processing that produce a legal effect or that similarly significantly affect individuals.

Right to lodge a complaint with a supervisory authority. You have the right to lodge a complaint with our EU lead supervisory authority, the Irish Data Protection Commission for individuals in the EU, the UK Information Commissioner’s Office for individuals in the UK, the Federal Data Protection and Information Commissioner for individuals in Switzerland, or the supervisory authority from the jurisdiction where you live or work or where you consider we have infringed privacy laws.

These rights only apply in certain circumstances and may be limited by law, for example if fulfilling your request would reveal personal data about another person, where they would infringe the rights of a third party (including our rights) or if you ask us to erase information which we are required by law to keep or have compelling legitimate interests in keeping. Relevant exemptions are included in the GDPR, UK GDPR and in relevant local law.

You can exercise any of these rights by submitting a request to sellersupport-eu@temu.com dedicated to data subject requests or by contacting us using the information provided below. We will not discriminate against you for exercising any of these rights. In certain circumstances, we will need to collect additional information from you to verify your identity, before providing a substantive response to the request. You can also designate an authorised agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorised them to act on your behalf, and we may need you to verify your identity directly with us.

Other Choices. Please see the Seller Cookie Policy for additional choices and rights you may have and how to exercise such choices and rights.

Legal Basis

We rely on the following legal bases to process Personal Data – the applicable legal basis depends on the specific purpose for which Personal Data is used:

Performance of a contract. when we provide our Services, or communicate with you about them. This includes when we use your personal information to develop, improve, support, and provide the Service, allowing you to create, maintain and manage your account and use its features while fulfilling and enforcing our Terms of Use. If you are a representative of a legal entity (or a beneficial owner), we rely on our legitimate business interests as stated below when processing your personal information for the purposes noted above.
Our legitimate business interests and the interests of third parties and/or our customers. This includes when we optimize features, analyse performance metrics, fix errors, improve the Service and our business, communicate with you (including direct marketing communications), detect and prevent fraud and abuse in order to protect the security of our customers, sellers, ourselves, or others.
Your consent. when we ask for your consent to process your personal information for a specific purpose that we communicate to you including, where required by applicable law, for processing of biometric information for identity verification. When you consent to our processing of your personal information for a specified purpose, you may withdraw your consent at any time and we will stop processing of your data for that purpose.
Compliance with a legal obligation. when we use your personal information for compliance purposes and to comply with the applicable law, laws, lawful requests, and legal processes (e.g., responding to subpoenas or requests from government authorities) associated with your country of residence; to protect our, yours, and other users' rights, privacy, safety, or property (including introducing and defending legal claims); audit internal processes to ensure compliance with legal and contractual requirements and our internal policies; enforce the terms and conditions that govern the Service; prevent, identify, investigate, and deter fraudulent, harmful, unauthorised, unethical, or illegal activities, including cyberattacks and identity theft.
These and other legal bases depending on the purpose we described in the “How and Why We Use Your Information.”

If you have any questions or comments about our Privacy Policy or the terms mentioned, or if you wish to contact our Data Protection Officer by email you may contact us at any time at sellersupport-eu@temu.com.

If you wish to contact our Data Protection Officer by post, you can send mail to the following address of Temu's Data Protection Officer - Whaleco Technology Limited., First Floor, 25 St, Stephens Green, Dublin 2, Ireland.