Tidalmatch Ltd - Privacy Policy

Tidalmatch Ltd (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with us, use our services, or visit our website.

We comply with the UK GDPR, EU GDPR, and the Data Protection Act 2018.

1. Who We Are

Tidalmatch Ltd
Company Registration Number: 15984945
Registered Office: Tidalmatch Ltd, 123 City Road, London, England, EC1V 2NX

For all privacy-related questions, you can contact our Data Protection Officer (DPO):
📧 [email protected]

2. Information We Collect

• Identity Data - name, username, business information
• Contact Data - email, phone, address
• Account & Platform Data - TikTok creator/seller IDs, account details, preferences
• Transaction Data - payment details, order history, sales performance
• Technical Data - IP address, browser type, device identifiers, cookies
• Usage Data - how you use our website, services, and integrations

3. How We Use Your Data

• Providing our services (TikTok Shop partnership services, account management)
• Communicating with you (support, updates, notifications)
• Fulfilling contractual obligations with TikTok and other partners
• Improving our website and services
• Ensuring security, fraud prevention, and regulatory compliance
• Meeting legal obligations under UK/EU law

4. Legal Bases for Processing

• Consent – when you agree to optional marketing or cookies
• Contract – processing needed to provide our services to you
• Legal Obligation – e.g., tax, regulatory compliance
• Legitimate Interests – business operations, fraud prevention, service improvements

5. Sharing Your Data

We do not sell your data. We may share your information with:

• TikTok (as part of our Partner obligations)
• Service providers (e.g., AWS for secure hosting)
• Professional advisers (legal, financial, compliance)
• Regulators or authorities where required by law

All third-party providers are bound by contracts that ensure GDPR-level protection.

6. International Data Transfers

Where data is transferred outside the UK or EEA, we ensure safeguards such as:

• Adequacy decisions (approved countries)
• Standard Contractual Clauses (SCCs)
• UK International Data Transfer Agreement (IDTA)

7. Data Retention

We only keep your personal data as long as necessary:

• For business purposes (e.g., to provide services)
• To comply with legal and tax requirements
• To resolve disputes and enforce agreements

After this, data is securely deleted or anonymised.

8. Your Rights

Under UK & EU GDPR, you have rights including:

• Access your data
• Correct inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Data portability (transfer your data)
• Withdraw consent at any time
• Lodge a complaint with the ICO (UK) or your local EU supervisory authority

To exercise your rights, contact: [email protected]

9. Cookies & Tracking

We use cookies to:

• Make our site work properly
• Analyse site performance
• Personalise your experience

You can manage or disable cookies via your browser settings.

10. Security

We use strong technical and organisational measures, including:

• Encryption (AES-256 at rest, TLS 1.2+ in transit)
• Access controls and MFA
• Regular vulnerability scanning and monitoring

11. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted here with an updated 'Last Updated' date.

12. Contact Us

📧 [email protected]
📍 Tidalmatch Ltd, Tidalmatch Ltd, 123 City Road, London, England, EC1V 2NX