Effective date: September 25, 2026
This policy explains what personal information Tik Tok Bling collects when you use tiktokbling.com, why we collect it, who we share it with, how long we keep it, and the choices you have. It covers our website, our store, and the email we send you.
Tik Tok Bling is an independent retailer. We are not affiliated with, endorsed by, or sponsored by TikTok or ByteDance Ltd.
Who we are and how to reach us
Tik Tok Bling operates tiktokbling.com, an online store selling iced-out fashion watches to customers in the United States and Canada. It is run by MOUR, a registered business name of Muhammad Zen Akhtar, based in Brampton, Ontario, Canada. We decide what personal information is collected here and why, which makes us the business (or, in Canada, the organization) responsible for it.
For any privacy question, or to exercise any right described below, email support@tiktokbling.com or use our contact form. We answer privacy requests at the same address we answer order questions, and we do not charge for making a request.
What we collect
- Order information. Your name, email address, shipping address, phone number if you give us one, the items you ordered, order total, and order history.
- Account information. If you create an account: your email address, a hashed password (we never see the password itself), and any addresses you save.
- Payment information. Handled by Stripe, not by us. See Payments below.
- Email subscription information. Your email address, the date and time you confirmed your subscription, the IP address you confirmed from, and whether you opened or clicked our emails.
- Support correspondence. Messages you send to support@tiktokbling.com or through our contact form, including anything you attach.
- Device and usage data. IP address, browser and device type, referring page, and the pages you view — collected through the cookies and similar technologies described in our Cookie Policy.
- Security logs. IP addresses and timestamps of failed login attempts, kept to block automated attacks on the store.
We do not ask for, and do not want, sensitive personal information such as government identification numbers, health information, precise geolocation, or biometric data. Please do not send it to us.
Why we use it
- To take, process, ship and support your order, and to handle returns, refunds and warranty claims.
- To send transactional email: order confirmations, shipping notices, delay notices, and replies to your questions.
- To send marketing email, but only if you have expressly confirmed you want it.
- To measure how the store performs and how visitors find and use it.
- To advertise the store, and to measure whether those ads work.
- To protect the store against fraud and automated attacks.
- To meet our tax, accounting and consumer-protection obligations.
Payments
Payments are processed by Stripe. Card details you enter at checkout go directly to Stripe over an encrypted connection; they never reach our server and we never see or store your full card number. We receive a payment confirmation and limited details — the card brand, the last four digits, and the billing postal code result — so we can identify the payment, issue refunds, and respond to disputes. Stripe processes this data as its own controller, under its privacy policy at stripe.com/privacy. Stripe also uses device data for fraud prevention.
Email marketing and the 15% welcome offer
If you sign up for our 15% off welcome offer — through the popup, the footer form, or the checkbox at checkout — we send you a confirmation email first. Nothing is added to our mailing list, and no marketing email is sent, until you tap the link in that email. That is double opt-in, and it is how we record the express consent Canada’s anti-spam law (CASL) requires before commercial email.
Your discount code is generated only once you confirm. It is single-use, tied to your subscription, and cannot be combined with sale prices.
Our marketing email is sent with MailPoet, running on our own server. We record whether you opened an email and which links you clicked, so we can tell which messages are worth sending. We do not use cookie-based revenue tracking in email. Every marketing email carries a one-click unsubscribe link and the postal address that CAN-SPAM and CASL require. Unsubscribing stops marketing email immediately; it does not stop order and shipping emails, which we must send to fulfil your order.
Analytics
We use Google Analytics 4 to understand how visitors use the store. It sets cookies and similar identifiers and collects the pages you view, your device and browser, your approximate location derived from your IP address (city or region level, not precise), and the actions you take such as viewing a product or starting checkout.
We have Google Signals enabled. This means that for visitors signed in to a Google account with Ads Personalization turned on, Google may associate this activity with that account and use it for cross-device reporting, remarketing audiences, and demographics and interests reports.
Analytics cookies are only set after you consent through our banner. You can also opt out of Google Analytics on every website by installing Google’s browser add-on at tools.google.com/dlpage/gaoptout.
Advertising
We advertise through Google. Two things follow from that:
- Google Ads conversion tracking. When you arrive from one of our ads and then buy, a conversion tag reports the sale to Google Ads so we know which ads work. This uses advertising cookies and only runs after you consent.
- Google Merchant Center. We send our product catalogue — titles, images, prices, availability and shipping settings — to Google so our products can appear in Shopping results. This is product data, not customer data.
Both run through Google for WooCommerce, which connects our store to Google using a WordPress.com account operated by Automattic. That connection carries our site and account identifiers, not your order details.
Google is an independent controller for the advertising data it receives. You can review and change how Google personalizes ads for you at myadcenter.google.com.
Meta advertising
If you accept marketing cookies in our banner, we use the Meta Pixel and the Meta Conversions API to measure which of our ads lead to visits and sales, and to show our ads to people who have visited us. Your browser and our server then send Meta the pages you view and the products you view, add to your cart or buy (product IDs, order value and currency), together with a browser identifier (the _fbp cookie) and, if you arrived from a Meta ad, a click identifier (_fbc). When you place an order, this can include your contact details in hashed (irreversibly scrambled) form, so Meta can match the sale to an ad.
Until you accept, and whenever you decline or your browser sends a Global Privacy Control signal, nothing is sent to Meta and no Meta cookies are set: Meta’s script loads on our pages, but it stays held. You can withdraw at any time from Cookie Settings. Meta Platforms is an independent controller for the data it receives; see Meta’s Privacy Policy.
Separately, we share our product catalogue (product names, prices, images and stock levels) with Meta so our products can appear in Facebook and Instagram shopping features. The catalogue contains nothing about you.
Cookies and consent
Our consent banner is powered by Complianz. Analytics and advertising cookies are set only after you accept them. Cookies that are strictly necessary — the ones that keep your cart, your session and your consent choice — are always active, because the store cannot work without them.
Our Cookie Policy lists every cookie by category, what it does and how long it lasts. You can change or withdraw your consent at any time using the Cookie settings link in our footer, and your browser settings let you block or delete cookies independently of us.
We honor Global Privacy Control. If your browser or extension sends a GPC signal, we treat it as an opt-out of analytics and advertising cookies for that browser automatically, without you having to interact with the banner.
Who we share information with
- Our fulfilment partners and their carriers — your name, shipping address and order contents, so your order can be packed and delivered.
- Stripe — payment and fraud-prevention data, as described above.
- Google — device and usage data for analytics and advertising, after consent.
- Meta — only if you accept marketing cookies: the page, product and purchase events described under Meta advertising.
- Automattic (WordPress.com) — the site connection that authenticates our Google integration.
- Our email and hosting providers — who operate the servers that send our email and serve this site, and who process data only on our instructions.
We do not sell your personal information for money, and we never share your email address with another company so it can market to you. We disclose personal information outside this list only where the law requires it, or where it is necessary to establish or defend a legal claim — for example, providing order and delivery records to a payment processor in a chargeback dispute.
Where your information goes
Our orders are fulfilled by partners located in China. To ship your order we must send them your name, shipping address and order contents. Their carriers and the customs authorities of the countries an order passes through also receive this information, because an international parcel cannot be delivered without it.
Information held in another country is subject to that country’s laws, including lawful access by its courts and government agencies, and the protections available there may be weaker than those where you live. We share only what is needed to deliver the order, and we require our partners to use it for that purpose alone.
Your California privacy rights
Under the California Consumer Privacy Act, as amended by the CPRA, you have the right to know what personal information we hold about you and where it came from, to have it corrected, to have it deleted, to opt out of its sale or sharing, and to not be treated differently for exercising any of these rights. We do not offer financial incentives in exchange for personal information.
Sharing device and usage data with advertising partners such as Google can count as a "sale" or "sharing" under California law even though no money changes hands. You can opt out at any time using the Do Not Sell or Share My Personal Information link in our footer, by declining advertising cookies in our banner, or by sending a Global Privacy Control signal, which we honor automatically.
We do not knowingly sell or share the personal information of anyone under 16. You may use an authorized agent to make a request on your behalf; we will ask for proof that you authorized them. We verify requests by matching the details you give us against our records, and we may ask you to confirm from the email address linked to your order or subscription.
Rights in other US states
Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia have comparable rights under their own state privacy laws — to access, correct, delete and obtain a copy of their personal information, and to opt out of targeted advertising and of the sale of personal information.
We apply the same process to everyone, so you do not need to work out which law covers you: use the Do Not Sell or Share My Personal Information link to opt out of targeted advertising, and email support@tiktokbling.com for access, correction or deletion. Several of these states give you the right to appeal a decision we make on your request; if we refuse a request, our reply will tell you how to appeal.
Your rights in Canada
For customers in Canada we handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA). We collect, use and disclose it only for the purposes set out in this policy, we ask for your consent where consent is required, and you can withdraw that consent at any time — though if you withdraw consent to the processing needed to ship an order, we may not be able to complete it.
You have the right to ask what personal information we hold about you, to see it, and to have it corrected if it is wrong. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.
Our marketing email complies with Canada’s anti-spam legislation: we send it only with express consent recorded through double opt-in, we identify ourselves in every message, and every message carries a working unsubscribe link that we action within ten business days — usually immediately.
How long we keep it
- Order records — for as long as we need them to handle 30-day returns and the 12-month replacement warranty, and after that for the period tax and accounting law requires us to keep records of a sale.
- Account information — until you delete your account or ask us to delete it.
- Email subscription records — while you are subscribed, plus a record of your unsubscribe so we do not email you again by mistake.
- Support correspondence — until your request is resolved and long enough afterwards to handle a follow-up or a related warranty claim.
- Security logs — a short rolling window, long enough to identify an ongoing attack.
- Analytics and advertising data — retained by Google under its own schedules; our own reporting is kept only while it is useful and is aggregated, not identifiable.
How we protect it
The store runs over HTTPS everywhere. Card data never touches our server. Administrator accounts require two-factor authentication and are protected by login-attempt lockout. Access to order data is limited to the people who need it to run the store. No system is perfectly secure, but if a breach affects your personal information we will notify you and the relevant regulator as the law requires.
Children
Our store is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child under 13 has given us personal information, email support@tiktokbling.com and we will delete it.
How to exercise your rights
Email support@tiktokbling.com from the address linked to your order or subscription and tell us what you want: a copy of your data, a correction, or deletion. We will confirm we received your request, verify who you are, and respond within the time the law that applies to you allows — 45 days in most US states, 30 days in Canada, with an extension only where the law permits one and only with notice to you.
If we delete your information we may still keep records the law requires us to keep, such as tax records for a completed order, and a suppression record so we do not email you again.
Changes to this policy
We may update this policy as the store, the tools we use, or our legal obligations change. When we do, we post the new version on this page with a new effective date. If a change materially affects how we use information we already hold about you, we will tell you before it takes effect. The current version took effect on August 11, 2026.
Contact
Questions about this policy, or about anything we hold on you? Email support@tiktokbling.com or use our contact form.
Operated by: MOUR, a registered business name of Muhammad Zen Akhtar
Email: support@tiktokbling.com
Phone: +1 647-739-5724
Address: 89 Cherrytree Drive, Brampton, ON L6Y 3P1, Canada