Last updated: Aug 16, 2024

Among other clarifying changes, we have added details about the information we collect and process about sellers using TikTok’s integrated ecommerce platform, TikTok Shop, and details about the information we process and share with third parties and integrated platform tools.

Introduction

This Partner Privacy Policy (the "Partner Privacy Policy") applies to your personal information that TikTok processes in connection with certain TikTok apps, websites, software and related services (the "Partner Platform") that link to or reference this Partner Privacy Policy. This includes your use (including when you act as a representative) of the Partner Platform in a commercial context.

The Partner Platform includes, but is not limited to:

• TikTok for Business ("TT4B"), a collection of websites and features aimed at business partners for multi-tool advertising and related services;
• TikTok Shop, including TikTok Shop Seller Center, an integrated e-commerce platform for sellers selling goods on TikTok;
• TikTok Seller Academy, a website providing operational guidance and training for sellers on TikTok Shop;
• TikTok Shop Partner Center, a platform which provides professional e-commerce services to sellers and creators to help them thrive on TikTok Shop;
• TikTok Shop Brand Portal, a platform for TikTok brands to partner with TikTok Shop sellers;
• TikTok for Developers, where third-party developers, publishers, researchers, and others can integrate with TikTok technology;
• TikTok Creator Marketplace, where advertisers can search for and partner with creators for advertising and marketing campaigns;
• TikTok Creative Center, a platform which provides tools and other services to assist advertisers in generating monetized content and maximizing the effectiveness of such content; and
• TikTok Live Backstage, a livestream management platform for businesses.

The Partner Platform is only for users over the age of 18 and is not directed at persons under the age of 18. Persons under the age of 18 are not allowed to use, or register an account on, the Partner Platform.

The Partner Platform is provided and operated by different TikTok entities depending on your location:

• If you live in the European Economic Area (“EEA”), UK and Switzerland, TikTok Technology Limited, an Irish company (“TikTok Ireland”), and TikTok Information Technologies UK Limited (“TikTok UK”), a company registered in England and Wales, act as joint-controllers for the purpose of the General Data Protection Regulation (the “GDPR”).
• If you live in the United States (“US”), TikTok Inc. operates the Partner Platform.
• If you are not in the US or the UK, TikTok Pte. Ltd (a Singapore company) is the controller responsible for your personal data. However, if you are using TikTok Shop, TikTok Seller Academy, TikTok Shop Partner Center, TikTok Shop Brand Portal, or other e-commerce services (“E-Commerce Services”), please see the jurisdictional section of this Partner Privacy Policy for your region for further details of the controller arrangement.

This Partner Privacy Policy describes the information that we gather from or about you on the Partner Platform or in connection with its use. This Partner Privacy Policy also describes, among other things, how we use and disclose such information, your rights and choices with respect to this information, and how you can contact us if you have any questions or concerns.

This Partner Privacy Policy does not cover the processing of information about your users and customers that (i) you provide to us (or we collect) via your use of the TikTok Advertiser Tools; or that (ii) we receive via measurement partners integrated with your ad campaigns such as device identifiers, network identifiers, email addresses or phone numbers.  Such processing is covered by the TikTok Business Products (Data) Terms and TikTok’s Privacy Policy. This Partner Privacy Policy also does not cover the processing of information of passive users who access the Partner Platform without creating an account. Such processing is covered by TikTok’s Privacy Policy.

1. What Information We Collect

Information You Provide

Profile Information. When you create an account (including when you are acting as representative) or otherwise interact with us on the Partner Platform, you may be required to provide certain information including your name, telephone number, primary address, date of birth, tax information (such as your VAT and TIN (or place of birth in the absence of a TIN) email address, company/organization name and details (including, where applicable, your trade/public register name and registration details (e.g. company number)), job role, area of expertise and payment account information (e.g. bank account number). You may also be required to provide information and documents to verify your identity, which may include employment information or identification card.

Information When You Contact Us. When you contact us, we process information that you provide us in order for us to reply to your business inquiries about our products, provide user support and to provide advice to you (for example, on a specific ad campaign project or on a specific shop promotion project). When you enter prize draws, or sign up for webinars and in-person events we (or our service providers) process your information in order to enable you to participate.

Messages. We collect messages, which include information you provide when you compose, send, or receive messages through the Partner Platform’s messaging functionalities, subject to applicable law. They include messages you send through our chat and virtual assistant functionality when communicating with us and with other users (such as users who purchase your products in TikTok Shop). That information includes the content of the message and the associated metadata about the message, such as when it was sent, received, or read, and message participants. Please be aware that messages you choose to send to other users of the Platform will be accessible by those users and that we are not responsible for the manner in which those users use or share the messages.

Business Content. Text, photos or videos you create and upload on the Partner Platform for business purposes (e.g. for advertising and e-commerce) is referred to as "Business Content." We analyze Business Content for the purposes of product development and content moderation.

Payment Information. Where you make a payment or receive a payment on the Partner Platform, we collect payment information from you through payment service providers, including the name on your card, your card number, billing address, expiration date and security code, and bank account or other payment information.

Call and Video Conference Recordings. We may record phone calls and video conferences (in accordance with law) and retain transcripts of dialogue for training, quality assurance, product development and administration purposes.

TikTok Account Information. If you choose to link your TikTok account with your Partner Platform account, we can access information like your email address, phone number, username, verification status, account performance information, videos, livestreams and comments associated with your content, in accordance with your permissions.

Information From Other Sources

We may receive the information described in this Partner Privacy Policy from other sources, such as:

• Our vendors and suppliers that help provide Partner Platform services you may interact with;
• Business and identity verification providers, which we use to help prevent and detect fraud;
• Your authorized agents or third party representatives;
• Publicly available sources;
• Third party lead generation providers; and
• Third Party Platforms and Partners, which provide us with information (such as your email address, user ID, and public profile), for example when you choose to sign up for or log in to the Partner Platform using sign-in features provided by those third parties, or link accounts from different platforms.

Automatically Collected Information

Technical Information. When you use the Partner Platform, we automatically collect network and device information such as your IP address, device identifier, device name, type of operating system, information obtained from Cookies and other tracking technologies, time zone, language and other local settings, and server logs (which can include information like access dates and times).

Cookies. We use cookies and similar tracking technologies (collectively, “Cookies”) to operate and provide the Partner Platform, including, for example, to enable you to log into secure areas of the Partner Platform, to enable us to provide certain features and functionality, or to enhance your experience using the Partner Platform. For more information about our use of cookies on the Partner Platform for individuals located in the EEA, UK and Switzerland please see our Web Cookies Policy.

You may be able to control some of the What Information We Collect through your device browser settings to refuse or disable Cookies. Because each browser is different, please consult the instructions provided by your browser. Please note that you may need to take additional steps to refuse or disable certain types of Cookies. In addition, your choice to disable Cookies is specific to the particular browser or device that you are using when you disable Cookies, so you may need to separately disable Cookies for each type of browser or device. If you choose to refuse, disable, or delete Cookies, some of the functionality of the Partner Platform may no longer be available to you. Without this information, we are not able to provide you with all of the requested services.

Usage Information. We collect information about how you engage with the Partner Platform, including information about the content you view, the duration and frequency of your use, your engagement with other users, your search history and your settings.

Transaction Information

When you make transactions on the Partner Platform, for example, if you use the TikTok Shop service as a seller, we collect purchase and transaction history associated with your account, information about refunds and complaints, customer reviews of your store in order to calculate your store ratings, logistics information regarding shipment and delivery of your products including by third party logistics providers. We may also collect contract information and deal terms when you provide us with your contracts with third parties (including creators).

2. How We Use Your Information

We process your information for the following purposes:

• To enable us to provide and administer the Partner Platform, so that you can create and deliver your advertising campaigns, open and manage your store(s), interact with our users, fulfill requests for the purchases of products, goods, and services, and utilize our Developer Tools.
• To provide you with user support, including to perform troubleshooting and notify you about changes to the Partner Platform and service related notifications.
• Personalize and customize certain features and content on the Partner Platform.
• To facilitate sales, promotion, and purchases of goods and services and to provide user support.
• To respond to your business inquiries related to our products, or to improve, promote, and develop your business on TikTok Shop, and provide you with personalized advice about the services we offer.
• To enforce our Terms, such as the TikTok Shop Terms of Service, TT4B Commercial Terms of Service and the Business Product Data Terms, Community Guidelines, and other policies that apply to you. 
• To investigate and resolve complaints or disputes between you and your customers (such as where users order products from you via TikTok Shop).
• To maintain and enhance the safety, security, and stability of the Partner Platform such as by identifying and addressing technical or security issues or problems (including detecting and preventing abuse, harmful activity, fraud, spam, and other illegal activities).
• To verify your identity as part of our account registration, security and fraud prevention measures, and to conduct due diligence.
• To review, improve, promote, and develop the Partner Platform, including by monitoring user interactions, performing A/B tests, conducting surveys, and by training and improving our technology, such as our machine learning and AI models and algorithms.
• To send marketing communications that may be useful to you. You have the ability to opt out of receiving these communications by clicking a link in the footer of each marketing communication we send, or adjusting your marketing preferences in the privacy settings of the app. 
• To comply with applicable laws, regulations and legal obligations.
• For any other purposes disclosed to you at the time we collect your information or pursuant to your consent.

3. How We Share Your Information

Business Partners and Service Providers

We engage partners that help us provide, support, promote, and develop our Partner Platform products and events, and understand how they are used. They provide services such as chat services, mailing, email, cloud hosting, content delivery, customer and technical support, content moderation, marketing, legal, accounting, analytics, financial services, fraud prevention, in-person event coordinators and services, and online payment. We share your information (as described in What Information We Collect) with these partners as necessary to enable them to provide their services on the Partner Platform. Some examples include:

• Integrated Platform Providers. We share limited information with third party platforms whose platform or services are integrated with the Partner Platform. This includes third party identity verification providers, so that we can verify your identity. This includes third party identity verification providers and fraud prevention providers, such as Jumio and/or Ekata (MasterCard). In providing these services, Ekata (MasterCard) may also act as a controller of your personal information for purposes specified in their privacy policy. We also share limited information, including information you enter into the AI tools in the Creative Center, with third parties whose platforms or services power the AI tools, such as Microsoft.
• Advertising Service Providers. We share your information with advertising, marketing and analytics services providers, including advertising tracking services and business intelligence services, to assist us in promoting the Partner Platform.
• Payment Processors and Transaction Fulfillment Providers. When users make a purchase from you through the shopping features on the Partner Platform, we share purchase, payment, and transaction fulfillment information related to the transaction with payment processors and transaction fulfillment providers acting on your behalf. For example, we share information with payment processors, such as Paypal, Stripe, PIPO and WorldPay, so that we can process payments and fulfill orders made on the Partner Platform. These companies may also act as a controller of your information to process your payments and for anti-money laundering and fraud prevention purposes.

Other Users

We share your personal information with other TikTok users (buyers, creators, partners and sellers), for the purposes of connecting you with those TikTok users for the receipt and/or provision of products and services. Where you are a seller on TikTok Shop, your shop details and product information, such as your shop ratings, as well as certain Profile Information (e.g. email address), are made available to other users and the public.

Where you are an advertiser on TikTok, information about your company name (or your real name where you are a sole trader) and country are available to users and the public.

Our Corporate Group

As a global company, the Partner Platform is supported by certain entities within our corporate group (“Corporate Group”). These entities process the information (described in What Information We Collect), as necessary to provide certain functions, such as storage, content delivery, security, research and development, analytics, online payments, customer and technical support, and content moderation. See Our Global Operations and Data Transfers for additional information.

Others

We share your information in other limited scenarios as follows:

Corporate Transactions. Your information may be disclosed to third parties in connection with a corporate transaction, such as a merger, sale of assets or shares, reorganization, financing, change of control, or acquisition of all or a portion of our business.

Independent Researchers: We share your information with independent researchers to facilitate research that meets certain criteria.

Legal Obligations and Rights. We may access, preserve, and share the information described in What Information We Collect with law enforcement agencies, public authorities, copyright holders, or other third parties if we have good faith belief that it is necessary to:

• comply with applicable law, legal process or government requests, as consistent with internationally recognised standards;
• protect the rights, property, and safety of us, our users, copyright holders, and others, including to protect life or prevent imminent bodily harm. For example, we may provide information (such as your IP address) to law enforcement in the event of an emergency where someone’s life or safety is at risk;
• investigate potential violations of and enforce our Terms, Guidelines, or any other applicable terms, policies, or standards; or
• detect, investigate, prevent, or address misleading activity, copyright infringement, or other illegal activity.

4. Data Security and Retention

Security of your information is important to us. We maintain appropriate technical, administrative, and physical security measures that are designed to protect your information from unauthorised access, theft, disclosure, modification, or loss. We regularly review our security measures to consider available new technology and methods.

We retain information for as long as necessary to provide the Partner Platform and for the other purposes set out in this Partner Privacy Policy. We may, in accordance with the laws of your jurisdiction also retain information such as where necessary to comply with contractual and legal obligations, where we have a legitimate business interest to do so (such as improving and developing the Partner Platform, and enhancing its safety, security and stability), and for the exercise or defense of legal claims.

The retention periods will be different depending on different criteria, such as the type of information and the purposes for which we use the information. For example, when we process your information to provide you with the Partner Platform, we keep this information for as long as you have an account.

5. Integration With Other Services Operated By Us Or Third Parties

The Partner Platform may integrate with or contain links to other applications, websites, online platforms, software tools, or related services (collectively, “Other Services”), operated either by us or by third parties, that do not fall within the Partner Platform. This Partner Privacy Policy does not apply to such Other Services. Any information submitted by you directly to these Other Services, regardless of whether you arrived at such Other Service via a link provided on the Partner Platform, and any information TikTok shares with Other Services pursuant to the terms of this Partner Privacy Policy, is subject to their respective applicable privacy policies. Please check these policies before you submit any information to these Other Services

6. Partner Privacy Policy Updates

We may amend or update this Partner Privacy Policy from time to time. When we update this Partner Privacy Policy, we will notify you by updating the “Last Updated” date at the top of the new Partner Privacy Policy, posting the new Partner Privacy Policy, or providing any other notice required by applicable law.

7. Contact Us

Questions, comments and requests regarding this Partner Privacy Policy should be addressed to: https://www.tiktok.com/legal/report/privacy

If you are based in any of the below locations dedicated local contact channels may be available to you. Please see Section 8 for more details.

8. Jurisdiction-specific terms

Some jurisdiction-specific laws contain additional terms, which are set out in this section. If you are a user to which the laws of the jurisdictions set out below apply, the terms set out below apply to you in addition to the terms set out above and, in the event of a conflict, the terms set out below prevail.

• Australia
• Brazil
• California
• Canada
• EEA/UK/Switzerland
• India
• Indonesia
• Japan
• Malaysia
• Mexico
• Philippines
• South Korea
• Thailand
• Türkiye
• United Arab Emirates

Australia

If you are using the Partner Platform in Australia, these terms shall apply.

Certain entities in our corporate group located outside of Australia, are given limited remote access to your information so that they can provide certain functions, as described in the section on How we share your information. Please see here for further information on the countries in which our corporate group entities which receive personal data from Australia are located.

Access: You have the right to access your personal information including information on how we use it and who we share it with. If you believe we hold any other personal information about you, please contact us at https://www.tiktok.com/legal/report/privacy. 

Correction: You have the right to correct your personal information where it is inaccurate. If you believe we hold any inaccurate personal information about you, please contact us at https://www.tiktok.com/legal/report/privacy. 

Your rights: If you have any questions, concerns or complaints in relation to our handling of your Information, you may contact the Office of the Australian Information Commissioner (Telephone +61 1300 363 992 or email enquiries@oaic.gov.au). We will respond to let you know who will be handling your matter and when you can expect a further response. 

Brazil

By using the TikTok for Business Platform, you acknowledge that you have read, understood, and agreed with the practices described in this Partner Privacy Policy, so the following additional terms apply.

Our legal bases for processing your Information: According to the Brazilian privacy and data protection legislation (LGPD), TikTok is only authorized to process information collected from users when there is a legal basis. Examples of legal bases used in the context of Partner Platform are given below:

• Execution of a contract: to enable us to administer, operate, and provide the Partner Platform to you so that you can create, submit and/or place business content (e-commerce, advertising, or sponsored) on websites, applications or services operated by us or our affiliates; to respond to business inquiries related to our products, to facilitate payment processing; to provide you with user support, including to perform troubleshooting and notify you about changes to the Partner Platform and service related notifications. 
• Legitimate interest: to keep the Partner Platform safe and secure, including conducting due diligence, verifying accounts, and detecting and preventing abuse, harmful activity, fraud, spam, and other illegal activities; to send marketing communications, including promotional and advertising materials that may be useful, relevant, valuable or otherwise of interest relating to products and services offered; to improve and optimize our review process, for the purpose of identifying violating our policies.

Your Rights: Users have the right to request TikTok information regarding the processing of their personal information, such as confirmation of the existence of processing, right to access to data/copies of data, right to correction of incomplete, inaccurate or outdated data, right to anonymization, blocking or elimination of unnecessary, excessive or processed data in violation of the law, right to data portability, deletion of personal data processed with the consent of the data subject, information from public and private entities with which the controller shared data; information about the possibility of not providing consent and about the consequences of not giving, right to withdraw consent.

Retention of Data: TikTok will retain your personal information for as long as it is necessary to serve the purpose(s) for which such information was collected, for no longer than is required or permitted by law, or our records retention policy, reasonably necessary for internal reporting and reconciliation purposes, or to provide you with feedback or information you might request.

If there is a legitimate interest justifying the storage, the possibility of opt-out will be offered when applicable, such as in cases involving marketing communications.

Contact: In case of questions, comments, or concerns about this Partner Privacy Policy, please contact us at: https://www.tiktok.com/legal/report/privacy. 

California

If you are a Californiaa resident, you may submit a request to know, access, correct or delete the information we have collected about you at https://www.tiktok.com/legal/report/privacy. You can also update your account information directly through setting that may be available to you. Your right to know includes what personal information we have collected about you, including the categories of sources from which the personal information is collected, the business or commercial purpose for collecting or sharing personal information, the categories of third parties to whom we share the personal information, and the specific pieces of personal information we have collected about you. We do not discriminate based on the exercise of any privacy rights that you might have.

You may be entitled, in accordance with applicable law, to submit a request through an authorized agent. To designate an authorized agent to exercise choices on your behalf, please provide evidence that you have given such agent power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. We will respond to your request consistent with applicable law and subject to proper verification. We will verify your request by asking you to send it from the email address associated with your account or to provide information necessary to verify your account.

While some of the information that we collect and use may constitute sensitive personal information, we only process such information in order to provide the Platform and within other exemptions under applicable law. For example, we may process your financial information in order to provide you the services you request from us or your driver’s license number in order to verify your identity.

No Sales or Shares for Cross-Context Behavioral Advertising If you are a California resident, we do not and have not in the last twelve (12) months sold or shared personal information about you as defined by the California Consumer Privacy Act (“CCPA”).

Do Not Track. Some browsers transmit “do-not-track” signals to websites. Because of differences in how browsers incorporate and activate this feature, we currently do not take action in response to these signals.

Canada

If you are using the Partner Platform in Canada, the following additional terms apply.

Your Rights: Subject to limited exceptions under applicable law, you have the right to access your personal information and to update, correct or rectify such information if it is inaccurate, incomplete or no longer up to date. You also have the right to request information about the processing of your personal information, such as whether we hold such information about you, the purposes for which it is used, and the third parties with whom we may share your information, subject to applicable law.

Where we rely on your consent to collect, use or disclose your personal information for a particular purpose, you also have the right to withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. If you withdraw your consent to our collection, use or disclosure of your information, we may not be able to provide certain products, services or features that require us to process your personal information.

To exercise these rights, you may contact us using the contact information set out below. We may require certain personal information for the purpose of verifying the identity of the individual making the request.

Your Choices: We may send you direct marketing messages about Partner Platform features, third party services, promotions, contests, campaigns and events that we think may be of interest to you. You can unsubscribe from our marketing emails at any time by clicking the “unsubscribe” link included at the bottom of each email we send. Please note that even after you unsubscribe, you may still receive other communications, such as transaction and service-related messages, account updates or other communications necessary for the proper functioning of our services or to maintain a business relationship with you.

Transfer Outside Your Jurisdiction: We and our service providers (including members, subsidiaries, or affiliates of our corporate group) may access, store and otherwise process personal information outside of Canada (and, for residents of Quebec, outside of Quebec), including in the United States, Malaysia, Singapore, and other foreign jurisdictions where we or our service providers are located, in which case it will be subject to the laws of that particular jurisdiction. For information about how we or our service providers (including service providers outside Canada) process personal information, please contact us using the contact information set out below. We and our service providers may disclose your personal information if we are required or permitted by applicable law or legal process, which may include lawful access by foreign courts, law enforcement or other government authorities in the jurisdictions in which we or our service providers operate.

Contact: If you have any questions or concerns about our information handling practices, inquiries about how our service providers (including our service providers located outside of your jurisdiction) treat your personal information, or if you would like to exercise your privacy rights, you can contact our Privacy Office at https://www.tiktok.com/legal/report/Privacy-Office-Canada.

European Economic Area, UK and Switzerland

(If you are located in the EEA, UK or Switzerland the section below applies to you)

Our Legal Bases and How We Process Your Information

We may only use your information when we have a “legal basis” to do so. We use different legal bases depending on why we use your information (in other words, the “purpose” of our processing). These legal bases are contractual necessity, legitimate interests (ours, yours or those of another party), consent, compliance with a legal obligation, performing a task in the public interest, and protection of vital interests.

Here we explain the legal bases we rely on when we process your information. This section also describes why we use your information, how this information is processed, the categories of information involved, and the associated rights (which always includes the right to access your information). For more information on how to exercise any of your rights, please check out the “Your Rights” section below.

Contractual Necessity

We use Information You Provide, Automatically Collected Information, Information from Other Sources and Transaction Information where it is necessary to perform the contract you enter into (our Terms) when you register for, access, or use the Partner Platform. This means we use your information to:

• Provide you with the Partner Platform. We use your information to provide and operate the Partner Platform so that you can create and manage your advertising campaigns, open and manage your store(s), interact with Users with respect to your products, and integrate with TikTok technology. We also use your information to provide you with personalized and customized features, content, and advice about the services we offer and the Partner Platform.
• Administer the Platform. We use your information to enable us to administer the Partner Platform such as to communicate with you on service related matters, provide you with updates and support, and respond to and process your queries, investigate and resolve claims, complaints or disputes (including when you tell us about a problem, or ask for a copy of your information).
• Support the purchase and delivery of products. We use your information to handle orders, such as assist with processing payments, facilitate the delivery of products, and communicate with you about your products. This includes sharing your information with buyers, payment service providers, and transaction fulfillment providers.
• Enforce our Terms, Guidelines, or policies. We use your information to enforce our Terms, Guidelines, and policies. This may include removing content (including through automated means) or suspending or banning your account if we determine that you are violating our Terms or Guidelines.

Your Rights: Whenever we use your information on the basis that it is necessary for the contract we have with you, you have the right to port information you have provided to us.

Legitimate Interests

We use your information where this is necessary to achieve legitimate interests - whether belonging to us, you, or a third party - provided these interests are not outweighed by your interests or fundamental rights and freedoms. We use the information we collect to:

Provide measurement and analytics services.

• We help Partner Platform users measure the effectiveness and distribution of ads, shopping listings, and other content viewed on TikTok.
• Legitimate Interest relied upon: To enable Partner Platform users to view and understand how their ads or content performed and the audience that viewed or interacted with their ads or content. This is so that they can make informed decisions (such as what kinds of campaigns they may want to run, the type of audience they want to reach and the types of content that users enjoy the most). This helps keep the advertising and other content we show users relevant and entertaining, and keeps the Platform free for all users.
• Information used: Information You Provide, Automatically Collected Information, and Transaction Information.

Ensure the safety and well-being of our community.

• We use your information to ensure the safety and well-being of our community, including by reviewing Business Content (and if permitted under applicable law, Messages and associated metadata) for breaches of our Terms, Guidelines, and other policies.
• Legitimate Interest relied upon: To keep our community safe, review compliance with our Guidelines, identify misuse of the Partner Platform, and to improve and optimize our review process, for the purpose of identifying Business Content violating our policies.
• Information used: Information You Provide, Automatically Collected Information, Information from Other Sources and Transaction Information.

Ensure the security and stability of the Partner Platform.

• We use your information to ensure the stability and security of the Platform, including analyzing user activity and performing A/B testing, verifying accounts, conducting user surveys, by identifying and combating technical or security issues (such as technical bugs, spam accounts, and preventing abuse, harmful activity, fraud, spam and other illegal activity).
• Legitimate Interest relied upon: To ensure the ongoing stability and security of the Partner Platform and to ensure it is continuously available and functioning.
• Information used: Information You Provide, Automatically Collected Information, Information from Other Sources, and Transaction Information.

Review, improve, promote and develop the Partner Platform.

• We use the information we have to understand how people are using the Partner Platform and to develop and improve the Partner Platform, including to train, develop, and improve our technology such as our machine learning models and algorithms. We also use this information to better understand and promote the Partner Platform. For example, we review chats with our virtual assistant functionality to help improve our automated responses to provide you with a more helpful service.
• Legitimate Interest relied upon: To improve, promote, and develop the Partner Platform in an informed way.
• Information used: Information You Provide, Automatically Collected Information, and Transaction Information.

Marketing communications.

• We may contact you by email, telephone, SMS, in-app or push notification about promotions, contests, products or services that we think will interest you or your company. We will obtain your consent to contact you where required by law.
• Legitimate Interest relied upon: To promote the Partner Platform and its products and services or third party products and services you offer that may be useful, relevant, valuable or otherwise of interest.
• Information used: Information You Provide, Automatically Collected Information, Information from Other Sources, and Transaction Information.

Your Rights: Whenever we use your information on the basis that it is necessary for legitimate interests, you can object to, and request restriction of, such usage.

Consent

We ask for your consent to access or use your information for specific purposes, which will be disclosed to you at the time we first collect your information pursuant to your consent. You’ll always be able to revoke your consent through your device permissions, or through your in-app or account settings.

Your rights: Whenever we use your information based on your consent, you can withdraw your consent at any time. However, your withdrawal of consent will not affect the lawfulness of processing your information based on your consent prior to your withdrawal of consent.

You also have the right to port information you have provided to us that we use based on your consent.

Compliance with a Legal Obligation

We may use your information where it is necessary to comply with a legal obligation (including our tax reporting obligations under EU law).

Where you are a seller on TikTok Shop, this includes situations where we have obligations to:

• collect certain Profile Information to verify that such information is reliable and complete before we can allow you to offer products and services on TikTok Shop; and
• display certain Profile Information on TikTok Shop, in order to make it publicly visible to all users.

Your Rights

You have rights and choices when it comes to your information. Some of these rights apply generally, while others will only apply in certain circumstances. Depending on the scenario, these rights may be subject to some limitations. TikTok Ireland will be responsible for responding to your request within the relevant periods provided by law. If necessary to resolve your request, TikTok Ireland will liaise with TikTok UK.

Access your information. You can ask us, free of charge, to confirm what information we process about you, to provide certain information about the processing, and for a copy of your information.

Delete your information. You can delete or ask us to delete some or all of your information.

Rectify your information. You can change or ask us to change or correct your information where that information is not accurate.

Port your information. You have the right to data portability in circumstances where we rely on contractual necessity or consent as our legal basis. This means that you have the right to receive your information in a structured, commonly used, and machine-readable format and to share it with a third party. Object to the processing of your information. You also have the right to object to the processing of your information in certain circumstances. This right applies when we are performing a task in the public interest, pursuing our legitimate interests or those of a third party, or when your data is processed for the purpose of facilitating scientific or historical research in certain circumstances. In submitting an objection request, please provide all relevant information, including the processing activity you are objecting to, why you want to object and how the processing activity affects you, and any additional information that you think will help us review your request. We will stop the particular processing if we don't have compelling legitimate grounds to continue that processing or don’t need it for legal claims.

Restrict the processing of your information. You have the right to request the restriction of the processing of your information where (a) you are challenging the accuracy of the information, (b) the information has been unlawfully processed, but you are opposing the deletion of that information, (c) where you need the information to be retained for the pursuit or defense of a legal claim, or (d) you have objected to processing and you are awaiting the outcome of that objection request.

To exercise any of the above rights, please contact us through our webform. Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details or provide additional information so that we can understand your request.

We encourage you to “Contact us” if you are not satisfied with how we have responded to any of your rights requests. You also have the right to lodge a complaint with the Irish Data Protection Commission (TikTok Ireland’s lead supervisory authority) or with your local supervisory authority.

Our Global Operations and Data Transfers

When we transfer your information outside of the EEA, the UK, or Switzerland, we ensure it benefits from an adequate level of data protection by relying on:

• Adequacy decisions. These are decisions from the European Commission under Article 45 GDPR (or equivalent decisions under other laws) where they recognise that a country offers an adequate level of data protection. We transfer your information as described in What Information We Collect to some countries with adequacy decisions, such as the countries listed here; or
• Standard contractual clauses. The European Commission has approved contractual clauses under Article 46 of the GDPR, which allows companies in the EEA to transfer data outside the EEA. These (and their approved equivalent for the UK and Switzerland) are called standard contractual clauses. We rely on standard contractual clauses to transfer information as described in What Information We Collect to certain entities in our Corporate Group (as described here) and third parties in countries without an adequacy decision. For a copy of these adequacy decisions or standard contractual clauses, please contact us via the details provided in the “Contact us” section below.

Contact Us

You can contact us about this Partner Privacy Policy through our webform. You can reach TikTok's Data Protection Officer here.

You can also contact us at the following postal address.

• For users in the European Economic Area and Switzerland: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
• For users in the United Kingdom: TikTok Information Technologies UK Limited, Kaleidoscope, 4 Lindsey Street, London, EC1A 9HP, United Kingdom.

India

If you are using our services in India, the Partner Platform is provided and controlled by Bytedance (India) Technology Private Limited. TikTok is our brand for providing and promoting the services. When using these services from India, please accordingly read “TikTok”, “we” or “us” in this policy to refer to Bytedance (India) Technology India Private Limited.

Indonesia

If you are using our services in Indonesia, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall apply.

Data Controller. The E-Commerce Services provided through the TikTok platform in Indonesia operates as “Shop.” References in this Partner Privacy Policy to “TikTok”, “we” or “us” shall, where appropriate, be taken to refer to PT Tokopedia and TikTok Pte Ltd which are the data controllers responsible for your personal data, including for the purpose of providing E-Commerce Services.

Age, Parental and Guardian Consent. By accessing and/or using the E-Commerce Services, you represent that you are at least 21 years of age or married or not under guardianship. If you are below 21 years old and you are not married, or under guardianship:

• you must obtain approval from your parent(s) or legal guardian(s); and
• your parent(s) or legal guardian(s) are responsible for: (i) all your actions in connection with your access to and use of the E-Commerce Services; (ii) your compliance with this policy; and (iii) ensuring that any of your participation in the e-commerce services will not, in any event, result in any violation of applicable laws and regulations relating to child protections.

If you do not have consent from your parent(s) or legal guardian(s) and your parent(s) or guardian(s) is not willing to open the account under their name, you must cease accessing the E-Commerce Services.

Your Choices. You may withdraw your consent to our disclosure of personal data to third parties. Upon your request, we will cease to display, publish, transmit, disseminate, and/or open the access to your personal data to third parties. Please note that by withdrawing your consent to the disclosure and/or collection of your personal data, we may not be able to fulfill your requests and you may not be able to use some Partner Platform features and functionality.

You may request that we (i) disclose the history of personal data that we have collected; and/or (ii) erase and dispose of your personal data that we have collected on our server. Please note that by requesting us to erase and dispose of your personal data, you may not be able to use some Partner Platform features and functionality.

To exercise any of your rights, contact us at https://www.tiktok.com/legal/report/privacy.

Notification. In the event of any breach of personal data, we will in accordance with applicable law, notify you and provide you with information regarding such breach of personal data.

Data retention. We retain your information for as long as it is necessary to provide you with the service. Where we do not need your information in order to provide the service to you, we retain it only for so long as we have a legitimate business purpose in keeping such data. However, there are occasions where we are likely to keep this data for five (5) years (or longer if required) in accordance with our legal obligations or where it is necessary for the establishment, exercise or defense of legal claims.

After you have terminated your use of our Partner Platform and a five (5) year retention period has lapsed, we store your information in an aggregated and anonymized format. Non-personally identifiable information may be retained indefinitely for analytics.

Japan

If you are using our services in Japan, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall apply.

Requirements for sharing and collecting your information:

• TikTok will conduct necessary and appropriate supervision of our employees, such as educating or training employees processing your information. Where a data breach has occurred or where TikTok has determined that it is likely that such a breach has occurred by us or our service providers, TikTok will report the relevant facts to you promptly, investigate and report thereon, and implement recurrence prevention measures.
• When outsourcing or subcontracting the processing of your information, TikTok will enter into a contract imposing the same level of data protection obligations as set forth in the terms with the outsourcee/subcontractor who has been retained by us for the processing of all or part of your information, and shall perform appropriate supervision and be responsible for the performance of the contract by the outsourcee/subcontractor.
• If TikTok transfers your information or audiences you create to third parties or TikTok affiliates that are located outside Japan, TikTok will impose on such third parties and TikTok affiliates the same level of data protection obligations as our obligations under TikTok Business Product (Data) Terms by way of a written contract or legally binding rules, except as otherwise permitted under the applicable laws, regulations, and applicable industry guidelines.
• TikTok is responsible for the accuracy, or deletion of any, of your information, as well as the authority to respond to any claims of rights under applicable laws and regulations. TikTok will provide disclosure regarding the processing of your information,, and TikTok will be responsible for responding to the exercise of data subject rights and complaints from users.

Malaysia

If you are using our services in Malaysia, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall prevail.

Data Controller. If you are using the E-Commerce Services in Malaysia, the data controller responsible for the processing of your personal data including for the purpose of providing E-Commerce Services is TikTok Shop (Malaysia) Sdn Bhd. However, certain activities relating to the operation of the TikTok Shop platform may be performed by TikTok Pte. Ltd., which will be the data controller for these processing activities. For example, TikTok Pte. Ltd. may be responsible for the development and improvement of the TikTok Shop platform within the TikTok application and will be a data controller for such purposes. When we refer to “TikTok”, “we” or “us” in this Partner Privacy Policy, we mean TikTok Pte. Ltd. and TikTok Shop (Malaysia) Sdn Bhd.

Mexico

If you are using our services in Mexico, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall apply.

Mexico Data Controller: If you are using the E-Commerce Services in Mexico, the data controller responsible for the processing of your personal data is TikTok Pte, with its registered address at 1 Raffles Quay, #26-10, South Tower, Singapore 048583.

Consent: By registering or using the Platform services, you provide your express consent to the processing of your personal data for the purposes indicated in this Privacy Policy. In addition to the purposes included in this Privacy Policy, you provide your express consent so that TikTok can process your data for marketing activities, promotions, advertisements and/or creation of personalized content, as well as other uses compatible with the authorized purposes.

How we share your personal data: TikTok may share your personal data with third-parties, such as commercial partners, affiliates, and other third parties which have a legal or business relationship with us, for the purposes described in this Privacy Policy. By providing your personal data and using the Partner Platform you agree to the mentioned transfers. You can always revoke your consent and exercise your rights, as stated below.

Your Rights: You have the following rights with respect to your personal data: access, rectification, cancellation and objection. You may also withdraw your consent and limit the use and disclosure of your personal data. The exercise of your rights should be in accordance with the data protection law; you may send your request through https://www.tiktok.com/legal/report/privacy , including at least the following:

The data subject's name and address, or other means to notify him/her of the response to his/her request;

Documents establishing the identity or, where appropriate, legal representation of the data subject;

A clear and precise description of the personal data with regard to which the data subject seeks to exercise any of the abovementioned rights;

Any other item or document that facilitates locating the personal data.

Philippines

If you are using our services in the Philippines, the following additional terms shall apply pursuant to the relevant laws, rules and regulations and issuances by the Philippines National Privacy Commission (“NPC”) on data privacy.

Data Controller. If you are using E-Commerce Services in the Philippines, the data controller responsible for the processing of your personal data including for the purpose of providing E-Commerce Services is ByteDance Philippines Inc. However, certain activities relating to the operation of the TikTok Shop platform may be performed by TikTok Pte. Ltd., which will be the data controller for these processing activities. For example, TikTok Pte. Ltd. may be responsible for the development and improvement of the TikTok Shop platform within the TikTok application and will be a data controller for such purposes. When we refer to “TikTok”, “we” or “us” in this Partner Privacy Policy, we mean TikTok Pte. Ltd. and ByteDance Philippines Inc.

Your Rights. To the extent that the relevant laws, rules and regulations on data privacy recognize your rights and freedoms as data subjects, you shall have the right to information, object, access, rectification, erasure or blocking, lodge complaints before the NPC, damages and data portability. Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.

South Korea

If you are using our services in South Korea, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall prevail.

• Data retention. We destroy personal data whose purpose of collection as consented to by you have been achieved, or whose periods of and use to which you consented to or which were provided in this Partner Privacy Policy have expired; provided, however, we will continue to store your personal data for the following statutorily-prescribed periods, where applicable, including, but not limited to:
• Act on Consumer Protection in Electronic Commerce;
• Records on your cancellation of an order, your payment on a purchased item, and our supply of a good/service: 5 years;
• Records on the handling of consumer complaints or disputes: 3 years;
• Records on advertisements and labels: 6 months;
• Protection of Communications Secrets Act;
• Records on your visits to our website: 3 months.
• Destruction of Personal data. We destroy your personal data in a manner that renders it unrestorable by the relevant department.
• Data rights. You have the right to access personal data we hold about you, to rectify any personal data held about you that is inaccurate, to request the deletion of personal data held about you, and the right to request the suspension of the processing of your personal data. You can exercise your rights by contacting us at https://www.tiktok.com/legal/report/privacy.
• Data Security. We work hard to protect the Partner Platform and our users from unauthorized access to or unauthorized alteration, disclosure or destruction of information we hold. To this end, we have in place technical, managerial and physical safeguards, including internal policy for data protection, limiting the access to personal data on a need-to-know basis and controlling access to the facilities where personal data is processed.
• Entrustment and/or Overseas Transfer of Personal Data. We entrust your data to our affiliates, cloud storage providers, IT service providers, and data centers, some of whom are located abroad, subject to your consents or notifications to you, if applicable. The entities receiving and processing your data are committed to using and storing personal data in compliance with domestic and international regulations and to taking all available physical and technical measures to protect personal data. You may opt-out of such transfer so long as the transfer is not necessary to provide you with the Service, by contacting usat https://www.tiktok.com/legal/report/privacy.
• Local representative pursuant to the Personal Information Protection Act. Please send your inquiries concerning privacy issues in South Korea to our local representative pursuant to the Personal Information Protection Act. Contact details are as follows.

Bae, Kim and Lee LLC

Representative: Yangho Oh

Address: Tower B, Centropolis, 26 Ujeongguk-ro

Jongno-gu, Seoul 03161, Korea

Phone: +82-2-3404-0108

Email: privacytiktok@bkl.co.kr

Thailand

If you are using our services in Thailand, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall prevail.

Data Controller. If you are using the E-Commerce Services in Thailand, the data controller responsible for the processing of your personal data is TikTok Shop (Thailand) Ltd., whose address is at No. 1 Park Silom Building, 9th-10th Floors, Convent Road, Silom Sub-district, Bangrak District, Bangkok. However, certain activities relating to the operation of the TikTok Shop platform may be performed by TikTok Pte. Ltd., which will be the data controller for these processing activities. For example, TikTok Pte. Ltd. may be responsible for the development and improvement of the TikTok Shop platform within the TikTok application and will be a data controller for such purposes. When we refer to “TikTok”, “we” or “us” in this Partner Privacy Policy, we mean TikTok Pte. Ltd. and TikTok Shop (Thailand) Ltd.

Processing for Legal Obligations. In certain circumstances, we may require you to provide personal data where this is necessary for us to comply with applicable law, or to enter into or perform a contract between us and you. If you do not provide the required personal data, we may not be able to proceed with your request or provide our services to you.

Your rights. Subject to applicable Thai personal data protection law, you have the right to withdraw consent for the collection, use and disclosure of your personal data, right to access your data, right to receive your personal data including in a format which can generally be read or used by an automatic tool or device or have this transmitted to another data controller, right to object to the collection, use or disclosure of your personal data, right to request that your personal data is deleted or de-identified, right to request the suspension of the use of your personal data, right to restrict the use of your personal data, right to correct, update, or complete your personal data, and right to lodge a complaint to the Personal Data Protection Committee if there has been non-compliance with applicable Thai data protection laws.

Türkiye

If you are using our services in Türkiye, the following additional terms apply along with the contents of the foregoing Partner Privacy Policy. In the event of any conflict between the following additional terms and the provisions of the main body of this Partner Privacy Policy, the following terms shall prevail.

Data Controller Representative. You may contact our data controller representative in Türkiye by email or mail to handle questions and complaints in connection with the processing of your personal data if you are in Turkiye.

ESİN ATTORNEY PARTNERSHIP

tiktok@esin.av.tr

AKAT MAHALLESİ GÜL SOKAK NO: 2/1 34335 BEŞİKTAŞ/İSTANBUL, TÜRKİYE

Legal bases for the processing your personal data. We rely on the following legal bases while processing your personal data in accordance with Article 5 of the Law No. 6698 on Protection of Personal Data:

• Processing is explicitly laid down or dictated by laws;
• Processing of your personal data is necessary provided that it is directly related to the conclusion or fulfilment of the contract between us;
• Processing is mandatory for us to be able to comply with our legal obligations;
• The relevant data is made available to the public by yourself;
• Processing is mandatory for the establishment, exercise or protection of a right;
• Processing is mandatory for our legitimate interests, provided that it does not violate your fundamental rights and freedoms;
• Your explicit consent (Please note that we rely on this legal basis only when we require your consent for the processing and we do not rely on this legal basis if and when we rely on one of the other legal grounds above)

Your rights. According to Article 11 of the Data Protection Law, you have the following rights with respect to your personal data:

• The right to learn whether we process your personal data;
• The right to request information with regard to such processing, if we process your personal data;
• The right to learn the purposes of the processing and whether they are used for such purpose or not;
• The right to know the third parties within or outside the country, to whom we transfer your personal data;
• The right to request correction of incomplete or inaccurate personal data;
• The right to request deletion or destruction of your personal data under the conditions set forth in Article 7 of the Data Protection Law;
• The right to request that we notify the third parties, to whom we transferred your personal data, about the correction, deletion and/or destruction of your personal data per your request within the scope of the foregoing two items;
• The right to object to the negative results about you that are due to the analysis of your personal data processed solely by automated means; and
• The right to claim indemnification for damages incurred due to illegal processing of your personal data.

You may exercise your rights listed above by contact us at: https://www.tiktok.com/legal/report/privacy.

The requests found in your application will be resolved as soon as possible according to the nature of your request and within thirty days at the latest free of charge. However, if your request incurs additional cost to our company, then you may be charged over the tariff fee determined by the Turkish Personal Data Protection Board.

Amendments. The following sections of the Policy do not apply to individuals in Türkiye:

Language. This policy is available in English and Turkish. If there is any inconsistency or different interpretation between the English and Turkish versions, the Turkish text shall prevail.

United Arab Emirates

If you are using the Partner Platform in the United Arab Emirates (“UAE”), the following additional terms apply. If any conflict arises between the main Partner Privacy Policy and the additional terms, the following terms shall prevail:

How we share your personal data

In addition to the main text of this policy, by using the Partner Platform in the UAE you agree to the terms of this Partner Privacy Policy and consent to our sharing of your personal data in line with the main text of this Partner Privacy Policy.

Governing law and dispute resolution

By using the Partner Platform in the UAE, this Partner Privacy Policy will be governed by and interpreted in accordance with the laws of the UAE. In the event of a dispute arising between the parties in connection with this Partner Privacy Policy:

• Where the dispute relates to a claim for a sum within the limits specified by the DIFC Small Claims Tribunal from time to time, then the dispute shall be referred by either party to the said Tribunal; and
• For all other disputes, the parties shall seek settlement of that dispute by mediation in accordance with the Mediation Rules of the DIFC-LCIA Arbitration Centre, which Rules are deemed to be incorporated by reference to this clause. If the dispute is not settled by mediation within 30 days of the commencement of the mediation, or such further period as the parties shall agree in writing, the dispute shall be referred to and finally resolved by arbitration under the Arbitration Rules of the DIFC-LCIA Arbitration Centre, which Rules are deemed to be incorporated by reference to this clause. The language to be used in the mediation and in the arbitration, shall be English. In any arbitration commenced pursuant to this clause the number of arbitrators shall be one and the arbitration shall be conducted in Dubai.

Complaints

In the event that you wish to make a complaint about how we process your Information, please contact us in the first instance at https://www.tiktok.com/legal/report/privacy and we will endeavour to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with the data protection supervisory authority in the country in which you live or work where you think we have infringed data protection laws(where applicable).