Privacy policy
1. Controller
The controller of personal data is M8T Jakub Jagiełło, ul. Wspólna 16, 08-500 Ryki, Poland, NIP (tax ID) 5060129214, REGON 543922130. Contact for personal data matters: [email protected].
We provide the M8T services, including an app that integrates TikTok Shop with a seller's ERP system. For buyer data that the app processes on behalf of a seller, we act as a processor under Article 28 GDPR and the seller is the controller. For data of sellers who use the app and of people who write to us, we are the controller.
2. Data we process
| People | Data | Purpose |
|---|---|---|
| TikTok Shop buyers | Order data, name, delivery address, phone number, order items, status and tracking number | Fulfilling the order in the seller's system |
| Sellers and their staff | Shop account data, contact details, access tokens, integration settings, technical event logs | Providing and securing the service |
| People who write to our e-mail address | E-mail address and message content | Replying to the message |
We retrieve buyer data from TikTok Shop through the official API, only to the extent needed to transfer the order to the seller's system. We do not use it for marketing, profiling or our own purposes.
3. Legal basis
- Article 6(1)(b) GDPR: performance of the contract with the seller and steps taken at the seller's request before entering into it;
- Article 6(1)(f) GDPR: our legitimate interest in securing the service, detecting abuse and errors, answering messages, and establishing or defending claims;
- for buyer data: processing on the seller's documented instructions under a data processing agreement meeting Article 28 GDPR. The legal basis towards the buyer (usually Article 6(1)(b), the sales contract) is determined by the seller.
4. Retention
Buyer data retrieved from TikTok Shop is deleted after 90 days. A seller can request earlier deletion. Data that the seller stores in its own ERP system remains under the seller's control and is not covered by this period. Seller account data is kept for as long as the service is used and is then deleted or anonymised, except for data we must keep until claims expire or longer if the law requires. E-mails are kept for as long as the matter lasts and until possible claims expire.
5. Recipients
We do not pass data to third parties for their own purposes. Data goes only to:
- TikTok Shop, from which we retrieve it and to which we send stock levels, prices and tracking numbers, and the seller's ERP system, to which we deliver orders;
- the provider of the server infrastructure on which the app runs (a server in Germany), as a technical operator of the server.
Neither we nor our server provider transfer the data outside the European Economic Area.
6. Security
Communication uses HTTPS. Access tokens are stored in encrypted form. Only people who need it to provide the service have access to data. The server is located in the European Union, in Germany.
7. Cookies and tracking
This website uses no cookies, no analytics or advertising scripts, and loads no resources from external services.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on Article 6(1)(f) GDPR. You may also lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
If you are a buyer in a seller's TikTok Shop store, please send your request preferably to the seller as the controller. You can also write to [email protected], and we will forward the request to the seller or carry it out on the seller's instruction.
9. Changes
We announce changes by publishing a new version on this page with the update date.