PT
This policy explains what personal data Primetok collects when you use this website or engage us as an agency, why we collect it, and what rights you have over it.
We are the data controller for the information described below. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Primetok is a TikTok Shop marketing agency operating from Ilford, Greater London. For any question about this policy or about how we handle your data, contact us using the details in the final section.
Where we handle client customer data as part of delivering our services, we act as a data processor on that client's instructions, and the terms of that processing are set out in the engagement agreement rather than here.
We collect only what we need to respond to enquiries, deliver our services and meet our legal obligations.
| Category | Examples | Where it comes from |
|---|---|---|
| Enquiry data | Name, work email, company, phone number, website, revenue and budget bands, and anything you write in the message field | Submitted by you through the enquiry form or by email |
| Billing data | Billing contact, company address, VAT number, purchase order reference, invoice history | Provided by you at checkout or when we issue an invoice |
| Payment data | Card payments are processed by Stripe. We receive a confirmation and the last four digits, never full card details | Stripe, our payment processor |
| Account delivery data | Contact details for people on your team we work with day to day | Provided by you during onboarding |
| Technical data | IP address, browser user agent and pages requested, recorded in standard server logs | Collected automatically when you use the site |
We do not knowingly collect special category data, and we ask that you do not include any in an enquiry message.
| Purpose | Lawful basis |
|---|---|
| Responding to an enquiry you have sent us | Consent, given when you tick the contact box on the enquiry form |
| Providing agency services under an engagement | Performance of a contract |
| Issuing invoices and collecting payment | Performance of a contract, and legal obligation for tax records |
| Keeping accounting and tax records | Legal obligation (six years under UK tax law) |
| Protecting the site from abuse and spam | Legitimate interests in keeping our systems secure |
| Sending occasional updates to existing clients | Legitimate interests, with an opt-out in every message |
Where we rely on consent, you can withdraw it at any time by emailing us. Withdrawing consent does not affect processing carried out before you withdrew it.
| Data | Retention period |
|---|---|
| Enquiries that do not become clients | 24 months from the last contact, then deleted |
| Client records and correspondence | For the engagement, then 6 years from the end of the relationship |
| Invoices and accounting records | 6 years from the end of the relevant financial year, as required by UK tax law |
| Server logs | 90 days |
Under UK GDPR you have the right to:
To exercise any of these, email us using the details below. We will respond within one month. You will not be charged, and you do not need to give a reason.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to resolve it first.
Data protection enquiries should be sent to the email address on our contact page, marked for the attention of the data protection contact, or posted to our registered address.
We review this policy at least annually and whenever our processing changes materially. The effective date at the top of this page shows the current version.
This document is provided as a working template for a UK agency and is not legal advice. Have it reviewed by a solicitor, and complete the company registration, VAT and data protection contact details, before relying on it.
Subject access, correction and deletion requests are handled free of charge and answered within one month. Email us and we will start it the same day.