Shop Privacy Policy

Last updated: August 2024
​
​This Shop Privacy Policy applies if you reside in Indonesia, and use the Shop e-commerce platform (“Shop”) and Go|Tokopedia service (“Go|Tokopedia”). The Shop and Go|Tokopedia are operated by PT Tokopedia, which is the data controller generally responsible for the processing of your personal data, including for the purpose of facilitating ecommerce transactions and services. TikTok Pte. Ltd. may also provide support to PT Tokopedia in providing certain functionalities required for the Shop and Go|Tokopedia, which will be a separate data controller for the processing of your personal data.
In this Privacy Policy, references to “we” or “us” shall refer to PT Tokopedia or TikTok Pte. Ltd. in relation to that particular entity’s processing of your personal data.
We are committed to protecting and respecting your privacy.
This Privacy Policy sets out how we process any personal information we collect from or about you, or that you provide to us, or in relation to your use of our e-commerce services accessible via the Shop tab or Go|Tokopedia marketplace within the TikTok application, or if you access or use our e-commerce services through standalone or related applications or websites that are available from time to time and that link to or reference this Privacy Policy (collectively, the “Services”).
In particular, this Privacy Policy applies where you access or use the Services as:​
● a merchant that promotes and sells (“Offer”) goods and services (“Products”) to users via the Services (“Merchant”);​
● an owner of intellectual property rights such as trademark or copyright (“IPR”) that owns and enforces IPR against infringing Products Offered via the Services (“IPR Owner”); ​
● a TikTok creator who has entered into a contract with us or a TikTok entity to promote Products Offered by Merchants via the Services (“Creator”); and​
● a user that uses the Services (“Buyer”), including to buy Products from Merchants.​
The types of personal information we collect​
Information You Provide
The types of personal information we collect may differ depending on whether you access and use our Services as a Buyer, Creator, Merchant, or IPR Owner.
In general, we may collect the following information about you when you access or use our Services:
● Contact information. You may provide information such as your name, address, post code, telephone number, instant messaging account and email address;
● User and business content. We process the content you generate on our Services, including photographs, audios and videos you upload or create, comments, hashtags, feedback, reviews, and livestreams you make, and the associated metadata, such as when, where, and by whom the content was created (“Content”). Even if you do not use our Services, information about you may appear in Content created or published by users and Merchants on Shop and Go|Tokopedia. We collect Content through pre-loading at the time of creation, import, or upload, regardless of whether you choose to save or upload that Content, in order to recommend audio options and provide other personalized recommendations. If you apply an effect to your Content, we may collect a version of your Content that does not include the effect. If you generate Content for business purposes (e.g. for advertising and e-commerce), we analyze such Content for the purposes of product development and content moderation.
● Clipboard. We may access content, including text, images, and video, found in your device’s clipboard, with your permission. For example, if you choose to initiate content sharing with a third-party platform, or choose to paste content from the clipboard into our Services, we access this information stored in your clipboard in order to fulfill your request.
● Messages. We collect information you provide when you compose, send, or receive messages through our Services’ messaging functionalities. This includes messages you send or receive through our chat functionality. For Buyers, information may also be collected where you use virtual assistants when purchasing Products through our Services. Information collected from messages includes the content of the message, e.g., images of a Product or order, enquiries about a Product or order. We may also collect information about messages, such as when a message was sent, received, or read, and message participants. Please be aware that messages you choose to send to Merchants or Buyers will be accessible by them and that we are not responsible for the manner in which they use or share the messages.
● Proof of your identity or age. We sometimes ask you to provide proof of identity or age in order to ensure that you are old enough to use our Services or certain features, or in other instances where verification may be required.
● Information When You Contact Us. When you contact us, we process information that you provide us in order for us to reply to your inquiries, feedback, complaints, or other interactions or correspondence, to provide user support and to provide information to you. Information we collect may include information in correspondence you send to us, such as when you contact us for support or feedback.
● Call and Video Conference Recordings. We may record phone calls and video conferences (in accordance with law) and retain transcripts of dialogue for training, quality assurance, product development and administration purposes.
● Other Information through surveys, research, promotion, contests, marketing campaigns, challenges, competitions or events conducted or sponsored by us, in which you participate.
If you are a Buyer, we may collect the following information:​
● Payment details that you provide, such as your credit or debit card information, payment authentication code and billing address;​
● Purchase and transaction history in relation to Products that you purchase from Merchants;​
● Logistics information from third-party logistics providers in relation to delivery of your Product by a third-party logistics provider on behalf of the Merchant;​ and
● Additional information that you provide and that is required for extended warranty purposes, such as details of your ordered Products, ID card, bank account details, and photos of your damaged/repaired Products.
If you are a Creator, we may collect certain payments-related information, such as your bank account details to facilitate and make payments to you.
If you are a Merchant, we collect the following information:​
● The name of your shop, shop logo, your name, whether you are a personal seller, the country your shop is located in, and category of Product (for example, clothes, toys, etc.) and related business information provided by you;​
● If you are a company, contact details (such as name and phone number) of your legal representative(s) or contact person and identification documents (such as passport or national ID card) provided by you;​
● If you are a personal seller, your identification information such as a copy or photo of your government-issued ID card or passport and your bank account information that you provide;​
● Purchase and transaction history information and information on refunds and complaints that you provide and customer reviews of your store; ​
● Logistics information from third-party logistics providers regarding shipment and delivery of Products, including by third party logistics providers; ​and
● Contract information and deal terms when you provide us with your contracts with third parties (including Creators).
​If you are an IPR Owner, we may collect information such as the details of your IPR ownership.
​If you are a Buyer, Creator, Merchant, or IPR Owner or are visiting or using our Services, we also collect other information that you choose to provide to us.
Automatically Collected Information
We will also automatically collect technical information, such as:
● Usage Information. We collect information regarding your use of our Services, e.g., how you engage with our Services. For Buyers, this may include Products you place in your shopping cart, how you interact with Content we show to you and Products we recommend, the advertisements you view, videos you watch and problems encountered, browsing and search history, the content you like, the content you save to ‘My Favorites’, the users you follow and how you engage with mutual followers.
● Transaction Information. When a purchase or payment is made on or through our Services, we may collect information about the purchase or payment transaction. Such information may include information relating to the Products being promoted or Offered, including the title, price, quantity, stock status and applicable commission in relation to such Products. We may also collect data relating to sales generated by Merchants, sales attributed to Creators, and purchase and transaction history and related video and live-stream metrics.
● Inferred Information. We also infer your attributes, including your interests, gender and age range for the purpose of personalizing Content or Product recommendations.
● Technical Information we collect about you. We collect certain information about the device you use to access our Services, such as your IP address, user agent, mobile carrier, time zone settings, language settings, identifiers for advertising purposes, model of your device, the device system, network type, device IDs, your screen resolution and operating system, app and file names and types, keystroke patterns or rhythms, battery state, audio settings and connected audio devices. Where you log-in from multiple devices, we will be able to use your profile information to identify your activity across devices. We may also associate you with information collected from devices other than those you use to log-in to our Services.
● Image and Audio Information. We may collect information about the videos, images and audio that are a part of your Content, such as identifying the objects and scenery that appear, the existence and location within an image of face and body features and attributes, the nature of the audio, and the text of the words spoken in your Content. We may collect this information to enable special video effects, for content moderation, for demographic classification, for Content and ad recommendations, and for other non-personally-identifying operations.
● Cookies. We, our affiliates, service providers and business partners use cookies and other similar technologies (e.g., web beacons, flash cookies, etc.) (“Cookies”) to automatically collect information, measure and analyze how you use our Services, including which pages you view most often and how you interact with content, enhance your experience using our Services, improve our Services, provide you with advertising, and measure the effectiveness of advertisements and other content. We, our affiliates and our partners also use Cookies to promote our Services on other platforms and websites. Cookies enable our Services to provide certain features and functionality. Web beacons are very small images or small pieces of data embedded in images, also known as “pixel tags” or “clear GIFs,” that can recognize Cookies, the time and date a page is viewed, a description of the page where the pixel tag is placed, and similar information from your computer or device. To learn how to disable certain Cookies, see the “Your rights and choices” section below.
Information From Other Sources
We may receive the information described in this Privacy Policy from other sources, such as:
● As your TikTok account will be used to access and use our Services, you will provide or allow TikTok entities to provide us with your TikTok username, public profile, and other possible information related to such account. We will likewise share certain information with TikTok entities such as your app ID, access token and the referring URL. If you have used third-party social network account details (e.g., Facebook, Twitter, Instagram, Google) or login service to register for your TikTok account, we may also receive your username, public profile, and other possible information related to such account from a TikTok entity.
● If you use a feature which links to another of our Services, we may receive information about your use of that service.
● We may obtain information about you from certain affiliated entities within our corporate group and from third parties / business partners, including about your activities on their platforms.
● We may receive information about you from others, including where you are included or mentioned in Content, direct messages, in a complaint, appeal, request or feedback submitted to us, or if your contact information is provided to us. We may collect information about you from other publicly available sources.
● We may receive information from Merchants and payment and transaction fulfillment providers about you, such as payment confirmation details, and information about the delivery of products you have purchased through our shopping features.

How we use your personal information​
The purposes for which we process your information may differ depending on whether you access or use our Services as a Buyer, Creator, Merchant, or IPR Owner.
In general, we may use information about you in the following ways:
● To fulfil requests for products, services, functionality, support, and information for internal operations, including troubleshooting, data analysis, testing, research, statistical, and survey purposes and to solicit your feedback.
● To respond to your inquiries, feedback, complaints, or other interactions or correspondence, relating to our services, Merchants or Products offered on our Services, to improve, promote, and develop our Services, and provide personalized information about the services we offer.
● To send promotional materials and information about our and others’ services, including by instant messaging or email, from us or on behalf of our affiliates and trusted third parties.
● To operate and provide our Services, improve and develop our Services, conduct product development including to optimize and improve the features and functionality of our Services, and to enhance your user experience.
● To allow you to participate in interactive features of our Services, such as enabling your Content to be used in other users’ videos.
● ​To send marketing communications that may be useful to you. You have the ability to opt out of receiving these communications by clicking a link in the footer of each marketing communication we send, or adjusting your marketing preferences in your privacy settings.
● To use Content as part of our advertising and marketing campaigns to promote our Services, to invite you to participate in an event, and to promote popular topics, hashtags and campaigns on our Services.
● To understand how you use our Services, including across your devices.
● To undertake risk management and promote the safety and security of our Services, including by verifying accounts and activity, scanning, analyzing, and reviewing Content, messages and associated metadata, and by identifying and addressing technical or security issues or problems (including detecting and preventing abuse, harmful activity, fraud, spam, and other illegal activities).
● To verify your identity or age, including as part of our registration, security and fraud prevention measures, and to conduct due diligence.
● To ensure content is presented in the most effective manner for you and your device.
● To communicate with you, including to notify you about changes in our services.
● To perform our obligations under and enforce our Terms of Service, Community Guidelines, and other conditions and policies.
● To train and improve our technology, such as our machine learning models and algorithms, including by monitoring user interactions, performing A/B tests, conducting surveys, and by training and improving our technology, such as our machine learning and AI models and algorithms.
● To facilitate and fulfil sales, promotion, and purchases of goods and services and to provide user support.
● To comply with applicable laws, regulations and legal obligations.
● For any other purposes disclosed to you at the time we collect your information or pursuant to your consent.
If you are a Buyer, we may use your information:
● To perform our contract with you, including where you order Products Offered by Merchants via our Services. This includes sharing your additional information with Merchants and third-party payment providers for the purposes of fulfilling your order, sharing your information with third party logistics providers for the purposes of delivery of your Product(s) on behalf of the Merchant, and sharing your information with insurance brokerage companies and insurance companies for the purposes of providing an extended warranty over a certain Product to you.
● To provide you with a customized experience in our Services, such as by suggesting Products you may want to purchase based on your previous purchases or other interactions with our Services. We also use information that you provide to us and that we collect from you when you contact us via our Services or by telephone for support, for the purposes of providing you with user support regarding your order, which may include responding to or processing your queries, feedback, claims or disputes. ​
● To support the social functions of our Services, including to permit you and others to connect with each other, to provide our messaging service if you choose to use this function.
● To enable you to participate in the virtual items program.
● To infer additional information about you, such as your age range, gender, and interests.
● To measure and understand the effectiveness of the advertisements and other content we serve to you and others, and to deliver advertising, including targeted advertising, to you on our Services.
● To facilitate your participation in, and announce you as a winner of our contests, promotions, challenges, competitions or events conducted or sponsored by us, in which you participate if permitted by applicable terms, and to send you any applicable prizes.
● Consistent with your permissions, to provide you with location-based services, such as advertising and other personalized content.
● To scan, analyze, and review information you provide when you compose, send, or receive messages through our messaging functionality to Merchants, and/or with any virtual assistant in order to provide messaging functionality. For example, we scan and analyze incoming and outgoing messages through our messaging functionality to provide support for the ordered Products, and to personalize and customize your experience on our Services.
● To investigate and resolve complaints or disputes between Merchants or Buyers.
If you are a Creator, we may use your information:
● To perform our contract with you, where Buyers have ordered Products and you are entitled to commission.​
● To allow Merchants and/or business partners, including creator agency partners to identify you based on your profile and to help Merchants decide whether they would like to work with you for the promotion of Merchants’ Products. Information used for this may include the Content you upload, and related information such as the number of likes and responses you receive, and information about your followers.
● To understand your performance with a view to exploring further collaboration with you.​ Information used for this may include the Content you upload, and related information, as well as information regarding sales attributed to you.
If you are a Merchant, we may use your information:
● To enable you to manage your store (including to open or close your store).
● To contact you with a view to improve and develop your business on our Services.
● To perform our contract with you in relation to our Services, such as to enable Buyers to order Products Offered by you via our Services.​
● To provide and administer the TikTok Shop Partner Center or other support services or platforms.​
● To scan, analyze, and review information you provide when you compose, send, or receive messages through our messaging functionality to Buyers, and/or with any virtual assistant in order to provide messaging functionality.
● To investigate and resolve complaints or disputes between Merchants or Buyers.
If you are an IPR Owner, we use your information to verify your IPR, and to enable you to manage your IPR, and for related legal purposes.
​
How we share your personal information​
We share your information with the following parties:

Our Corporate Group Affiliates
We may share your information (including shopping behavioral data, purchasing and transaction data) with members, subsidiaries, or affiliates of our corporate group, who may be located outside of the country where you reside,  including to provide our Services and other services provided by our corporate group and/or third parties / business parties (including apps, websites, software and other services), to facilitate the transactions and services, to provide product recommendations or content to you and to perform research and product development so as to improve and optimize our Services, and to prevent illegal use and to provide support to our users.
Other Users
We share your personal information with other users of our Services, for the purposes of connecting you with those users for the receipt and/or provision of products and services.
Merchants, Payment and Transaction Fulfilment Providers, and Other Service Providers
If you are a Buyer, we share your information with Merchants, their authorized service providers, and third-party logistics providers to process and facilitate your orders and delivery of Products from Merchants. By making a sale or a purchase on our Services, you are directing us to share your information in this way. To process your payment, we also share your information with payment providers. To provide you with an extended warranty for certain products, we also share your information that is relevant to the extended warranty to insurance brokerage companies and insurance companies.​
In certain circumstances, we may also share your information with Merchants to the extent necessary to allow Merchants to initiate communications with you to provide you with user support regarding your order, such as in situations when a Product you have ordered is out of stock.​
If you are a Creator, we share certain information about you with Merchants and/or parties such as creator agency partners, for the purposes of allowing such parties to select Creators for the promotion of Merchants’ Products, and with payment providers to facilitate payment of commission. We may also share your performance data with any agency that represents or manages you so that the agency can fulfill its contractual obligations with you. ​
If you are a Merchant, we may share your information with payment providers and third-party logistics providers to the extent necessary to facilitate orders of Products from Buyers who purchase your Products.​ Your shop details and Product information, such as your shop ratings, are made available to other users and the public.
Business Partners
If you choose to register to use TikTok using your social network account details (e.g., Facebook, Twitter, Instagram, Google), we may receive your phone number, email address, username and public profile from such partners. Through TikTok, we may likewise share certain information with the relevant social network such as your app ID, access token and the referring URL. If you choose to share any Content using a third-party service or use any third-party services with your account for our Services, we may share certain information about you with the third party. Depending on the permissions you grant, the third party may be able to obtain your account information and other information you choose to provide.
Where you opt to share Content on social media platforms, the video, username and accompanying text will be shared on that platform or, in the case of sharing via instant messaging platforms such as WhatsApp, a link to the Content will be shared.
Service Providers
We provide information and content to service providers who support our business, such as cloud service providers, IT service providers and providers of content moderation services to ensure that our Services are safe and enjoyable, and service providers that assist us in marketing our Services.
Payment Processors and Transaction Fulfilment Providers
If you choose to conduct payment transactions, we will share data with the relevant payment provider to facilitate this transaction.
Analytics Providers
We use analytics providers to help us in the optimization and improvement of our Services. Our third-party analytics providers also help us serve targeted advertisements.
Advertisers, Advertising Networks and Measurement Partners
We share information with advertisers and third-party measurement companies to show how many and which Buyers have viewed or clicked on an advertisement.
Integrated Platform Providers
We share limited information with third party platforms whose platform or services are integrated with our Services. This includes third party identity verification providers, so that we can verify your identity.  For example, where you open a shop on our Services, we use a third party verification provider called Jumio to verify your identity. We also share limited information, including information you enter into the AI tools in the Creative Center, with third parties whose platforms or services power the AI tools, such as Microsoft.
For Legal Reasons
We will share your information with law enforcement agencies, public authorities or other organizations if legally required to do so, or if such use is reasonably necessary to:
● comply with legal obligation, process or request;
● enforce our Terms of Service and other agreements, policies, and standards, including investigation of any potential violation thereof;
● detect, prevent or otherwise address security, fraud or technical issues; or
● protect the rights, property or safety of us, our users, a third party or the public as required or permitted by law (including exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction).
Public Profiles
Please note that if your shop profile is set as public or if you post Content which is publicly available such as reviews and comments, your Content may be visible to anyone on our Services and may also be accessed or shared by other users as well as third parties such as search engines, content aggregators and news sites.
Sale, Merger or Other Business Transactions
Your information may be disclosed to our corporate group affiliates and third-parties in connection with a corporate transaction, such as a merger, sale or transfer of assets or shares, reorganization, financing, change of control, acquisition of all or a portion of our business, or acquisition of another business by us, or in the unlikely event of a liquidation or bankruptcy.
Where we store your information
Your information may be stored on servers located outside the country where you live, such as in Singapore, Indonesia, Malaysia, Ireland and the United States. We maintain major servers around the world to bring you our services globally and continuously.
Your information is also processed by staff operating outside your country who work for us or for one of our service providers. Such staff are engaged in, among other things, the fulfilment of your order.
Your rights and choices
You have rights and choices when it comes to your information. You may be afforded certain rights under applicable laws, which may include the right to access, delete, update, or rectify your data, to be informed of the processing of your data, to file complaints with authorities, and potentially other rights, such as to withdraw consent, to suspend or restrict processing, to receive your data in a commonly used and machine-readable format, to request information, to object to automated profiling and to file a lawsuit and seek compensation.
You may withdraw your consent to our disclosure of personal data to third parties. Upon receiving your request, we will cease to display, publish, transmit, disseminate, and/or open the access to your personal data to third parties. Please note that by withdrawing your consent to the disclosure and/or collection of your personal data, we may not be able to fulfil your requests and you may not be able to use some features and functionality of our Services.
You may request that we (i) disclose the history of personal data that we have collected; and/or (ii) erase and dispose of your personal data that we have collected on our server. Please note that by requesting us to erase and dispose of your personal data, you may not be able to use some features and functionality of our Services.
You may submit a request to exercise your rights under applicable laws at https://www.tiktok.com/legal/report/privacy or dataprotection@tokopedia.com. You may appeal any decision we have made about your request by following the instructions in the communication you receive from us notifying you of our decision.
You may be able to refuse or disable Cookies by adjusting your device browser settings. Because each browser is different, please consult the instructions provided by your browser. Please note that you may need to take additional steps to refuse or disable certain types of Cookies. For example, due to differences in how browsers and mobile apps function, you may need to take different steps to opt out of Cookies used for targeted advertising in a browser and to opt out of targeted advertising for a mobile application, which you may control through your device settings or mobile app permissions. In addition, your opt-out selection is specific to the particular browser or device that you are using when you opt out, so you may need to opt-out separately for each browser or device. If you choose to refuse, disable, or delete Cookies, some of the functionality of our Services may no longer be available to you.
The security of your information
We take steps to ensure that your information is treated securely and in accordance with this Privacy Policy. Unfortunately, the transmission of information via the internet is not completely secure. Although we will use reasonable measures to protect your personal data, for example, by encryption, we cannot guarantee the security of your information transmitted via our Services; any transmission is at your own risk.
We have appropriate technical and organizational measures to ensure a level of security appropriate to the risk of varying likelihood and severity for the rights and freedoms of you and other users. We maintain these technical and organizational measures and will amend them from time to time to improve the overall security of our systems.
We will, from time to time, include links to and from the websites of our partner networks, advertisers, affiliates or to other applications, software, online platforms or services operated by us or by third parties. This Privacy Policy does not apply to such other websites, applications, software, online platforms or services and we do not accept any responsibility or liability for these policies. Please check these policies before you submit any information to these websites, applications, software, online platforms or services. We expressly disclaim any and all liability for the actions of third parties, including, but without limitation to, actions relating to the use and/or disclosure of information by third parties.
How long we keep your information
We retain information for as long as necessary to provide our Services and for the other purposes set out in this Privacy Policy. We also retain information when necessary to comply with contractual and legal obligations, when we have a legitimate business interest to do so (such as improving and developing our Services, or enhancing its safety, security and stability), and for the exercise or defence of legal claims.
The retention periods are different depending on different criteria, such as the type of information and the purposes for which we use the information. For example, when we process your information such as your profile information to provide you with our Services, we keep this information for as long as you have an account. If you violate our Terms of Service, or other conditions or policies, we may remove your profile and Content from public view immediately, but may keep other information about you to process the violation.
Information relating to children and teens
Our Services are not directed at users under the age of 21.
By accessing and/or using our Services, you represent that you are at least 21 years of age or married or not under guardianship. If you are below 21 years old and you are not married, or under guardianship:
• you must obtain approval from your parent(s) or legal guardian(s); and
• your parent(s) or legal guardian(s) are responsible for: (i) all your actions in connection with your access to and use of our Services; (ii) your compliance with this policy; and (iii) ensuring that any of your use of our Services will not, in any event, result in any violation of applicable laws and regulations relating to child protections.
If you do not have consent from your parent(s) or legal guardian(s) and your parent(s) or guardian(s) is not willing to open the account under their name, you must cease accessing our Services.
If you believe that there is a user who is below the age of 21 and is using the platform without approval from the user’s parent/guardian, please contact us at https://www.tiktok.com/legal/report/privacy.
Privacy Policy update
We may update this Privacy Policy from time to time. When we update the Privacy Policy, we will notify you by updating the “Last Updated” date at the top of this Privacy Policy and posting the new Privacy Policy or providing any other notice required by applicable law. If you do not agree to the updated policy, you must stop accessing or using our Services.
We recommend that you review the Privacy Policy each time you visit or use our Services to stay informed of our privacy practices.
Language
This Privacy Policy is available in English and the Indonesian language. If there is any inconsistency or different interpretation between the English and Indonesian versions, the Indonesian language text shall prevail to the extent of any inconsistency.

Contact Us​
​If you have questions, comments, complaints or requests regarding this Privacy Policy, please contact us at: https://www.tiktok.com/legal/report/privacy or dataprotection@tokopedia.com
We will endeavor to deal with your request as soon as possible. This is without prejudice to your right to make a complaint with a relevant data protection authority, where applicable.