Privacy Policy Page

TikTok Shop Partner Center Privacy Policy

Last updated: December 30, 2022

Welcome to the TikTok Shop Partner Center (the “TTSPC”).  This Privacy Policy applies to (1) Partners that are using the TTSPC as individuals or (2) where a Partner is a company or similar entity, to the employees, representatives or other individuals authorized by that Partner to use the TTSPC (“you”). Where we refer to “TikTok”, “we” or “us” in this Privacy Policy, we mean the relevant TikTok entity that is responsible for your personal data, as set out below:

• If you are located in the European Economic Area (“EEA”), Switzerland or the UK (together, the “European Region”), TikTok Information Technologies UK Limited (a UK company) and TikTok Technology Limited (an Irish company) as joint controllers are responsible for your personal data.
• If you are located in the US, TikTok Inc. (a US company) is the controller responsible for your personal data.
• If you are not in the US or the European Region, TikTok Pte. Ltd (a Singapore company) is the controller responsible for your personal data. We are committed to protecting and respecting your privacy. This Privacy Policy sets out the basis on which we process any personal data we collect from you, or that you provide to us, if you use the TTSPC. If you have any questions or concerns about our use of your personal data, then please contact us using the contact details provided at the bottom of this Privacy Policy.

1. The types of personal data we use

We collect the following types of information:

• Registration and account information. We collect information from you when you register on the TTSPC, such as your phone number, email address and verification code.
• Business and ownership details. We collect corporate and business details about the Partner, such as the company name, company number, registered office, registration date, business license number and expiration date. We also collect details about the owner, such as the owner’s full name, date of birth, ID number and expiration date, and designated settlement account(s).
• Activity on the TTSPC. When you use the TTSPC, we collect your activity on the TTSPC, such as which Creators and/or Merchants you have searched for or engaged with.
• Communications with us. When you contact us, for example by email or phone, we will record your interactions, comments and opinions.
• Technical information we collect about you. When you use the TTSPC, we automatically collect information generated from your browser or device, including your IP address, settings and device ID.

2. How do we use your personal data

We use your personal data for our legitimate interests to allow us to register Partners on the TTSPC, to grant you access to the TTSPC, administer the TTSPC and to contact you and provide you with support. Where applicable, we also use your personal data in this way to perform our contract with you, namely the Partner Terms of Service for TTSPC. We also use your personal data where it is in our legitimate interests to do so for verification and risk management purposes and to prevent and respond to abuse, fraud, illegal activity and other potentially harmful content. We will process your personal data for our legitimate interests to optimize and improve the features and functionality of the TTSPC. We may use your information to send you information about our events, announcements, promotions or other marketing campaigns to ensure you can be timely notified of any developments and improvements we have made for the TTSPC. (We will obtain your consent to send you messages where required by law.)

3. How we share your personal data

We may share your personal data with the following:

• Creators and/or Merchants. If you choose to search for and engage with a Creator and/or a Merchant on the TTSPC, that Creator and/or the Merchant will be informed that you wish to engage with them.
• Service providers that perform services for us or on our behalf, which may include providing professional services, such as legal and accounting services, mailing, email or chat services, fraud prevention, web hosting, or providing analytic services.
• Law enforcement, the courts, or other regulatory or public authorities if we believe this is necessary to comply with law, to protect the vital interests of any person, or for the establishment, exercise or defence of legal claims.
• Purchasers and third parties in connection with a business transaction: your personal data may be disclosed to third parties in connection with a transaction, such as a merger, sale of assets or shares, reorganisation, financing, change of control or acquisition of all or a portion of our business.
• Our corporate group. We may also share your personal data with other members, subsidiaries, or affiliates of our corporate group, to provide the TTSPC including improving and optimising the TTSPC, preventing illegal use and supporting users.

4. How we store and retain your information

The personal data we collect may be transferred to and stored in countries outside of the jurisdiction you are in where we and our third-party service providers have operations. If you are using our Platform from the European Region, your personal data will be processed outside of the European Region. Where we transfer your personal data to countries outside the European Region, we ensure that the personal data is transferred to countries recognized as offering an equivalent level of protection or the transfer is made pursuant to standard data protection clauses adopted by the European Commission. For a copy of these standard data protection clauses, please contact us using the details set out in the “How to contact us” section below. We retain personal data collected under this Privacy Policy only where we have an ongoing legitimate business need to do so.
When we have no ongoing legitimate business need to process your personal data, we will either delete or anonymize it or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible.

5. Your data protection rights

In accordance with applicable privacy law, you may have the rights to access, correct and delete your personal data that we hold, by sending a request through the manners disclosed in Section 8 of this Privacy Policy. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. If you are using the TTSPC from the European Region, in accordance with applicable privacy law, you have the following data protection rights:

• If you wish to access, correct, update or request deletion of your personal data, you can do so at any time by contacting us using the contact details provided under the “How to contact us” heading below.
• In addition, you can object to processing of your personal data, ask us to restrict processing of your personal data or request portability of your personal data. Again, you can exercise these rights by contacting us using the contact details provided under the “How to contact us” heading below.
• Similarly, if we have collected and process your personal data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.
• You have the right to complain to the relevant data protection authority, namely the Irish Data Protection Commission if you are in the EEA, or the UK Data Protection Commission if you are in the UK.

If you are a California or Virginia resident, you may submit a request to know, access, correct or delete the information we have collected about you to [email protected]. You may appeal any decision we have made about your request by following the instructions in the communication you receive from us notifying you of our decision. You may also exercise your rights to know, access, correct, delete, or appeal by sending your request to the physical address provided in Section 8 “How to contact us” of this Privacy Policy. You can also update your account information directly through your TTSPC settings, as well as request a copy of your data or request to deactivate or delete your account. Your right to know includes what personal information we have collected about you, including the categories of sources from which the personal information is collected, the business or commercial purpose for collecting or sharing personal information, the categories of third parties to whom we share the personal information, and the specific pieces of personal information we have collected about you. We do not discriminate based on the exercise of any privacy rights that you might have. You may be entitled, in accordance with applicable law, to submit a request through an authorized agent. To designate an authorized agent to exercise choices on your behalf, please provide evidence that you have given such agent power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. We will respond to your request consistent with applicable law and subject to proper verification. We will verify your request by asking you to send it from the email address associated with your account or to provide information necessary to verify your account. While some of the information that we collect and use may constitute sensitive personal information, we only process such information in order to provide the Platform and within other exemptions under applicable law. For example, we may process your financial information in order to provide you the services you request from us or your driver’s license number in order to verify your identity. No Sales or Shares for Cross- Context Behavioural Advertising. If you are a California resident, we do not and have not in the last twelve (12) months sold or shared personal information about you as defined by the California Consumer Privacy Act (“CCPA”).  Do Not Track. Given a lack of industry consensus and standardization, we do not respond to browser ‘Do Not Track’ (DNT) signals. 

6. Security of your personal data

We take steps to ensure that your information is treated securely and in accordance with this Privacy Policy. We have appropriate technical and organizational measures to ensure a level of security appropriate to the risk that may be posed to you. We maintain these technical and organizational measures and will amend them from time to time to improve the overall security of our systems.

7. Updates to this Privacy Policy

We may update this Privacy Policy from time to time in response to changing legal, technical or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. You can see when this Privacy Policy was last updated by checking the “last updated” date displayed at the top of this Privacy Policy.

8. How to contact us

If you have any questions or concerns about our use of your personal data, contact us using the following email address: [email protected]. You can also contact us at the following postal addresses: -** If you are resident in the European Union, European Economic Area and Switzerland:** TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. 

• If you are resident in the United Kingdom: Kaleidoscope, 4 Lindsey Street, London, United Kingdom, EC1A 9HP.
• If you are resident in the US: TikTok Inc., 5800 Bristol Parkway, Suite 100, Culver City, CA 90230.
• If you are not in the US or the European Region: FAO Data Protection Officer, TikTok Pte. Ltd., 1 Raffles Quay, #26-10 South Tower, Singapore 048583.