Privacy Policy - EU

TikTok · agreement dated 30 November 2025 · Official agreement

197 of 215 blocks carry cards. 81 cards.

Last updated: 30 November 2025

Introduction

This privacy policy ("Privacy Policy") applies to the personal information that TikTok processes in connection with TikTok apps, websites, software and related services (the “Platform”), that link to or reference this Privacy Policy. Data Controller: If you live in the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland, TikTok Technology Limited, an Irish company (“TikTok Ireland”), and TikTok Information Technologies UK Limited (“TikTok UK”), a UK company, ("TikTok," "our," "we," or "us") are the joint controllers of your information processed in connection with this Privacy Policy.

What Information We Collect

We collect your information in three ways: Information You Provide, Automatically Collected Information, and Information From Other Sources. More detail is provided below.

Information You Provide

  • Account Information. We collect information that you provide when you set up an account, such as your date of birth, username, email address and/or telephone number, and password. You can choose to add other information to your account, such as a bio or image.
  • User Content. We collect the content you create, import, upload or publish through the Platform, such as photographs, videos, audio recordings, livestreams, comments, hashtags, feedback, reviews, and the associated metadata (such as when, where, and by whom the content was created). Even if you are not a user, information about you may appear in content created or published by users on the Platform. We collect User Content through pre-loading at the time of creation, import, or upload, regardless of whether you choose to save or upload that User Content, for example, to recommend music based on the video. We also collect content (such as text, images, and video) from your device's clipboard if you choose to copy and paste content to or from the Platform or share content between it and a third party platform. In addition, we collect location information (such as tourist attractions, shops, or other points of interest) if you choose to add the location information to your User Content.
  • Messages. We collect the content of the messages you send and receive on the Platform and the associated metadata (such as the time the message was sent, received or read, as well as the participants in the communication). We also collect the messages you send or receive through our chat functionality when using our shopping feature to communicate with sellers or using virtual assistants.
  • Your Contacts and Other Connections. If you choose to sync your contacts, we will collect information from your device’s phone book such as names, phone numbers, and email addresses, and match that information to users of the Platform. If you choose to find other users through your social network contacts, we will collect your public profile information as well as names and profiles of your social network contacts. We also collect information about the accounts you follow and that follow you.
  • Purchase Information. When you make a purchase, a payment, or other transaction on or through the Platform, including when you buy TikTok Coins or purchase products through our shopping features, we collect information about the transaction, such as payment card information, billing, delivery, and contact information, and products you purchased.
  • Surveys, Research, and Promotions. We collect Information You Provide if you choose to participate in a survey, research, promotion, contest, marketing campaign, or event conducted or sponsored by us.
  • Information When You Contact Us. When you contact us, we collect the information you send us, such as proof of identity or age, feedback or inquiries about your use of the Platform or information about possible violations of our [Terms of Service](https://www.tiktok.com/legal/terms-of-service) (our “Terms”), [Community Guidelines](https://www.tiktok.com/community-guidelines) (our “Guidelines”), or other policies.
  • Information From Forms and Features You Use. We collect the Information You Provide when you fill in a form on the Platform. You can let TikTok fill in forms automatically with your account info, like your addresses or payment info.

Automatically Collected Information

Information From Other Sources

  • Advertising, Measurement and Other Partners. Advertisers, measurement and other partners share information with us about you and the actions you have taken outside of the Platform, such as your activities on other websites and apps or in stores, including the products or services you purchased, online or in person. These partners also share information with us, such as mobile identifiers for advertising, hashed email addresses and phone numbers, and cookie identifiers, which we use to help match you and your actions outside of the Platform with your TikTok account. Some of our advertisers and other partners enable us to collect similar information directly from their website or app by integrating our [TikTok Advertiser Tools](https://ads.tiktok.com/help/article?aid=10000407) (such as TikTok Pixel). These partners are required to have the necessary rights and permissions to share your information with us before doing so. We process certain information that we receive from these partners as a joint controller with them. [Learn more](https://ads.tiktok.com/i18n/official/policy/business-products-terms) about our arrangements with these partners.
  • Sellers, Payment and Transaction Fulfillment Providers. We receive information about you from sellers as well as payment and transaction fulfillment providers, such as payment confirmation details, and information about the delivery of products you have purchased through our shopping features.
  • Third Party Platforms and Partners. Third party platforms provide us with information (such as your email address, authentication ID, and public profile) when you choose to sign up for or log in to the Platform using sign-in features provided by those third parties. We may also receive contact information that you hold or is held about you when contact information is synced with our Platform by you or another user. When you interact with any third party service (such as third party apps, websites or products) that integrate [TikTok Developer Tools](https://developers.tiktok.com/), we will receive the information necessary to provide you with features like cross-service authentication or cross-posting. For example, this will happen if you log in to another platform with your TikTok account or if you use TikTok’s “share” button on a third party platform to share content from there to the Platform. We may also receive information from third party providers which we use for safety purposes, including to protect users on the Platform and for content moderation.
  • Additional Sources. We may collect or receive information about you from organisations, businesses, people, and others, including, for example, publicly available sources, government authorities, professional organisations, and charity groups. We also collect information about you where you are included or mentioned in User Content, Messages, in a complaint, appeal, request or feedback submitted by a user or third party, or if your contact information is provided to us by a user.

How We Use Your Information

We use your information to operate, provide, develop, and improve the Platform, including for the following purposes. You can find more detail in “Our Legal Bases and How We Process Your Information”.

How We Share Your Information

Service Providers

We engage service providers that help us provide, support, and develop the Platform and understand how it is used. They provide services such as: cloud hosting, and content delivery, customer and technical support, content moderation, marketing, analytics, and payment services.

We share Information You Provide, Automatically Collected Information, and Information From Other Sources with these service providers as necessary to enable them to provide their services.

Partners

Third Party Platforms and Partners. We share limited information which may include Information You Provide, Technical Information, and Usage Information with third party platforms and partners whose platform or services are integrated with the Platform, or with whom we have a commercial relationship. We do this to give you a seamless experience, allow your content to be shared on other platforms, allow sellers to view and manage your orders through our shopping features, and enable third party platforms and partners to better authenticate users. Some examples include if you:

Advertisers. We provide advertisers with reports about the performance of their ads and other content on the Platform in order to help them measure their effectiveness and understand their audience. These reports contain aggregate information of certain Information You Provide, Automatically Collected Information, and Information From Other Sources. We don’t share information with advertisers that can be used to contact you (such as your name or email address) unless you give us your permission.

Measurement and Data Partners. We share Information You Provide, Technical Information and Usage Information with third party measurement providers who create aggregate reports that help us measure advertising served on the Platform and help our advertisers understand their effectiveness and their audience.

Sellers and their Service Providers. When you make a purchase through the shopping features on our Platform, we share Purchase Information related to the transaction with the sellers and service providers acting on their behalf. This includes order items, contact details and delivery information so that your order can be processed. We also share certain Technical Information about your device or connection with these parties to help ensure the security of the transaction. When making a purchase through our shopping features, please review the product and seller location details provided on the Platform for information about where your information will be sent.

Users of Our Analytics Services. We provide aggregated statistics and insights to help people and businesses understand how people are engaging with the Platform. For example, creators, advertisers and sellers can receive information about the number of views, likes, comments and shares of their content, as well as information to understand their followers, buyers and the audience of their content. We create this aggregate information using Information You Provide and Automatically Collected Information. In certain circumstances, TikTok is a joint controller with TikTok account holders for this processing. [Learn more](https://www.tiktok.com/legal/page/global/information-about-tiktok-analytics/en) about the joint processing for TikTok Analytics.

Our Corporate Group

As a global company, the Platform is supported by certain entities within our corporate group (“Corporate Group”). These entities process Information You Provide, Automatically Collected Information, and Information From Other Sources for us, as necessary to provide certain functions, such as storage, content delivery, security, research and development, analytics, payment services, customer and technical support, and content moderation. See Our Global Operations and Data Transfers for additional information.

Others

We share your information in other limited scenarios as follows:

Users and the Public. Based on your privacy settings, your information, including your Account Information, User Content, and Usage Information may be visible to other users and the public. For example, if you have a public account and have not restricted the visibility of your posts individually, your Account Information and User Content can be viewed or shared by anyone on or off the Platform, whether or not they have a TikTok account. Depending on your privacy settings, your Account Information and User Content may also appear on search engines, content aggregators, and news sites. You can learn about account types and privacy settings, including how to limit the audience for your videos [here](https://support.tiktok.com/en/account-and-privacy/account-privacy-settings).

Independent Researchers: We share your information with independent researchers to facilitate research that meets certain criteria as described in Our Legal Bases and How We Process Your Information.

Corporate Transactions. Your information may be disclosed to third parties in connection with a corporate transaction, such as a merger, sale of assets or shares, reorganisation, financing, change of control, or acquisition of all or a portion of our business.

Legal Obligations and Rights. We may access, preserve, and share the information described in "What Information We Collect" with law enforcement agencies, public authorities, researchers, copyright holders, or other third parties if we have good faith belief that it is necessary to:

To learn more about how we handle requests from law enforcement agencies and public authorities, see our [Law Enforcement Guidelines](https://www.tiktok.com/legal/law-enforcement).

Our Legal Bases and How We Process Your Information

We may only use your information when we have a “legal basis” to do so. We use different legal bases depending on why we use your information (in other words, the “purpose” of our processing). These legal bases are contractual necessity, legitimate interests (ours, yours or those of another party), consent, compliance with a legal obligation, performing a task in the public interest, and protection of vital interests.

Here we explain the legal bases we rely on when we process your information. This section also describes why we use your information, how this information is processed, the categories of information involved, and the associated rights (which always includes the right to access your information). For more information on how to exercise any of your rights, please check out the “Your Rights and Choices” section in the Privacy Policy.

Contractual Necessity

If you have the legal capacity to enter into an enforceable contract, we use Information You Provide, Automatically Collected Information, and Information From Other Sources where it is necessary to perform the contract you enter into (our Terms) when you register for, access, or use the Platform. This means we use your information to:

Your Rights: Whenever we use your information on the basis that it is necessary for the contract we have with you, you have the right to port information you have provided to us.

Legitimate Interests

We use your information where this is necessary to achieve legitimate interests - whether belonging to us, you, or a third party - provided these interests are not outweighed by your interests or fundamental rights and freedoms. We use the information we collect to:

Enable users to create content with interactive features.

Suggest your account to other users.

Provide all users with generic advertising.

Provide measurement and analytics services.

Ensure the safety and well-being of our community.

Ensure the security and stability of the Platform.

Review, improve, promote, and develop the Platform.

Facilitate independent research.

Share your information with third parties.

Protect the Platform and defend legal rights

Marketing communications.

Your Rights: Whenever we use your information on the basis that it is necessary for legitimate interests, you can object to, and request restriction of, such usage.

If you are under the age of majority (under 18 in most relevant countries), with a limited ability to enter into an enforceable contract only, where we may be unable to process your information on the grounds of contractual necessity, we rely on legitimate interests and use the information we collect to:

Provide you with the Platform

Personalise features and content

Enforce our Terms, Guidelines, or policies.

Administer the Platform.

Your Rights: Whenever we use your information on the basis that it is necessary for legitimate interests, you can object to, and request restriction of, such usage.

Your Consent

We ask for your consent to access or use your information for specific purposes. If we do, you’ll always be able to revoke your consent through your device permissions or in-app settings.

Personalised advertising.

Retain your payment card information.

Sellers’ marketing communications.

Device permissions.

Your rights: Whenever we use your information based on your consent, you can withdraw your consent at any time. However, your withdrawal of consent will not affect the lawfulness of processing your information based on your consent prior to your withdrawal of consent. You can withdraw your consent for applicable personalised ads related settings by following these [instructions](https://support.tiktok.com/en/account-and-privacy/personalized-ads-and-data/personalization-and-data).

You also have the right to port information you have provided to us that we use based on your consent.

Compliance with a legal obligation

We may use your information including your Account Information or User Content where it is necessary to comply with a legal obligation. This includes situations where we have obligations to communicate with you, take measures to ensure the safety of our users, or comply with a valid legal request such as an order or disclosure request from regulators, law enforcement agencies or courts. We generally use Information You Provide and Automatically Collected Information, although it depends on the specific situation.

To perform a task in the public interest

We may use your information where it is necessary to perform a task in the public interest, including undertaking research, preventing and detecting crime, safeguarding children and promoting public safety, security, and integrity as laid down by applicable law. We generally use Information You Provide and Automatically Collected Information, although it depends on the specific situation.

Your rights: When we use your information on the basis that it is necessary for a task carried out in the public interest, you have the right to object to, and seek restriction of, our usage.

To protect someone's vital interests

We may use your information where it is necessary to protect your or someone else's life, physical integrity, or safety. This could include scanning Messages and associated metadata where permitted by law. Click [here](https://support.tiktok.com/en/account-and-privacy/account-privacy-settings/direct-message) to learn more. This could also include providing law enforcement agencies or emergency services with information in urgent situations to protect health or life. We generally provide Information You Provide and Automatically Collected Information, although it depends on the specific situation.

Your Rights and Choices

You have rights and choices when it comes to your information. Some of these rights apply generally, while others will only apply in certain circumstances. Depending on the scenario, these rights may be subject to some limitations. TikTok Ireland will be responsible for responding to your request within the relevant periods provided by law. If necessary to resolve your request, TikTok Ireland will liaise with TikTok UK.

Access your information. You can ask us, free of charge, to confirm what information we process about you, to provide certain information about the processing, and for a copy of your information. In-app controls enable you to:

Delete your information. You can delete or ask us to delete your information. In-app controls enable you to:

Rectify your information. You can change or ask us to change or correct your information where that information is not accurate. You can change or correct much of your information through the in-app controls and settings (such as your Account Information and video content).

Port your information. You have the right to data portability in circumstances where we rely on contractual necessity or consent as our legal basis. This means that you have the right to receive your information in a structured, commonly used, and machine-readable format and to share it with a third party. You can exercise your right of portability by choosing to “Download your data” in your settings. Click [here](https://support.tiktok.com/en/account-and-privacy/personalized-ads-and-data/requesting-your-data) for detailed instructions. You can also port your TikTok data through TikTok’s Data Portability API. Click [here](https://developers.tiktok.com/products/data-portability-api/) for further information.

Object to the processing of your information. You also have the [right to object](https://www.tiktok.com/legal/right-to-object?lang=en) to the processing of your information in certain circumstances. This right applies when we are performing a task in the public interest, pursuing our legitimate interests or those of a third party, or when your data is processed for the purpose of facilitating scientific or historical research in certain circumstances. In submitting an objection request, please provide all relevant information, including the processing activity you are objecting to, why you want to object and how the processing activity affects you, and any additional information that you think will help us review your request. We will stop the particular processing if we don't have compelling legitimate grounds to continue that processing or don’t need it for legal claims.

Restrict the processing of your information. You have the right to request the restriction of the processing of your information where (a) you are challenging the accuracy of the information, (b) the information has been unlawfully processed, but you are opposing the deletion of that information, (c) where you need the information to be retained for the pursuit or defence of a legal claim, or (d) you have objected to processing and you are awaiting the outcome of that objection request.

To exercise any of the above rights, please contact us through our [webform](https://www.tiktok.com/legal/report/privacy). Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details or provide additional information so that we can understand your request.

We encourage you to “Contact us” if you are not satisfied with how we have responded to any of your rights requests. You also have the right to lodge a complaint with the Irish Data Protection Commission (TikTok Ireland’s lead supervisory authority) or with your local supervisory authority.

In addition to these rights, you can control privacy settings for your account. Click [here](https://support.tiktok.com/en/account-and-privacy/account-privacy-settings) for more information.

Your choice regarding the use of information across different services.

If you are a user in the EU, we offer you the choice of whether to combine and cross-use your TikTok activity data with our affiliated services, like TikTok Shop, where legally required. [Learn more](https://www.tiktok.com/legal/page/global/tiktok-shop-dma/en).

Data Security and Retention

Security of your information is important to us. We maintain appropriate technical, administrative, and physical security measures that are designed to protect your information from unauthorised access, theft, disclosure, modification, or loss. We regularly review our security measures to consider available new technology and methods.

We retain information for as long as necessary to provide the Platform and for the other purposes set out in this Privacy Policy. We also retain information when necessary to comply with contractual and legal obligations, when we have a legitimate business interest to do so (such as improving and developing the Platform, and enhancing its safety, security and stability), and for the exercise or defence of legal claims.

The retention periods will be different depending on the type of information and the purposes for which we use the information. For example, when we process your information to provide you with the Platform, we keep this information for as long as you have an account. This information includes your Account Information, User Content, and Messages. If you violate our Guidelines or Terms, we may remove Information You Provide including your Account Information and/or User Content from public view immediately but keep your information as is necessary to process the violation.

Our Global Operations and Data Transfers

To support our global operations:

These entities commit to processing information in compliance with applicable privacy laws and to implementing appropriate security measures to protect your information.

When we transfer your information outside of the EEA, the UK, or Switzerland, we ensure it benefits from an adequate level of data protection by relying on:

  • Adequacy decisions. These are decisions from the [European Commission](https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en) under Article 45 GDPR (or equivalent decisions under other laws) where they recognise that a country offers an adequate level of data protection. We transfer your information as described in “What Information We Collect” to some countries with adequacy decisions, such as the countries listed [here](https://www.tiktok.com/legal/page/eea/transferee-countries/en); or
  • Article 49. In the absence of an adequacy decision, We rely on Article 49 (1)(b) and (c) GDPR to transfer [Purchase Information](https://bytedance.sg.larkoffice.com/docx/IABcdmCZGoOq4WxMgHQlH1CBgQd#share-RrVCdnNjYoFcTOxgVDqljZFSg4b) as described in “What Information We Collect” to sellers and transaction fulfilment providers in countries without an adequacy decision when necessary to provide shopping features to facilitate the purchase and delivery of products, goods and services, or to process your orders; or
  • Standard contractual clauses. The European Commission has approved [contractual clauses](https://commission.europa.eu/document/download/e60b1cd4-d802-44d5-9cac-ddd3c943a5ef_en?filename=1_en_annexe_acte_autonome_cp_part1_v5_0.pdf) under Article 46 of the GDPR that allows companies in the EEA to transfer data outside the EEA. These (and their approved equivalent for the UK and Switzerland) are called standard contractual clauses. We rely on standard contractual clauses to transfer information as described in “What Information We Collect” to certain entities in our Corporate Group (as described [here](https://www.tiktok.com/legal/page/eea/transferee-countries/en)) and third parties in countries without an adequacy decision.

For a copy of these adequacy decisions or standard contractual clauses, please contact us via the details provided in the “Contact us” section below.

Younger Users

You must be at least 13 years old to use the Platform. If you believe that there is a user who is below this minimum age, please contact us using this [webform](https://support.tiktok.com/en/safety-hc/report-a-problem/report-underage-accounts-on-tiktok).

To provide users younger than 18 with an age-appropriate experience, certain features are not available. Further details are available in our [Help Centre](https://support.tiktok.com/en/account-and-privacy/account-privacy-settings/privacy-and-safety-settings-for-users-under-age-18).

If you are the guardian of a teen, our [Guardian's Guide](https://www.tiktok.com/safety/en-us/guardians-guide/) contains information and resources to help you understand the Platform and the tools and controls you or your teen can use, including “Family Pairing” features.

Privacy Policy Updates

We may amend or update this Privacy Policy from time to time. We will notify you of any material changes to this policy by a notice provided through the Platform or by other means. The “Last Updated” date at the top of this policy reflects the effective date of such policy changes.

Contact Us

You can contact us about this Privacy Policy through our [webform](https://www.tiktok.com/legal/report/privacy). You can reach TikTok's Data Protection Officer [here](https://www.tiktok.com/legal/report/DPO).

You can also contact us at the following postal address.