How we collect, use, store and protect personal data — including data we access through the TikTok Shop Open API on behalf of sellers.
Last updated 9 August 2026
Supernova Digital Media UK Ltd (“Supernova”, “we”, “us”) is committed to protecting your privacy. This notice explains how we collect, use and protect personal data when you use our website or our TikTok Shop services. Company number 13790033. Registered with the Information Commissioner’s Office under reference ZB754394.
From our website and direct contact with you:
Through the TikTok Shop Open API, where a seller has authorised our app: order and buyer details (name, delivery address, contact details — often masked by TikTok), creator profile and performance data, and shop and product data.
We rely on your consent for marketing, and on our legitimate interests or the performance of a contract for everything else. We do not sell personal data, use it for our own advertising, or use it to train third-party AI models.
For our own website visitors and business contacts we are a data controller. For data we access from a seller’s TikTok Shop we act as a processor on that seller’s instructions — so if you are a buyer or creator, please contact the seller or TikTok Shop to exercise your rights. Contact us and we will pass your request on promptly.
We use cookies that are strictly necessary for the site to work. Analytics and other non-essential cookies are set only with your consent, which you can withdraw at any time.
We do not sell or trade your personal data. We share it only with service providers who help us operate — our cloud hosting and email providers — with TikTok Shop where the data originates there, and with authorities where we are legally required to. All personal data is stored in the United Kingdom. A full list of our sub-processors is available on request.
Data is encrypted in transit using TLS and at rest using AES-256. Access is restricted to named individuals on a least-privilege basis and protected by multi-factor authentication. We maintain documented security, access control, incident response and retention policies, reviewed annually. Personal data breaches are reported to the ICO within 72 hours where required.
Only as long as we need it. Enquiry records for 24 months after last contact, TikTok Shop order data for 24 months, creator data for 12 months, website logs for 90 days, and financial records for 6 years as UK law requires. When a seller disconnects our app we delete their data from live systems within 30 days and from backups within 90 days.
You have the right to access, correct, delete, restrict or object to our use of your personal data, to receive it in a portable format, and to withdraw consent at any time. Email privacy@supernovada.com and we will respond within one calendar month, free of charge.
If you are unhappy with our response you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
Our services are for businesses. We do not knowingly collect data from anyone under 18.
We may update this notice; the date at the top shows when we last did. Questions can go to privacy@supernovada.com, or to Supernova Digital Media UK Ltd, 3.01 Tradestars, 32–36 Loman Street, London, SE1 0EH.