1. Who we are
TK Connect Research ("we", "us") is the beauty research section and brand published at tkconnects.com/research. It is operated by TK Connect on the same website and is not a separate legal entity. For data protection enquiries, contact [email protected].
2. What data we collect and where it comes from
The creator profiles, rankings and statistics shown on this site are derived from publicly available information on TikTok and TikTok Shop, including:
- Public profile fields: display name, handle, bio, avatar, follower count, and any location information only where the creator has chosen to make it publicly visible on TikTok
- Public commerce activity: TikTok Shop category, estimated GMV and items sold derived from publicly listed product and sales information
- Content classification: primary and secondary content categories inferred from public posts
We do not display private contact details (phone number, WhatsApp, Line, email) on the public site. TK Connect may manually verify contact channels and coordinate relevant business outreach for selected projects, but it does not provide public or self-service access to individual contact details.
From site visitors, we collect standard technical data (IP address, browser type, pages visited) via server logs and Cloudflare, and any information you voluntarily submit through the claim/removal form or by contacting us.
3. How we use this data
- To publish aggregate statistics, rankings and creator profiles for brands and agencies researching the Malaysian creator market
- To respond to claim, correction and removal requests
- To respond to enquiries, correction requests, and removal requests you submit
- To detect abuse, prevent scraping of our own aggregated dataset, and maintain site security
We do not sell personal data. We do not use creator public data for any purpose other than the research and matching services described on this site.
4. Legal basis and cross-border transfer
Where the Malaysian Personal Data Protection Act 2010 (PDPA) applies, we process publicly disclosed commercial data on the basis of legitimate interest in providing market research and brand-matching services, balanced against the data subject's rights described in Section 6 below. Where the EU/UK GDPR applies (e.g. to visitors or brand clients based there), our legal basis is likewise legitimate interest for public commercial profiles, and consent or contract for information you submit directly to us.
Our infrastructure is hosted in Singapore. Data may be processed by service providers located outside Malaysia (e.g. Cloudflare, email delivery providers) under standard contractual safeguards.
5. Cookies, advertising and analytics
We use essential cookies for site functionality and Cloudflare for security and performance.
Google AdSense advertisements are displayed on selected public content pages. Google and its advertising partners may use cookies, web beacons, IP addresses, device identifiers and similar technologies to deliver, secure, limit the frequency of and measure advertisements. Ads may be personalized where permitted and where the visitor has provided any consent required by law; otherwise Google may serve non-personalized or limited ads.
- You can manage personalized advertising preferences through Google Ads Settings.
- You can also review industry opt-out choices at www.aboutads.info.
- For more detail on how Google uses information from sites that use its services, see How Google uses information from sites or apps that use our services.
For visitors in the EEA, the UK and Switzerland, a Google-certified consent management message provides Consent, Do not consent and Manage options choices. Advertising may appear on the home page and other public content pages, including policy pages. We exclude account, payment and administration screens and selected service pages from automatic ads.
We may also use privacy-respecting analytics (e.g. aggregated, non-identifying traffic statistics) to understand which content is useful. This policy will be updated whenever an advertising, consent, or analytics feature actually changes state.
6. Your rights — if our research includes your data
If our aggregate research includes information derived from your public TikTok activity, you may at any time:
- Identify the relevant account or source record so we can review it
- Request correction of inaccurate data
- Request removal of your profile from the site entirely
Submit any of these requests via our Claim / Removal Request form. We aim to action removal requests within 5 business days. See also our Data Sources & Correction Policy for details on data accuracy and refresh cycles.
Under the PDPA, you may also object to our processing of your publicly available profile data for market-research purposes. Submit an objection via the same claim form (select "Remove profile") or email [email protected]. We will review and, unless we have compelling legitimate grounds to continue, exclude the record from future public reporting.
7. Your rights — if you are a site visitor
If you submit your email or other personal information through a request form or direct email, you may request access to, correction of, or deletion of that information at any time by emailing [email protected].
8. Data retention
Aggregated creator data is refreshed on a rolling basis and superseded records are discarded. Approved removal requests are recorded so the same profile is not intentionally republished. Visitor-submitted information (emails, form submissions) is retained only as long as necessary for the purpose collected, or until you request deletion.
9. Changes to this policy
We may update this policy as our data practices evolve. Material changes will be reflected by updating the "Last updated" date above.
10. Contact us
Questions about this policy, or to exercise any of the rights above: [email protected]