Privacy Policy
Last updated: 2 November 2026
This policy explains how Bastemidar Ltd ("Bastemidar", "we", "us") collects, uses and protects personal data when you visit our website, contact us, or use our TikTok advertising management services. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Bastemidar Ltd is a private limited company registered in England and Wales under company number 17222124. Registered office: 128 City Road, London, EC1V 2NX, United Kingdom. We are the data controller for the personal data described in this policy. Contact: hello@bastemidar.space.
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Contact data | Name, business email, phone number, company name, message content | You, when you email or call us |
| Client account data | Billing details, contract information, communication history | You, when you become a client |
| TikTok advertising data | Advertiser account ID, campaign / ad group / ad settings, budgets, creatives, aggregated performance metrics (spend, impressions, clicks, conversions) | TikTok API for Business, only for accounts you authorise |
| Access credentials | OAuth access tokens issued by TikTok after you authorise us | TikTok, after your authorisation |
| Technical data | Basic server logs (IP address, browser type, pages requested) | Our hosting provider |
This website does not use advertising or analytics cookies.
3. How we use TikTok data
We access the TikTok API for Business only for advertiser accounts whose owner has explicitly authorised Bastemidar through TikTok's official authorisation flow or TikTok Business Center. We use that data solely to:
- create, edit, pause and manage campaigns, ad groups, ads and budgets on the client's instructions;
- upload and manage client-approved creative assets;
- configure the client's TikTok Pixel and Events API settings;
- retrieve aggregated performance reports to prepare reports for that same client.
We do not sell, rent or share TikTok data with third parties; we do not combine one client's data with another's; we do not attempt to identify individual TikTok users; and we do not use TikTok data for any purpose other than providing our services to the advertiser it belongs to. Our use of TikTok data follows the TikTok for Business terms and developer policies.
4. Legal bases
- Contract — to provide the services you have engaged us for, including managing your TikTok advertising.
- Legitimate interests — to reply to enquiries, run and secure our business and website.
- Legal obligation — to keep accounting and tax records.
5. Sharing
We share personal data only with service providers that help us run our business (hosting, email, accounting), under contracts that require them to protect it, and with authorities where required by law. TikTok advertising data is shared only with the client it belongs to.
6. International transfers
Where a provider processes data outside the UK, we rely on adequacy regulations or the UK International Data Transfer Agreement / Addendum to protect it.
7. Security
Access tokens are stored encrypted and are never shared. Access to our internal tools is limited to authorised Bastemidar staff, protected by strong passwords and two-factor authentication. Connections to TikTok and our systems use HTTPS.
8. Retention
- TikTok advertising data and access tokens: deleted within 30 days of the client revoking access or the end of our contract.
- Enquiries that do not lead to a contract: deleted after 12 months.
- Invoices and accounting records: kept for 6 years as required by UK law.
9. Revoking access
Clients can revoke Bastemidar's access to their TikTok advertiser account at any time from TikTok Business Center or the TikTok Ads Manager settings, or by emailing hello@bastemidar.space. Once access is revoked we can no longer read or change anything in that account.
10. Your rights
You have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. To exercise these rights, email hello@bastemidar.space. You can also complain to the UK Information Commissioner's Office (ico.org.uk).
11. Changes
We may update this policy. The latest version will always be published on this page with its update date.