We collect the minimum needed to reply to you and to know which articles are useful. We don't sell your data, and content you send for review is never published or reused as an example without your written say-so.
Who we are
First Review is a TikTok compliance advisory serving clients worldwide. We are not affiliated with ByteDance or TikTok. For anything in this policy, the data controller is First Review, reachable at hello@firstreview.co.
What we collect
How we use it
To respond to your enquiry, deliver an audit or review you've requested, and understand which articles and breakdowns are actually useful so we write more of those. If you ever opt in to receive updates from us, your email is used only for that. We do not sell your personal data. The site does display Google-served advertising, which uses cookies to personalise ads. See Cookies and analytics below for how to control this.
Cookies and analytics
The site uses three kinds of cookies: functional cookies needed to load pages and remember form state; analytics cookies (Google Analytics) that measure visits and content performance in aggregate; and advertising cookies (Google AdSense) that Google uses to serve and personalise ads. A consent banner lets you accept or decline non-essential cookies on your first visit, and you can change that choice at any time through the banner or your browser settings. To opt out of personalised advertising specifically, visit Google's Ads Settings at adssettings.google.com.
Third-party services
This site is hosted on Webflow, which also processes form submissions. Analytics run through Google Analytics and advertising is served through Google AdSense, both under Google's own privacy policy. Voluntary contributions go through Buy Me a Coffee, which handles payment details directly; we never see your card information. Cookie consent is managed through Secure Privacy. Each provider processes data under its own privacy policy.
Content you send us
Creatives sent for review are used only to produce your report. They are not published, shared or used as an example anywhere without your written permission, and are deleted on request. Case studies on the blog are anonymised or fictionalised.
Your rights
If you are located in the European Union or European Economic Area, you have rights under the EU General Data Protection Regulation (GDPR) to access, correct, delete, or object to the use of your data — and we honor the same rights for visitors everywhere else, too. Email hello@firstreview.co and we'll respond within 30 days. You can also lodge a complaint with your local data protection authority. If we ever launch an email newsletter, unsubscribing will be one click at the bottom of every email.
Data retention, security, and updates
We keep contact details and submitted content for as long as needed to deliver your audit or respond to your enquiry, then delete or anonymise it. Usage data is kept in aggregate, non-identifying form. We use reasonable technical and organisational measures, including access controls and encrypted connections, to protect what you send us, though no method of transmission over the internet is completely secure. This site is not directed at children, and we do not knowingly collect personal data from anyone under 16; if you believe a child has provided us with data, contact us and we will remove it. We may update this policy as the site or our practices change, and the "Last updated" date at the top reflects the most recent revision.