1. Who we are
TK Connect (“we”) operates tkconnects.com and related subdomains. We publish Malaysia TikTok creator research and provide public creator search and manually reviewed shortlist support for cross-border commerce teams. Privacy questions may be sent to [email protected].
2. Information we process
Public creator data: creator names, profile images, follower counts, content categories and public TikTok Shop commerce fields obtained from publicly accessible sources.
Project enquiry data: when you request a manually reviewed shortlist, we collect the email address, brand or product category, requirements, referenced creator and source page that you submit.
Account data: account registration and sign-in are currently paused. If you previously used the authenticated service, we may retain the phone number, searches, favourites, unlock history, orders and payment records associated with your account as described below.
Technical data: standard server and Cloudflare logs such as IP address, browser type and requested pages, used for security and service reliability.
3. How we use information
- Publish aggregate creator research, benchmarks and methodology
- Provide public creator search, filtering and manually reviewed shortlist support
- Respond to project enquiries and maintain prior account, order and eligible refund records
- Protect accounts and investigate abuse
- Respond to creator correction, claim and removal requests
We do not sell registered users’ personal information. Public research pages do not expose individual creator contact details.
4. Legal basis and international processing
Our infrastructure is hosted in Singapore. Where Malaysia’s Personal Data Protection Act 2010 applies, we process publicly disclosed commercial information on the basis of legitimate interests while providing the correction and removal rights described below. Where the EU or UK GDPR applies, public business information is processed on the basis of legitimate interests; information you submit is processed on the basis of consent or contractual necessity.
Service providers such as Cloudflare, messaging providers and payment channels may process limited information outside Malaysia under their applicable contractual safeguards.
5. Cookies, advertising and analytics
We use essential storage for site functionality and Cloudflare for security and performance.
Google AdSense advertisements are displayed on selected public content pages. Google and its advertising partners may use cookies, web beacons, IP addresses, device identifiers and similar technologies to deliver, secure, limit the frequency of and measure advertisements. Ads may be personalised where permitted and where the visitor has provided any consent required by law; otherwise Google may serve non-personalised or limited ads.
For visitors in the European Economic Area, the United Kingdom and Switzerland, a Google-certified consent management message provides Consent, Do not consent and Manage options choices. Advertising may appear on the home page and other public content pages, including policy pages. We exclude account, payment and administration screens and selected service pages from automatic ads.
6. Security
Contact fields are stored using AES-256 encryption and are not published on the public site. Internal access is limited to authorised service work and support. API inputs are validated to reduce injection and cross-site scripting risks. Public self-service payments are not currently accepted.
7. Creator rights
A listed creator may request a profile claim, correction or removal by emailing [email protected]. We aim to process removal requests within five business days.
8. User rights and retention
You may request access, correction or deletion of personal information you submitted by contacting us. Project enquiries are retained only as long as needed to respond and manage the resulting business relationship. Account and order data is retained while the service is used and for any necessary compliance period. Aggregate research snapshots may be retained for reproducibility, but approved creator removals are excluded from future public profile use.
9. Contact
Questions or rights requests: [email protected]