Privacy Policy

1. Introduction

FLOWMKT SDN BHD ("FLOWMKT", "we", "us", or "our") is a Malaysia-based digital marketing and live commerce company. This Privacy Policy explains how we collect, use, store, and protect information when you use our services, visit our website at flowmkt.com.my, or interact with our platform integrations including the TikTok Ads Open API and TikTok Shop Open API.

2. Information We Collect

We collect information in the following categories:

• Contact Information: Name, email address, phone number, and company name provided through our contact forms or direct communication.
• API Response Data: Campaign performance data, ad metrics, and analytics data received via the TikTok Ads API and TikTok Shop Open API for internal reporting and campaign optimization purposes.
• Usage Analytics: Non-personally identifiable data about how our internal tools are used, for the purpose of improving our services.
• Creator and Affiliate Data: Creator profiles, content performance metrics, and commission records for the purpose of managing creator campaigns.
• Technical Data: IP addresses, browser type, and device information collected automatically when you visit our website.

3. How We Use Your Information

We use collected information to:

• Provide and deliver our marketing and live commerce services to brand clients
• Generate internal performance reports and campaign analytics
• Manage creator and affiliate campaigns, including tracking performance and rewards
• Optimize TikTok ad campaigns and live selling performance
• Communicate with clients, creators, and business partners
• Comply with legal obligations and regulatory requirements
• Improve our platform, tools, and services

4. Third-Party Services and APIs

Our services integrate with the following third-party platforms and APIs:

• TikTok Shop Open API (open-api.tiktokglobalshop.com): Used to retrieve order data, product information, and seller analytics for brands we manage. Data is used solely for internal reporting and operational purposes.
• TikTok Ads API / Business API (business-api.tiktok.com): Used to manage ad campaigns, retrieve performance metrics, and optimize ad spend for brand clients.
• WhatsApp Business: Used for internal team communication and sending automated alerts and reports.

These platforms have their own privacy policies. We encourage you to review TikTok's Privacy Policy at tiktok.com/legal/privacy-policy.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

• With brand clients for campaign reporting and performance review (limited to data relevant to their campaigns)
• With service providers who assist us in delivering our services, under strict confidentiality agreements
• When required by law, court order, or governmental authority
• In connection with a business transfer, merger, or acquisition

6. Data Retention

We retain personal information and campaign data for as long as necessary to fulfill the purposes described in this policy, typically for the duration of our service engagement plus 12 months for business records. API response data is retained for no longer than 24 months. After this period, data is securely deleted or anonymized.

7. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, or destruction. These include access controls, encrypted data transmission (HTTPS), and secure storage of API credentials. While we strive to protect your data, no method of internet transmission is 100% secure.

8. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Opt-out: Opt out of non-essential communications at any time.

To exercise any of these rights, please contact us at office@flowmkt.com.my.

9. Cookies

Our website does not currently use tracking cookies or third-party analytics tools. We may use essential technical cookies solely for website functionality. No advertising cookies or cross-site tracking is implemented on flowmkt.com.my.

10. Children's Privacy

Our services are intended for businesses and individuals aged 18 and above. We do not knowingly collect personal data from children under the age of 18. If you believe we have collected data from a minor, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the effective date at the top of this page. Continued use of our services after any changes constitutes acceptance of the updated policy.

12. Contact Us

For any privacy-related questions, requests, or concerns, please contact: