Privacy Notice

1. Who we are

Serpong Creative Agency ("we", "us") is the personal information controller for the data described here: we decide what is collected and why. We are an official TikTok LIVE Creator Network based in Makati City, Philippines.

Serpong Creative Agency
Unit 310, 3rd Floor, Tower C, The Palm Towers Condominium,
7706 St. Paul Road, San Antonio Village,
Makati City, Metro Manila, Philippines

• Email: info@serpongcreative.com
• Phone: +63 947 342 1857
• WhatsApp: +63 947 342 1857 (opens in a new tab)

Data Protection Officer

Our Data Protection Officer handles questions and requests about your personal data. Email info@serpongcreative.com with the subject "For the Data Protection Officer", or write to the address above, marked the same way.

2. What we collect and why

We collect only what you type into one of the two forms on this website, plus anything you choose to tell us afterwards on WhatsApp or by email. This site has no analytics, no advertising tags, no social media pixels and no tracking cookies.

When you submit a form, our server also records the date and time, your IP address and your browser type. We keep these with your submission as the record of your consent (what you agreed to, and when), and we use them to protect the forms from spam and abuse.

Creator application

Sensitive personal information. The Data Privacy Act treats a person's age as sensitive personal information (Section 3(l)). We ask for it only to confirm the 18+ requirement, we process it only with the consent you give on the form, and we never use it for anything else.

Studio tour request

3. Our lawful basis

The Act requires a lawful basis for every use of personal data. Ours are:

• Your application details (name, contact details, city, TikTok handle, follower range, niche and experience): the processing is necessary to take steps at your request before entering into a creator partnership agreement with you (Section 12(b)).
• Your age: your consent, which is the basis the Act requires for sensitive personal information (Section 13(a)). You give it by ticking the box on the form after reading this notice. The box is never ticked in advance, it covers only the review of your application, and it is not tied to any other terms.
• Studio tour requests: your consent, given the same way (Section 12(a)).
• The date, time, IP address and browser type recorded with a submission: our legitimate interest in keeping the forms safe from spam and abuse, and in being able to show what you agreed to (Section 12(f)).

You do not have to use the forms: they are optional, and you can message or email us instead. We make no decisions about you by automated means and we build no profiles: every application is read by a person on our team.

4. How your details reach us

When you submit a form, your answers are sent over HTTPS to our own server at serpongcreative.com, and the confirmation screen tells you once they have arrived. They are encrypted on the server as soon as they arrive, and can only be read in our internal admin system (see How we protect it).

If our server cannot be reached, nothing is lost: your answers stay on the form, and you can try again, or send them yourself instead. The confirmation screen tells you which WhatsApp number it will open.

• WhatsApp. Your details travel as a normal WhatsApp message to our business number. WhatsApp is operated by Meta Platforms, whose servers are outside the Philippines, and its own privacy policy applies to the message while it is in transit and in your chat history.
• Email. Your details are placed into a draft email addressed to us. Your email provider and ours both handle the message.

5. What is saved on your device

So you do not lose a half-finished application, the form keeps a draft of your answers in your own browser. This draft never leaves your device and is never sent to us.

• It is stored in your browser's session storage, which belongs to that one browser tab.
• It expires after 2 hours, and is dropped when you close the tab.
• It is deleted as soon as you close the application form without submitting it, once our server confirms it received your application, and once you have sent your application on WhatsApp or by email.
• You can delete it yourself at any time with the "Not your device? Clear saved details" button shown on the form.

We use no cookies on this website.

6. Who we share your data with

We never sell your personal data and we do not share it with advertisers or brand partners. It is seen only by:

• our own talent and studio team in Makati, who review applications and arrange tours;
• our web hosting provider, which runs our server and stores the encrypted submissions on our behalf. Its servers may be outside the Philippines. Submissions are encrypted before they are stored, so the provider cannot read them, and we remain responsible for your data wherever it is kept (Section 21 of the Act);
• WhatsApp (Meta Platforms) or the email providers involved, when you choose to send your details that way;
• TikTok, if your application succeeds: the network invite and the partnership itself happen inside your TikTok account, under TikTok's own terms and privacy policy;
• government authorities, when the law requires it.

7. How long we keep it

• Applications that do not lead to a partnership: 12 months after the last update to your application, so we can reconsider you for later intakes, then deleted.
• Studio tour requests: 3 months after the visit date, then deleted.
• Hosts who join the network: for as long as the partnership lasts, and afterwards only for as long as tax, accounting and contract law require.

Our admin system flags records that have passed these periods, and our staff delete them. You can ask us to delete your data sooner (see Your rights).

8. How we protect it

Your submission travels over HTTPS and is encrypted on our server (AES-256) as soon as it arrives. The public website cannot decrypt it. Applications and tour requests are read only by a small number of named staff, in an admin system that needs a personal password, can only be opened from approved networks, and logs every sign-in and every record opened. The forms are protected against spam and abuse by automated checks and rate limits.

If a personal data breach is likely to put you at risk, we will notify the National Privacy Commission within 72 hours of learning of it, and we will notify you as well, as the Commission's rules require.

9. Your rights and how to use them

Under the Data Privacy Act of 2012 you have the right to:

• Be informed about how your data is collected and used (this notice);
• Access a copy of the data we hold about you;
• Correct anything inaccurate or out of date;
• Object to processing, and to withdraw your consent at any time;
• Erase or block your data where the law allows;
• Data portability: receive your data in a commonly used electronic format;
• Damages for a breach of your rights;
• Complain to the National Privacy Commission.

How to use them. Email our Data Protection Officer at info@serpongcreative.com, or message us on WhatsApp. We may ask you to confirm it is really you, for example by replying from the mobile number or email address you gave us, so that your data is never handed to someone else. We answer within 15 working days, and we do not charge for it.

Withdrawing your consent is as easy as giving it: one email or WhatsApp message is enough, at any time and at no cost. We then stop processing your application and delete it, unless the law requires us to keep something. Withdrawing does not affect anything we did lawfully before you withdrew, and it means we can no longer consider your application.

10. Complaints

Please contact us first: we would like the chance to put things right. You can also complain directly to the National Privacy Commission.

National Privacy Commission
5th Floor, Delegation Building, PICC Complex,
Vicente Sotto Avenue, Pasay City, Metro Manila 1307, Philippines
Telephone +63 2 5322 1322
privacy.gov.ph (opens in a new tab)

11. Age requirement

Our network is for adults: you must be 18 or older to apply. We do not knowingly collect data from minors. If you believe a minor has sent us their details, email us and we will delete them.

12. Changes to this notice

If we change how we handle your data, we will update this page and the "last updated" date above. If a change affects what you agreed to, we will ask for your consent again.