This Privacy Policy explains how TokVendors (“TokVendors”, “we”, “us” or “our”) collects, uses and protects personal information when you visit tokvendors.com (the “Website”), contact us, book a strategy call or apply to join our creator network. It also explains the choices and rights you have.
If you have any questions, email us at [email protected].
Who we are
TokVendors is an independent agency that helps brands and business owners set up and run TikTok Shop stores. For the purposes of data protection law, TokVendors is the controller of the personal information described in this policy, which means we decide how and why it is used.
This policy covers the Website and our related sales and marketing communications. When we provide services to a client, our handling of that client’s store, customer and business data is governed by our written agreement with the client and, where relevant, a data processing agreement.
Information we collect
Information you give us
- Contact and inquiry forms: your name, email address, phone number, company or brand name, website or store links, the service you are interested in and anything you write in your message.
- Strategy call bookings: your name, email address, the time you choose, your time zone and your answers to any booking questions.
- Creator network applications: your name, email address, TikTok handle and profile link, content niche, location, audience details you choose to share and anything else you provide on the form.
- Email and other correspondence: the content of emails or messages you send us, your contact details and our replies.
Information collected automatically
When you visit the Website, we and our service providers automatically collect certain technical and usage information. This includes your IP address, browser and device type, operating system, referring page, pages viewed, time on page, clicks, taps, scrolling and approximate location derived from your IP address (such as city or country). We collect it through server logs, cookies and similar technologies described below.
Information from other sources
We may receive information about you from service providers that help us run the Website, such as our scheduling provider. If you apply to our creator network, we may also review your public TikTok profile and publicly available content statistics.
How we use your information
- To respond to your inquiries and provide the information you ask for.
- To schedule, prepare for and hold strategy calls, and to send confirmations and reminders.
- To review creator applications and contact creators about potential brand collaborations.
- To send follow-up emails about our services where you have asked us to or where the law allows, always with a simple way to opt out.
- To operate, secure and maintain the Website, including preventing spam, fraud and abuse.
- To understand how visitors use the Website and improve its content, design and performance.
- To comply with legal obligations, enforce our terms and protect our rights and the rights of others.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
Legal bases for processing (EEA, UK and Switzerland)
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases:
- Steps before a contract: when you ask about our services or book a call, we process your information to respond and take steps at your request.
- Legitimate interests: to run, secure and improve the Website, to follow up on business inquiries and to manage our creator network, where those interests are not overridden by your rights.
- Consent: for non-essential cookies and analytics, and for marketing emails, where the law requires consent. You can withdraw consent at any time.
- Legal obligation: where we must keep or disclose information to comply with the law.
Strategy call bookings (Calendly)
We use Calendly to schedule strategy calls. When you book through the scheduler on our Website, the information you enter is collected and processed by Calendly on our behalf and shared with us so we can hold the call. The embedded scheduler may also set its own cookies and collect technical information. Calendly describes its practices in its privacy notice.
Calls take place by phone or through the video meeting service named in your booking confirmation. If we would like to record a call, we will ask you first.
Website forms and email
Information you submit through forms on the Website is delivered to us by email or stored in the systems we use to manage inquiries, and we use it only for the purposes in this policy. If you email us directly, your message and contact details are kept in our email system.
Every marketing email we send includes a way to unsubscribe, and you can also ask us to stop at any time by emailing [email protected]. We may still send you non-marketing messages, such as replies to your questions or confirmations of calls you booked.
Analytics: Google Analytics and Microsoft Clarity
We use Google Analytics, a service provided by Google, to understand how visitors find and use the Website, for example which pages are viewed and how long visits last. Google Analytics uses cookies and similar technologies to collect information such as device and browser details, approximate location and on-site activity. You can read how Google uses this data at policies.google.com and opt out with Google’s Google Analytics opt-out browser add-on.
We use Microsoft Clarity, a service provided by Microsoft, to see how visitors interact with the Website through heatmaps and session replays that show clicks, taps, scrolling and mouse movement. Clarity masks text typed into form fields, and we use these insights to improve usability, not to identify individual visitors. Microsoft describes its practices in the Microsoft Privacy Statement.
Cookies and similar technologies
Cookies are small text files stored on your device. We and our providers use cookies and similar technologies, such as local storage and tags, for these purposes:
- Strictly necessary: to deliver and secure the Website, for example cookies set by Cloudflare to detect bots and protect against attacks. These are needed for the Website to work.
- Analytics: Google Analytics and Microsoft Clarity cookies that help us measure and improve the Website.
- Functionality: cookies set by embedded tools, such as the Calendly scheduler, so that they work properly.
Where the law requires it, we ask for your consent before setting non-essential cookies, and you can change your choice at any time. You can also block or delete cookies in your browser settings, although parts of the Website may not work if you block strictly necessary cookies. Because there is no common standard for browser “Do Not Track” signals, the Website does not currently respond to them.
Hosting and content delivery (Hostinger and Cloudflare)
The Website is hosted by Hostinger, which stores the Website’s files and processes server logs, including IP addresses and request details, to deliver pages and keep the service secure. We also use Cloudflare as a content delivery network and security service. Cloudflare sits between your browser and our server, so it processes your IP address, request data and related technical information to deliver pages faster, block malicious traffic and protect the Website.
Both act as our service providers and may process data in several countries. Their practices are described in the Hostinger privacy policy and the Cloudflare privacy policy.
How we share information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only in these situations:
- Service providers: companies that help us run our business and the Website, such as Hostinger (hosting), Cloudflare (content delivery and security), Calendly (scheduling), Google (analytics), Microsoft (Clarity analytics) and our email and productivity providers. They may use the information only to provide services to us.
- Brands we work with: if you join our creator network, we may share your public creator profile and the details you submitted with client brands when we propose a collaboration.
- Professional advisers: lawyers, accountants and insurers who are bound by confidentiality.
- Legal and safety reasons: when required by law, court order or a lawful government request, or to protect the rights, property or safety of TokVendors, our clients or others.
- Business transfers: if TokVendors is involved in a merger, acquisition, financing or sale of assets, personal information may be transferred as part of that transaction and will remain protected by this policy.
- With your consent: in any other case where you ask us to or agree to it.
International transfers
We and our service providers may process personal information in the United States and other countries whose data protection laws may differ from those where you live. When we transfer personal information from the EEA, the UK or Switzerland, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or a provider’s certification under an applicable data privacy framework.
How long we keep information
- Inquiries and call bookings: for as long as needed to respond and follow up, and generally no longer than two years after our last contact if you do not become a client.
- Client records: for the length of the engagement and afterwards for as long as needed for legal, tax, accounting and dispute purposes.
- Creator network applications: while you remain part of our network, or until you ask us to remove you.
- Analytics data: according to the retention settings and policies of Google Analytics and Microsoft Clarity, after which it is deleted or aggregated.
- Server and security logs: for the limited periods set by our hosting and security providers.
When we no longer need personal information, we delete it or make it anonymous.
How we protect information
We use reasonable administrative, technical and organizational measures to protect personal information, including encrypted connections (HTTPS), access controls and established service providers. No method of transmission or storage is completely secure, so we cannot promise absolute security. Please do not send sensitive information, such as passwords or payment card details, through our forms or by email.
Your privacy rights
Depending on where you live, you may have some or all of the following rights:
- Access: to know what personal information we hold about you and to receive a copy.
- Correction: to have inaccurate information corrected.
- Deletion: to have your information deleted.
- Portability: to receive your information in a structured, commonly used format.
- Objection and restriction: to object to, or ask us to limit, certain processing, including direct marketing and processing based on legitimate interests.
- Withdrawing consent: where we rely on consent, at any time, without affecting processing that already took place.
- Opting out of sale, sharing or targeted advertising: we do not sell or share personal information for these purposes, but you may still contact us with any request.
- Non-discrimination: we will not treat you differently for exercising your rights.
EEA, UK and Swiss residents
You have the rights above under the GDPR, the UK GDPR or Swiss data protection law. You also have the right to lodge a complaint with your local data protection authority, although we would appreciate the chance to address your concern first.
California and other US state residents
Residents of California and other US states with consumer privacy laws may have the right to know, access, correct and delete their personal information and to opt out of its sale, sharing or use for targeted advertising. We collect the categories of personal information described in “Information we collect”: identifiers (such as name, email address, phone number and IP address), professional or commercial information (such as company details and the services you are interested in), internet or network activity (such as browsing and interaction data on the Website) and approximate location. We collect it from you, your device and our service providers for the purposes in “How we use your information”, and we disclose it only to the recipients described in “How we share information”. We do not sell or share personal information, and we do not use sensitive personal information to infer characteristics about you.
You may use an authorized agent to make a request on your behalf. If we decline a request, you may appeal by replying to our response or by emailing us with “Privacy appeal” in the subject line.
How to make a request
Email [email protected] with the subject line “Privacy request” and tell us which right you want to exercise. We will need to verify your identity, usually by confirming details we already hold, before we act on a request. We respond within the time required by applicable law.
Children’s privacy
The Website and our services, including our creator network, are intended for adults. They are not directed to children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.
Links to other websites
The Website links to third-party websites and tools, such as TikTok, Calendly and the sources cited in our articles. Their privacy practices are their own, and we encourage you to read their policies.
Changes to this policy
We may update this policy as our services, providers or legal requirements change. We will post the updated version on this page and change the “Last updated” date. If a change is significant, we will take reasonable steps to let you know, such as a notice on the Website.
Contact us
For questions or requests about this policy or your personal information, email [email protected].