TikTok shares data with authorities when legally required or reasonably necessary for legal, safety or fraud reasons
TikTok will share your information with law enforcement agencies, public authorities or other organisations if it is legally required to, or if doing so is reasonably necessary to comply with a legal obligation, process or request; enforce its Terms of Service and other agreements, policies and standards, including investigating potential violations; detect, prevent or address security, fraud or technical issues; or protect the rights, property or safety of TikTok, its users, a third party or the public as required or permitted by law.
Supporting quotations
For Legal Reasons
We will share your information with law enforcement agencies, public authorities or other organisations if legally required to do so, or if such use is reasonably necessary to:
comply with legal obligation, process or request;
enforce our Terms of Service and other agreements, policies, and standards, including investigation of any potential violation thereof;
detect, prevent or otherwise address security, fraud or technical issues; or
protect the rights, property or safety of us, our users, a third party or the public as required or permitted by law
Qualifications & exceptions
Besides legally required disclosures, sharing is allowed where it is reasonably necessary for one of the four listed purposes.
The first purpose includes responding to a legal request, not only a binding legal obligation.
Protecting rights, property or safety is limited to what is required or permitted by law.
Not stated here
The Terms of Service and other policies referred to were not supplied.
Legal Rights & Agreement Rules · User right or choice
Depending on local law you may have rights to access, delete or correct data, request online and appeal
TikTok says you may have certain rights under applicable laws, which may include rights to access, delete, update or rectify your data, to be informed about its processing, to file complaints with authorities, and potentially others. You can submit a request to exercise those rights through TikTok's online privacy request form, and you can appeal a decision on your request by following the instructions in TikTok's decision notice. The policy also points to the Supplemental Terms for whether a local representative or contact is available in your country.
Supporting quotations
Your rights and choices
You may be afforded certain rights under applicable laws, which may include the right to access, delete, update, or rectify your data, to be informed of the processing of your data, to file complaints with authorities, and potentially other rights.
You may appeal any decision we have made about your request by following the instructions in the communication you receive from us notifying you of our decision. Please also see the Supplemental Terms on whether a local representative or local contact is available for your country.
You have rights and choices when it comes to your information.
Qualifications & exceptions
Which rights you have depends on the laws that apply to you; the list is introduced with may include.
Country-specific rights and contacts are set out in the Supplemental Terms, explained in their own cards.
Legal Rights & Agreement Rules · Restriction or exception
Linked partner, advertiser and affiliate websites have their own privacy policies TikTok disclaims responsibility for
TikTok will from time to time include links to and from websites of its partner networks, advertisers and affiliates. Those websites have their own privacy policies, and TikTok says it accepts no responsibility or liability for those policies. It asks you to check them before submitting information to those sites.
Supporting quotations
We will, from time to time, include links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies.
Legal Rights & Agreement Rules · Procedure
TikTok may update the policy by changing the date and posting it; continuing to use TikTok means you accept
TikTok may update this Privacy Policy from time to time. It will notify you by updating the Last Updated date and posting the new policy, or by giving any other notice that applicable law requires. Continuing to access or use the Platform after the updated policy's date counts as accepting it, and if you do not agree you must stop using the Platform.
Supporting quotations
Privacy Policy update
We may update this Privacy Policy from time to time. When we update the Privacy Policy, we will notify you by updating the “Last Updated” date at the top of this policy and posting the new Privacy Policy or providing any other notice required by applicable law. Your continued access to or use of the Platform after the date of the updated policy constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you must stop accessing or using the Platform.
Qualifications & exceptions
Notice may consist only of a changed date and the posted policy unless applicable law requires another form of notice.
Acceptance is tied to continued use after the date of the updated policy.
Legal Rights & Agreement Rules · Procedure
Contact TikTok about the policy through its online form; complaints to a data protection authority stay available
Questions, comments, complaints or requests about the policy go through TikTok's online privacy request form, and the supplemental terms say whether a local representative or contact is available in your country. TikTok says it will endeavour to deal with your request as soon as possible, and that this does not affect your right to complain to a relevant data protection authority, where applicable.
Supporting quotations
Contact
If you have questions, comments, complaints or requests regarding this Privacy Policy, please contact us at:
Please also see the supplemental terms below on whether a local representative or local contact is available for your country.
We will endeavour to deal with your request as soon as possible. This is without prejudice to your right to make a complaint with a relevant data protection authority, where applicable.
Qualifications & exceptions
TikTok commits only to endeavour to respond as soon as possible; no deadline is stated here.
The right to complain to a data protection authority applies where applicable.
Legal Rights & Agreement Rules · Context
Jurisdiction-specific Supplemental Terms override the main policy where they conflict for your jurisdiction
The policy ends with Supplemental Terms for specific jurisdictions. If the supplemental terms relevant to the jurisdiction from which you access or use the services conflict with the rest of the policy, those supplemental terms supersede and control. Outside a conflict, the main policy continues to apply alongside them.
Supporting quotations
Supplemental Terms – Jurisdiction-Specific
In the event of a conflict between the provisions of the Supplemental Terms – Jurisdiction-Specific that are relevant to your jurisdiction from which you access or use the services, and the rest of policy, the relevant jurisdictions’ Supplemental Terms – Jurisdiction-Specific will supersede and control.
Qualifications & exceptions
Precedence applies only where there is a conflict.
The relevant jurisdiction is the one from which you access or use the services.
Legal Rights & Agreement Rules · User right or choice
Australia: you can complain to TikTok and, if you disagree with its response, to the OAIC
In Australia you can raise complaints, exercise your rights or seek remedies through TikTok's online privacy request form. If you disagree with TikTok's response, you also have the right to complain to the Office of the Australian Information Commissioner (OAIC), whose website and phone number the policy lists.
Supporting quotations
You may raise complaints, exercise your rights or seek any remedies by contacting us at
If you disagree with our response, you also have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at:
Website:
Phone: 1300 363 992
Qualifications & exceptions
The OAIC route is described for when you disagree with TikTok's response.
Legal Rights & Agreement Rules · Context
India: the Platform is provided and controlled by a ByteDance Indian entity, which 'TikTok' and 'we' refer to
For use from India, the Platform is provided and controlled by ByteDance (India) Technology Private Limited, and TikTok is the brand used for the services. References to TikTok, we or us in the policy are to be read as referring to the Indian entity. The source names that entity in two slightly different ways in the same paragraph (ByteDance (India) Technology Private Limited and Bytedance (India) Technology India Private Limited).
Supporting quotations
India
If you are using our services in India, the Platform is provided and controlled by ByteDance (India) Technology Private Limited.
When using these services from India, please accordingly read “TikTok”, “we” or “us” in this policy to refer to Bytedance (India) Technology India Private Limited.
Qualifications & exceptions
Applies when using the services from India.
Not stated here
The paragraph gives two different spellings of the entity name; which is the exact legal name is not resolved by the source.
Legal Rights & Agreement Rules · User right or choice
Indonesia: you can ask for the history of data collected and for erasure, using TikTok's request form
In Indonesia you may ask TikTok to disclose the history of personal data it has collected and to erase and dispose of personal data it has collected on its servers. Erasure may mean you cannot use some features. You exercise these rights through TikTok's online privacy request form.
Supporting quotations
You may request TikTok to (i) disclose the history of personal data that we have collected; and/or (ii) erase and dispose of your personal data that we have collected on our server. Please note that by requesting us to erase and dispose of your personal data, you may not be able to use some of TikTok’s features and functionality.
To exercise any of your rights, contact us at:
Qualifications & exceptions
Applies to use of the services in Indonesia.
Erasure may make some features unavailable.
Legal Rights & Agreement Rules · Context
Japan: additional terms and a separate Japanese-language Privacy Policy apply
For users in Japan, the Japan supplemental terms and TikTok's Japanese-language Privacy Policy apply. That Japanese policy was not supplied with this document, so its content is not described here.
Supporting quotations
Japan
If you are using our services in Japan, the following additional terms and our
Qualifications & exceptions
Applies to use of the services in Japan.
Not stated here
The Japanese-language Privacy Policy was not supplied; how it relates to this English policy is not stated.
Legal Rights & Agreement Rules · Context
Japan shopping: Bytedance KK is data controller, with TikTok Pte. Ltd. controlling some shopping activities
If you use TikTok's shopping features in Japan, the data controller for your personal data is Bytedance KK in Tokyo. Some activities in operating the shopping features may be performed by TikTok Pte. Ltd., which is the controller for those activities; for example it may be responsible for developing and improving the shopping features. The item then says that TikTok, we or us in the policy means TikTok Pte. Ltd. and Bytedance KK.
Supporting quotations
If you are using our shopping features in Japan, the data controller responsible for the processing of your personal data is Bytedance KK., whose address is at Shibuya Hikarie, 2-21-1 Shibuya, Shibuya-ku, Tokyo, 150-8510, Japan.
However, certain activities relating to the operation of our shopping features may be performed by TikTok Pte. Ltd., which will be the data controller for these processing activities. For example, TikTok Pte. Ltd. may be responsible for the development and improvement of our shopping features and will be a data controller for such purposes. When we refer to “TikTok”, “we” or “us” in this Privacy Policy, we mean TikTok Pte. Ltd. and Bytedance KK.
Qualifications & exceptions
Stated for use of the shopping features in Japan.
Not stated here
The definition of TikTok, we or us appears inside the shopping item, so whether it applies to all use in Japan or only shopping is not clear from the text.
Legal Rights & Agreement Rules · User right or choice
Latin America: rights may include access, correction, deletion, portability, revoking consent and objecting
Depending on where you live in Spanish-speaking Latin America, your rights under applicable law may include: knowing, accessing, deleting, updating or correcting your data; being informed how it is processed; limiting its use and disclosure; transfer and portability; revoking consent and requesting evidence of consent; objecting to certain processing; not being subject to decisions based solely on automated processing; and complaining to the competent data protection authority, especially if TikTok rejects your request or does not respond in time. Revoking consent does not affect processing done before the revocation, and some rights apply only in certain circumstances or jurisdictions and may be limited by law.
Supporting quotations
Depending on the jurisdiction in which you reside, your rights under applicable laws may include the following: to know, access, delete, update, or correct/rectify your personal data; to be informed of the ways in which we process your personal data; to limit the use and disclosure of your data; to transfer and data portability; to revoke your consent and to request evidence of your consent; to object to certain processing activities; to not be affected by a decision based solely on automated processing; and to file complaints before the competent data protection authority, where applicable, but especially if we reject your request or do not respond in a timely manner.
Revoking your consent does not affect the lawfulness of our use or processing of your data undertaken prior to such revocation. Some of your rights apply generally, while others will only apply in certain circumstances and jurisdictions, and, depending on the scenario, these rights may be subject to some limitations by law.
Qualifications & exceptions
Which rights apply depends on the jurisdiction in which you reside.
Revocation is not retroactive.
Some rights apply only in certain circumstances and may be limited by law.
Legal Rights & Agreement Rules · Procedure
Latin America: rights requests are free, handled within legal deadlines, via the contact route
In Spanish-speaking Latin America you can exercise your rights free of charge by sending a request through the contact details in the policy. TikTok says requests will be resolved as soon as possible according to their nature and within the deadlines set by applicable law, and encourages you to contact it if you are not satisfied with its response. TikTok's Data Protection office is reached through the same online privacy request form.
Supporting quotations
You can exercise your rights free of charge, by sending your request to the contact details set forth in the “Contact” section. Your rights requests will be resolved as soon as possible according to the nature of your request and within the terms established by applicable laws.
If you wish to reach TikTok’s Data Protection office, contact us at:
Qualifications & exceptions
Applies to use of the services in Spanish-speaking Latin America.
Legal Rights & Agreement Rules · User right or choice
Nigeria: extra rights to withdraw consent, object, restrict processing and data portability
For users in Nigeria, to the extent the relevant data privacy laws recognise them, and in addition to the rights listed in the main policy, you have the right to withdraw consent at any time where TikTok relies on consent, to object to processing of your personal data, to request restriction of processing in specific circumstances, and to data portability.
Supporting quotations
Your Rights. To the extent that the relevant laws, rules and regulations on data privacy recognize your rights and freedoms as data subjects, in addition to the rights listed above, you shall have the right to: withdraw your consent at any time where the legal basis of our processing is consent; object to the processing of your personal data; request the restriction of processing in specific circumstances; and data portability.
Nigeria
Qualifications & exceptions
Applies to use of the services in Nigeria.
These rights apply to the extent the relevant laws recognise them; withdrawal of consent applies where consent is the legal basis; restriction applies in specific circumstances.
Legal Rights & Agreement Rules · User right or choice
Nigeria: a right not to face solely automated significant decisions, except for contract, consent or law
In Nigeria you have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects on you. TikTok says you may not be entitled to this right where the decision is necessary to perform the contract between you and TikTok, where you have given consent, or where it is authorised by law.
Supporting quotations
You have the right not to be subject to decisions based solely on automated processing which produces legal or similar significant effect concerning you. However, you may not be entitled to this right, where the decision becomes necessary for the performance of the contract between us, or where you have given us your consent, or as authorised by law.
Qualifications & exceptions
Applies to use of the services in Nigeria.
The right covers decisions based solely on automated processing with legal or similarly significant effects.
It may not apply where the decision is necessary for the contract, you consented, or law authorises it.
Not stated here
Whether moderation decisions such as account bans fall under the contract exception is not stated.
Nigeria: contact TikTok's privacy team, verify your identity, and complain to the Data Protection Commission
In Nigeria you can raise complaints, exercise your rights, seek remedies or reach TikTok's Data Protection Officer or Privacy Team through its online privacy request form. TikTok may require you to verify your identity or account details before responding to a rights request. You also have the right to complain to the Nigeria Data Protection Commission by email or through the complaint channels on its website.
Supporting quotations
Complaints and Remedies. You may raise complaints, exercise your rights or seek any remedies or reach our Data Protection Officer/Privacy Team at
Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details. You also have the right to lodge a complaint with the Nigeria Data Protection Commission via email at info@ndpc.gov.ng or through platforms available for complaints via its website at
Qualifications & exceptions
Applies to use of the services in Nigeria.
Identity or account verification may be required before TikTok responds.
Legal Rights & Agreement Rules · User right or choice
Philippines: rights to information, objection, access, correction, erasure, NPC complaints, damages and portability
For users in the Philippines, additional terms apply under the laws and issuances of the National Privacy Commission (NPC). To the extent those laws recognise them, you have rights to information, to object, to access, to rectification, to erasure or blocking, to lodge complaints with the NPC, to damages and to data portability. TikTok may require you to verify your identity or account details before responding to a request.
Supporting quotations
Philippines
If you are using our services in the Philippines, the following additional terms shall apply pursuant to the relevant laws, rules and regulations and issuances by the Philippines National Privacy Commission (“NPC”) on data privacy.
Your Rights. To the extent that the relevant laws, rules and regulations on data privacy recognize your rights and freedoms as data subjects, you shall have the right to information, object, access, rectification, erasure or blocking, lodge complaints before the NPC, damages and data portability. Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.
Qualifications & exceptions
Applies to use of the services in the Philippines.
Rights apply to the extent the relevant laws recognise them.
Identity or account verification may be required.
Legal Rights & Agreement Rules · Procedure
Singapore: you can contact TikTok's Data Protection Officer through a dedicated form
For users in Singapore, TikTok provides a separate contact page for its Data Protection Officer.
Supporting quotations
Singapore
If you are using our services in Singapore, the following additional terms apply:
Data Protection Officer: If you wish to reach TikTok’s Data Protection Officer, please contact us at:
Qualifications & exceptions
Applies to use of the services in Singapore.
Legal Rights & Agreement Rules · Context
South Africa: TikTok SA keeps a PAIA Manual on its processing, your rights and how to request records
TikTok's South African entity, TikTok South Africa (Pty) Limited, says South African access-to-information law (section 51 of the Promotion of Access to Information Act 2 of 2000, PAIA) requires it to compile an information manual. The manual covers its personal information processing under the Protection of Personal Information Act 4 of 2013 (POPIA), how individuals exercise their data subject rights under POPIA, the records it holds, and how to request access to those records. The manual is available through a link that was not supplied.
Supporting quotations
TikTok's legal entity in South Africa, TikTok South Africa (Pty) Limited (TikTok SA), is required by the terms of section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA) to compile an information manual (PAIA Manual) that provides details: (i) on its processing of personal information activities in terms of the Protection of Personal Information Act 4 of 2013 (POPIA); (ii) the process that must be followed for relevant individuals to exercise their data subject rights as provided for in POPIA; (iii) the records held by TikTok SA in terms of PAIA; and (iv) the process that needs to be followed by relevant individuals to request access to such records in terms of PAIA.
TikTok SA's PAIA Manual can be accessed
Qualifications & exceptions
Applies to TikTok's South African entity and users in South Africa.
Not stated here
The PAIA Manual was not supplied.
The cited Acts are external laws; their requirements are not supplied or explained here.
Legal Rights & Agreement Rules · Context
Türkiye: users are referred to a separate Turkish-language Privacy Policy on Law No. 6698 compliance
For users in Türkiye, TikTok refers you to its Turkish-language Privacy Policy for further information on its compliance with Law No. 6698 on the Protection of Personal Data. That policy was not supplied, so its content is not described here.
Supporting quotations
Türkiye
If you are using our services in Türkiye, please refer to the
for further information on our compliance with Law No. 6698 on the Protection of Personal Data.
Qualifications & exceptions
Applies to use of the services in Türkiye.
Not stated here
The Turkish-language Privacy Policy was not supplied.
Legal Rights & Agreement Rules · Procedure
UAE: UAE law governs the policy; small-value disputes go to the DIFC Small Claims Tribunal
If you use the Platform in the UAE, the Privacy Policy is governed by and interpreted under UAE law. For a dispute in connection with the policy where the claim is within the DIFC Small Claims Tribunal's limits as set from time to time, either party refers it to that Tribunal. Other disputes follow the mediation and arbitration route in the next card.
Supporting quotations
Governing law and dispute resolution
By using our Platform in the UAE, this Privacy Policy will be governed by and interpreted in accordance with the laws of the UAE. In the event of a dispute arising between the parties in connection with this Privacy Policy:
where the dispute relates to a claim for a sum within the limits specified by the DIFC Small Claims Tribunal from time to time, then the dispute shall be referred by either party to the said Tribunal; and
Qualifications & exceptions
Applies to use of the Platform in the UAE.
The small-claims route depends on the Tribunal's limits as they change from time to time.
Not stated here
The Tribunal's current monetary limits are not stated.
Legal Rights & Agreement Rules · Procedure
UAE: other disputes go to DIFC-LCIA mediation, then binding arbitration in Dubai by one arbitrator
For UAE users, disputes about the policy that are not small claims must first go to mediation under the DIFC-LCIA Arbitration Centre's Mediation Rules. If mediation does not settle the dispute within 30 days of starting, or a longer period agreed in writing, it is referred to and finally resolved by arbitration under the DIFC-LCIA Arbitration Rules. Mediation and arbitration are in English, with one arbitrator, conducted in Dubai.
Supporting quotations
for all other disputes, the parties shall seek settlement of that dispute by mediation in accordance with the Mediation Rules of the DIFC-LCIA Arbitration Centre, which Rules are deemed to be incorporated by reference to this clause.
If the dispute is not settled by mediation within 30 days of the commencement of the mediation, or such further period as the parties shall agree in writing, the dispute shall be referred to and finally resolved by arbitration under the Arbitration Rules of the DIFC-LCIA Arbitration Centre
The language to be used in the mediation and in the arbitration, shall be English. In any arbitration commenced pursuant to this clause the number of arbitrators shall be one and the arbitration shall be conducted in Dubai.
Qualifications & exceptions
Applies to disputes in connection with the policy for use of the Platform in the UAE, other than small claims.
Arbitration follows only if mediation does not settle within 30 days or an agreed longer period.
Not stated here
The DIFC-LCIA rules incorporated by reference were not supplied.
Legal Rights & Agreement Rules · User right or choice
Vietnam: statutory rights include knowing, consent withdrawal, access, deletion, objection, complaints and damages
In Vietnam, subject to certain exceptions, you have statutory rights under applicable laws, in particular the rights to know; to consent and withdraw consent; to access; to delete data; to restrict processing; to be provided with data; to object to processing; to complain, denounce or start lawsuits; to claim damages; and to self-protection. You exercise these rights through the contact details in the policy, and TikTok says it will respond regardless of where your data is stored.
Supporting quotations
Data subject's rights and obligations. Subject to certain exceptions, you have statutory rights and obligations under applicable laws. In particular, you have the following statutory rights:
Right to know;
Right to consent and withdraw consent;
Right to access;
Right to delete data;
Right to restrict data processing;
Right to be provided with data;
Right to object data processing;
Right to complain, denounce or initiate lawsuits;
Right to claim for damages; and
Right to self-protection.
You may exercise these rights by contacting us through the details in the Contact section, and we will respond to your requests regardless of the location in which your data is stored.
Qualifications & exceptions
Applies to use of the services in Vietnam.
The rights are subject to certain exceptions under applicable law.
Legal Rights & Agreement Rules · Restriction or exception
Vietnam: you have statutory duties to protect your own and others' data and give complete, accurate data
In Vietnam the policy lists your statutory obligations: to protect your own personal data; to ask other relevant organisations and individuals to protect it; to respect and protect others' personal data; to provide complete and accurate personal data when you consent to processing; and other obligations under applicable laws.
Supporting quotations
You have the following statutory obligations:
Protect your own personal data;
Request other relevant organizations and individuals to protect your personal data;
Respect and protect personal data of others;
Provide complete and accurate personal data upon giving consent to the processing of your personal data; and
Other obligations under applicable laws.
Qualifications & exceptions
Applies to use of the services in Vietnam.
The list ends with other obligations under applicable laws, so it is not complete.
Legal Rights & Agreement Rules · Company commitment
Nothing in the policy waives statutory consumer rights that cannot be limited by contract
The policy states that nothing in it should be read as waiving or limiting statutory consumer rights that cannot be contractually limited under applicable laws. The sentence appears at the end of the Vietnam supplemental terms, before the Other Jurisdictions heading, but its wording refers to the Privacy Policy as a whole.
Supporting quotations
Nothing in this Privacy Policy shall be construed as a waiver or limitation to statutory consumer rights that cannot be contractually limited under applicable laws.
Qualifications & exceptions
Covers only statutory consumer rights that applicable law does not allow to be contractually limited.
Not stated here
Because it sits inside the Vietnam section, whether it is meant to apply only to Vietnam or to all users is not clear from the text.
Legal Rights & Agreement Rules · Context
Other jurisdictions: a local-language version of the policy may add terms specific to your country
In jurisdictions where the national or official language is not English, the local-language version of TikTok's Privacy Policy may set out additional jurisdiction-specific terms, and TikTok asks you to refer to it for further information. Those local-language versions were not supplied with this document.
Supporting quotations
Other Jurisdictions
In jurisdictions where the national or official language is not English, the version of the TikTok Privacy Policy in your local language may set out additional terms specific to your jurisdiction. Please also refer to the version of this Privacy Policy in your local language for further information.
Qualifications & exceptions
Applies in jurisdictions whose national or official language is not English.
Local versions may, not necessarily will, contain additional terms.
Not stated here
The local-language versions were not supplied, so any additional terms in them are not described here.