Privacy Policy
Effective date: October 29, 2026 · Last updated: October 29, 2026
BEAMS Clinic (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit beamsclinic.com and connect your TikTok account to our services.
This policy is prepared in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand (“PDPA”) and the TikTok for Developers terms.
1. Data Controller
- Name: [Registered legal entity name] (BEAMS Clinic)
- Address: [Registered office address]
- Privacy contact email: [Privacy contact email]
- Data Protection Officer (DPO): [Name / email] (if applicable)
2. Information We Collect
We collect only the data necessary to provide our services, and only within the scope of permissions you grant through TikTok’s authorization screen.
| Category | Examples | Source |
|---|---|---|
| Profile information | TikTok Open ID, display name, profile picture | TikTok Login |
| Organic account data (Organic API) | Follower count, video list, views, likes, comments, shares | TikTok Display / Research API, within granted scopes |
| Advertising account data (Marketing API) | Advertiser ID, campaign names, spend, impressions, clicks, conversions | TikTok Marketing API, within granted scopes |
| Technical data | Access logs, IP address, browser type, access times | Our website and systems |
We do not collect or store your TikTok password, and we do not access data beyond the permissions you grant.
3. How We Use Your Data
- Marketing API: to display performance overviews of advertising campaigns, so we can analyze and plan the marketing activities of our clinic.
- Organic API & Research: to analyze the performance of organic accounts and content, so we can develop content strategies on health and aesthetic topics.
- To authenticate you and manage login sessions.
- To maintain system security and prevent abuse.
- To comply with applicable laws and requirements.
We do not sell, rent, or trade your personal data, and we do not share TikTok user data with third parties for their own marketing purposes.
4. Legal Basis for Processing
We process data based on your consent, given when you approve permissions on the TikTok authorization screen; the performance of a contract for providing our services; and our legitimate interest in maintaining the security of our systems.
5. Disclosure of Data
We may disclose data only in the following cases:
- Service providers who help us operate our systems, under confidentiality obligations.
- Government authorities when required by law or court order.
- TikTok, as necessary for the operation of the API, in accordance with TikTok’s privacy policy.
6. Storage and Retention
We keep data only for as long as necessary for the stated purposes. In general:
- Connection tokens: stored in encrypted form and deleted immediately when you disconnect, or no later than [number] days after expiry.
- Aggregated analytics data: retained for no more than [number] months, then deleted or de-identified.
- Technical logs: retained for no more than [number] days.
We apply appropriate technical and organizational safeguards, including HTTPS encryption in transit, access controls, and keeping the client secret strictly on the server side.
7. Use of TikTok Data
Connections to TikTok are made through TikTok Login Kit and TikTok APIs in accordance with the TikTok for Developers terms. For more information about TikTok’s privacy practices, please see tiktok.com/legal.
8. Your Rights
Under the PDPA, you have the right to:
- Access and request a copy of your data
- Request correction of inaccurate data
- Request erasure or destruction of your data
- Restrict or object to processing
- Withdraw your consent (this may affect features that depend on it)
- Lodge a complaint with the Personal Data Protection Committee of Thailand
9. How to Disconnect and Request Deletion
- In TikTok, go to Settings and privacy → Security → Manage app permissions, then remove BEAMS Clinic.
- Or send a request to [Privacy contact email] including your TikTok username. We will act on it within [number] business days.
10. Children’s Privacy
Our services are not directed at individuals under 18 years of age. If you believe we have received data from a minor without the required consent, please contact us so that we can delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you on this website and update the “Last updated” date above.
12. Contact Us
If you have questions about this Privacy Policy, please contact: [email protected]