Article · June 15, 2026
TikTok Pixel and PDPL: Compliance for websites and TikTok Shop
TikTok Pixel and TikTok Shop process Vietnamese users' data. PDPL compliance guide: consent, Limited Data Use, privacy policy.
⚠ This article is pending legal review before publication.
Quick answer
What does TikTok Pixel collect?
TikTok Web Pixel:
- PageView, Click, Video watch events
- Browser fingerprint +
_ttpcookie (TikTok Pixel cookie) ttclid: connects to TikTok ads- IP address (can determine geolocation)
TikTok Events API (server-side):
- Order events: Purchase, AddToCart, InitiateCheckout
- Customer data: email hash, phone hash, name hash
TikTok Shop:
- Order and product information
- Buyer data shared between the seller and TikTok
TikTok-specific PDPL issues
Risk level: HIGH
- ByteDance (parent company) has servers in China — risk of data transfers to countries with different legal environments
- TikTok Shop requires broader sharing of order data than other platforms
- TikTok’s privacy policy changes frequently
How to comply with the PDPL
Prior consent required
TikTok Pixel only loads after the user accepts advertising cookies
Configure Limited Data Use
In TikTok Business Center > Pixel > Data Settings, enable Limited Data Use for Vietnam
Disable PII hashing unless necessary
Only send hashed PII when using the Events API and with consent
Check data retention
Configure the shortest possible retention in TikTok Business Center
TikTok Shop
Read the TikTok Shop Agreement and add it to your Privacy Policy
Update your Privacy Policy
Explicitly state the use of TikTok Pixel, the data collected, and cross-border transfer risks
Notes for the TikTok Shop platform
If you are a seller on TikTok Shop, you need to:
- Identify the types of data shared with TikTok in the Merchant Agreement
- Add a "TikTok Shop" section to your Privacy Policy
- Only collect buyer data for the purposes that have been notified
⚠ Note: This content requires legal review before implementation.
Source: TikTok Business Help Center | ByteDance Privacy Policy | the Personal Data Protection Law (Law 91/2025/QH15)
Get started — no account needed.
Ready to comply with PDPL?