Privacy policy

Clipmerce, Stavanger, Norway, is the data controller for the personal data described here. Clipmerce is operated by Kaada Nordic MarTech (Org. no. 936 289 835), the registered entity behind the brand.

Privacy questions and requests: privacy@clipmerce.co. General contact: hello@clipmerce.co.

Creator applications. Name, email, TikTok handle and other platform handles, market, languages, audience size and view bands, audience concentration, categories, TikTok Shop and LIVE experience, disclosure practice, content links, commercial expectations, categories you decline, and any notes you add. Purpose: assessing fit for creator partnerships and contacting you about them. Lawful basis: your consent and our legitimate interest in operating a screened creator network. If we work together, the basis becomes performance of a contract.

Seller and brand enquiries. Name, work email, company, website, market, category, revenue band, TikTok Shop status, goals and your message. Purpose: answering the enquiry and scoping an engagement. Lawful basis: our legitimate interest in responding to a business enquiry, and pre-contractual steps at your request.

Campaign operations. For active engagements we process creator payment details, shipping addresses for samples, campaign performance data and agreement records. Lawful basis: performance of a contract, and legal obligation for accounting records.

Technical data. Standard server and security logs (IP address, user agent, timestamps) generated when you load this site, kept for security and abuse prevention on the basis of legitimate interest.

• We do not sell or rent personal data.
• We do not add enquiry or application contacts to a marketing list without asking.
• We do not use advertising or profiling cookies on this site.
• We do not use your data to train AI models.
• We do not ask for special-category data (health, beliefs, etc.) and ask you not to send it.

This site does not set advertising, tracking or profiling cookies. Only strictly necessary technical storage is used to serve pages and keep forms working, which does not require consent under the ePrivacy rules. The audit checklist ticks and the vetting scorecard run entirely in your browser and are never transmitted to us. If we later add analytics, we will publish a cookie notice with a consent choice before it goes live.

We use a small number of processors to run the service: cloud hosting and database infrastructure, email delivery, and accounting software. They act on our instructions under data processing agreements. During an engagement, we share only what is necessary — for example a creator's shipping address with the seller sending the sample, or a creator's handle and rate with the seller approving the brief. We tell you when we do this, and we do not pass creator contact details to sellers without agreement.

Some processors operate outside the EEA. Where that happens, transfers rely on EU Standard Contractual Clauses or an adequacy decision.

• Unsuccessful creator applications: up to 12 months, so we can revisit you if a matching seller appears. Deleted sooner on request.
• Seller and brand enquiries that do not become engagements: up to 24 months.
• Active engagement records: for the duration of the engagement plus the statutory retention period for accounting records under Norwegian law (currently five years).
• Security logs: up to 12 months.

Under the GDPR and UK GDPR you can request access to your data, correction, erasure, restriction of processing, portability, and you can object to processing based on legitimate interest. Where processing rests on consent, you can withdraw it at any time. Email privacy@clipmerce.co and we will respond within 30 days. You can also complain to your national supervisory authority — in Norway, Datatilsynet; in the UK, the ICO.

US residents. Where state privacy laws such as the CCPA/CPRA apply, you have comparable rights of access, deletion and correction, and a right to opt out of sale or sharing of personal information. We do not sell or share personal information as those terms are defined.

Data is held in access-controlled cloud infrastructure with encryption in transit and at rest, and access limited to people who need it for the work. No system is perfect; if a breach affects your rights we notify you and the relevant authority as required.

Our services are for businesses and adult creators. We do not knowingly collect data from anyone under 18, and we do not work with creators under the age required by TikTok's terms and local law for commercial content.