Running TikTok ads requires a clear understanding of the platform’s privacy policies, which have become increasingly strict in the wake of global data regulations and industry changes. As a digital advertising agency, Sagum has spent over $2 million on TikTok advertising in the past year, and we’ve learned firsthand that compliance isn’t just about avoiding penalties-it’s about building trust with your audience and maintaining campaign performance. Here are the key privacy policies you need to know.
1. TikTok’s Data Sharing and Consent Requirements
TikTok requires advertisers to obtain explicit consent from users before collecting, sharing, or processing their data for ad targeting purposes. This is particularly important in regions governed by laws like the GDPR (Europe) and CCPA (California). You must:
- Use TikTok’s consent management tools to ensure you’re collecting opt-in data for targeting and measurement.
- Implement a clear, user-facing privacy notice on your website or app that explains how TikTok data is used.
- Ensure your data-sharing agreements with TikTok comply with your local legal obligations.
2. TikTok’s Policies on Youth and Sensitive Audiences
TikTok has strict policies regarding advertising to users under 18. You cannot target minors with ads that involve financial products, dating, or personal data collection. Additionally, the platform prohibits targeting based on sensitive categories like health, race, religion, or sexual orientation for ad delivery. To stay compliant:
- Regularly audit your audience targeting to avoid accidental inclusion of restricted groups.
- Use TikTok’s built-in age and content filters to prevent your ads from appearing in inappropriate contexts.
- Review TikTok’s Community Guidelines and Advertising Policies frequently, as they update often.
3. Data Retention and Third-Party Sharing
TikTok retains user data for ad targeting and performance measurement, but you must be transparent about how long data is kept. The platform also shares data with third-party partners (like analytics and attribution tools) under strict agreements. Key points:
- Disclose in your privacy policy that TikTok and its partners may process user data for ad purposes.
- Use TikTok’s Events API and pixel only after obtaining user consent where required.
- Understand that TikTok may use cross-device tracking to deliver more relevant ads, which you should explain to users.
4. The Impact of Apple’s App Tracking Transparency (ATT)
On iOS devices, TikTok ads are affected by Apple’s ATT framework, which requires users to opt into ad tracking. This means:
- Your ability to target and measure conversions on iOS is limited unless users grant permission.
- You must have a robust first-party data strategy (e.g., email lists, customer data) to compensate for reduced third-party data.
- Consider using TikTok’s Advanced Matching feature, which hashes and sends first-party data securely for better attribution.
5. Transparency and User Rights
TikTok mandates that advertisers respect users’ rights to access, modify, or delete their data. If a user requests to opt out of personalized ads or have their data removed, you must have a process in place to honor that. This includes:
- Providing a clear opt-out mechanism on your website or app (e.g., “Do Not Sell My Personal Information” links).
- Coordinating with TikTok’s suppression lists to exclude users who have opted out from your campaigns.
- Documenting your compliance steps for audit purposes.
6. Legal and Contractual Obligations
Your agreement with TikTok includes a Data Processing Addendum (DPA) that outlines how personal data is handled. You must:
- Read and sign TikTok’s DPA, especially if you’re subject to GDPR or LGPD (Brazil).
- Ensure your own privacy policy is updated to mention TikTok as a data processor and explain your use of its advertising tools.
- Work with a legal advisor to tailor your policies to your specific campaigns and regions.
At Sagum, we integrate these privacy policies into our TikTok ad strategies from day one-not as an afterthought. By combining a lean, efficient workflow with strict compliance, we help clients navigate this frontier without sacrificing performance. Remember: privacy policy compliance isn’t just legal overhead-it’s a competitive advantage that builds audience trust and campaign longevity.
