What She's Not Telling You by Zoe

Privacy Policy

Last updated: August 10, 2026

This Privacy Policy explains how What She’s Not Telling You (“we,” “us,” or “our”), a digital content project operated from the Czech Republic, collects, uses, stores, and protects personal information when you visit whatsheisnottellingyou.com, contact us, or interact with a feature connected to a third-party platform such as TikTok.

For questions or privacy requests, contact us at zoegoerke1@gmail.com.

1. Information We May Collect

Depending on how you use the website, we may collect:

  • Information you provide: your name, email address, message, and any information you voluntarily include when contacting us.
  • Technical information: IP address, browser type, device type, operating system, referring page, pages visited, timestamps, and security or server logs.
  • Cookie and analytics information: information collected through essential cookies and, if enabled, analytics or similar technologies. Where legally required, non-essential cookies will be used only with your consent.
  • TikTok-connected information: only if a TikTok account is expressly connected to a feature we operate, we may receive the information and permissions shown during TikTok’s authorization process, such as basic account information and authorization tokens necessary to publish or manage approved content.

Important: Ordinary visitors to this website are not required to connect a TikTok account. Our current TikTok integration is intended to publish and manage content for the What She’s Not Telling You brand account.

2. How We Use Information

We may use personal information to:

  • operate, maintain, secure, and improve the website;
  • respond to messages, questions, or requests;
  • understand general website performance and troubleshoot technical issues;
  • prevent misuse, spam, fraud, or security threats;
  • comply with applicable legal obligations; and
  • use approved TikTok permissions solely to provide the connected publishing or account-management function described to the account holder.

We do not use TikTok data for unrelated advertising, sell it, or share it with data brokers.

3. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) or similar law applies, we process personal information on one or more of the following bases:

  • Consent, when you have freely given it and may withdraw it;
  • Contract or requested steps, when processing is necessary to provide something you asked for;
  • Legitimate interests, such as operating and securing the website, responding to messages, and improving our services, provided those interests are not overridden by your rights; or
  • Legal obligation, when we must retain or disclose information under applicable law.

4. TikTok Data Use

If a TikTok account holder authorizes our application, the application accesses only the permissions approved by that account holder and permitted by TikTok. Such access may be used to authenticate the account, upload or publish authorized media, check publication status, and manage the connection.

We do not request a TikTok password. TikTok credentials are entered directly through TikTok’s authorization process. Authorization tokens are used only for the approved integration, protected using reasonable security measures, and retained only while needed to provide that function or until access is revoked.

5. TikTok Data Deletion and Revoking Access

You may revoke our application’s access through your TikTok account settings. You may also request deletion of TikTok-connected data by emailing zoegoerke1@gmail.com with the subject “TikTok Data Deletion Request.” Please identify the TikTok account connected to the request without sending us your password.

After we verify the request, we will delete or anonymize the relevant data within 30 days, unless a longer period is required by law, necessary to protect legal rights, or needed for security and fraud-prevention records.

6. Cookies

The website may use essential cookies needed for security and basic operation. If analytics, embedded media, advertising, or other non-essential technologies are added, we will provide any notice and consent choices required by applicable law. You can also control cookies through your browser settings, although disabling essential cookies may affect website functionality.

7. Service Providers and Sharing

We may share limited information with trusted service providers that help us host, secure, maintain, analyze, or operate the website and connected publishing tools. These providers may process information only as needed to provide their services and are subject to their own privacy and security obligations.

We may also disclose information when required by law, to respond to a lawful request, to protect our rights or the safety of others, or in connection with a business reorganization. We do not sell personal information.

8. International Data Transfers

Some service providers may process information outside the European Economic Area. Where required, we rely on an adequacy decision, standard contractual clauses, or another lawful transfer mechanism designed to protect personal information.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including security, legal, accounting, and dispute-resolution needs. Contact messages are generally retained for up to 24 months unless continued retention is necessary. Technical logs are generally retained for up to 12 months. TikTok authorization data is retained only while the connected function is active or until access is revoked or deletion is requested, subject to limited legal or security exceptions.

10. Your Privacy Rights

Depending on where you live, you may have the right to:

  • request access to personal information we hold about you;
  • request correction or deletion;
  • request restriction of processing;
  • object to certain processing, including direct marketing;
  • receive certain information in a portable format;
  • withdraw consent at any time, without affecting earlier lawful processing; and
  • complain to the data-protection authority in your country. In the Czech Republic, this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

To exercise a privacy right, email zoegoerke1@gmail.com with the subject “Privacy Request.” We may need to verify your identity before completing the request.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no website, transmission method, or storage system can be guaranteed to be completely secure.

12. Children’s Privacy

This website is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information, please contact us so we can take appropriate action.

13. External Links

The website may link to third-party websites or platforms. Their privacy practices are governed by their own policies, and we are not responsible for their content or practices.

14. Changes to This Policy

We may update this Privacy Policy when our website, connected services, or legal obligations change. The revised version will be posted on this page with a new “Last updated” date.

15. Contact

What She’s Not Telling You
Czech Republic
Email: zoegoerke1@gmail.com
Website: whatsheisnottellingyou.com