1. Who we are
KolMY.beauty ("KolMY", "we", "us") operates a database and research site about TikTok beauty creators active in Malaysia, published at beauty.tkconnects.com. This site is operated by TK Connect (tkconnects.com), which owns and runs the "KolMY.beauty" brand as a subdomain of its main site — they are the same legal operator, not separate companies. For data protection enquiries, contact [email protected].
2. What data we collect and where it comes from
The creator profiles, rankings and statistics shown on this site are derived from publicly available information on TikTok and TikTok Shop, including:
- Public profile fields: display name, handle, bio, avatar, follower count, and any location information only where the creator has chosen to make it publicly visible on TikTok
- Public commerce activity: TikTok Shop category, estimated GMV and items sold derived from publicly listed product and sales information
- Content classification: primary and secondary content categories inferred from public posts
We do not display private contact details (phone number, WhatsApp, Line, email) of any creator on this site. This is a research and discovery layer only — it does not expose the contact-unlocking functionality available on our main platform.
From site visitors, we collect standard technical data (IP address, browser type, pages visited) via server logs and Cloudflare, and any information you voluntarily submit through forms (e.g. email address for the free report, claim/removal requests, contact enquiries).
3. How we use this data
- To publish aggregate statistics, rankings and creator profiles for brands and agencies researching the Malaysian creator market
- To respond to claim, correction and removal requests
- To send the report or newsletter you explicitly opted into, and to respond to enquiries you submit
- To detect abuse, prevent scraping of our own aggregated dataset, and maintain site security
We do not sell personal data. We do not use creator public data for any purpose other than the research and matching services described on this site.
4. Legal basis and cross-border transfer
Where the Malaysian Personal Data Protection Act 2010 (PDPA) applies, we process publicly disclosed commercial data on the basis of legitimate interest in providing market research and brand-matching services, balanced against the data subject's rights described in Section 6 below. Where the EU/UK GDPR applies (e.g. to visitors or brand clients based there), our legal basis is likewise legitimate interest for public commercial profiles, and consent or contract for information you submit directly to us.
Our infrastructure is hosted in Singapore. Data may be processed by service providers located outside Malaysia (e.g. Cloudflare, email delivery providers) under standard contractual safeguards.
5. Cookies, advertising and analytics
We use essential cookies for site functionality and Cloudflare for security and performance.
We do not currently display third-party advertising on this site. Google AdSense verification code is present on selected editorial pages so that Google can verify this site before reviewing it; this code may transmit standard technical request data such as your IP address and browser information to Google. If we enable advertising in the future, Google and third-party vendors may use cookies, similar technologies (such as web beacons), and your IP address to serve ads based on your prior visits to this and other websites, and to measure ad performance. This may include personalized advertising, where ads are selected based on your browsing activity. Before any advertising goes live, this section will be updated to reflect the current, active state, and the opt-out choices and links below will apply.
- If advertising is enabled, you will be able to opt out of personalized advertising by visiting Google Ads Settings.
- You will also be able to opt out of a third-party vendor's use of cookies for personalized advertising by visiting www.aboutads.info.
- For more detail on how Google uses information from sites that use its services, see How Google uses information from sites or apps that use our services.
A Google-certified consent management message is active for visitors in the EEA, the UK and Switzerland on the selected editorial pages where the AdSense verification code is present. It offers Consent, Do not consent and Manage options choices before personalized advertising cookies may be used. No advertising is currently displayed.
We may also use privacy-respecting analytics (e.g. aggregated, non-identifying traffic statistics) to understand which content is useful. This policy will be updated to reflect present-tense, active disclosures as soon as advertising, consent management, or analytics tooling actually goes live — not before.
6. Your rights — if you are a featured creator
If your public TikTok activity is featured on this site, you may at any time:
- Claim your profile to add verified context or an editorial note
- Request correction of inaccurate data
- Request removal of your profile from the site entirely
Submit any of these requests via our Claim / Removal Request form. We aim to action removal requests within 5 business days. See also our Data Sources & Correction Policy for details on data accuracy and refresh cycles.
Under the PDPA, you may also object to our processing of your publicly available profile data for market-research purposes. Submit an objection via the same claim form (select "Remove profile") or email [email protected]. We will review and, unless we have compelling legitimate grounds to continue, remove your profile from the site.
7. Your rights — if you are a site visitor
If you submit your email or other personal information to us (e.g. to download a report), you may request access to, correction of, or deletion of that information at any time by emailing [email protected]. You can unsubscribe from any email communication using the link in each message.
8. Data retention
Aggregated creator data is refreshed on a rolling basis and superseded records are discarded. Removal requests are honored and the profile is excluded from future re-indexing. Visitor-submitted information (emails, form submissions) is retained only as long as necessary for the purpose collected, or until you request deletion.
9. Changes to this policy
We may update this policy as our data practices evolve. Material changes will be reflected by updating the "Last updated" date above.
10. Contact us
Questions about this policy, or to exercise any of the rights above: [email protected]