Privacy Policy

1. Introduction

MakeMeFamous.nl ("we", "us", "our") values your privacy and is responsible for the processing of your personal data. This privacy statement explains how we collect, use and protect your data.

We process personal data in accordance with the General Data Protection Regulation (GDPR). This policy explains what data we collect, how we use it and your rights regarding your data.

2. Contact Details

3. What data do we collect

We collect and process the following personal data:

• Contact details: name, email address, phone number
• Address details: shipping and billing address for delivery of physical products
• Payment details: processed via our secure payment provider Stripe
• Uploaded photos: images you upload for generating AI portraits
• Order details: order history, product preferences, shipping status

5. Retention periods

We do not keep your data longer than necessary:

• Order data: 7 years (legal obligation)
• Uploaded photos: up to 14 days, then deleted automatically (unless you place an order with them)
• Designs you do not order: about 30 days, so you can still order later
• Print files and ordered designs: print files for up to 6 months (so a saved cart can still be printed); designs you order are kept with your order for a reprint or replacement until you ask us to delete them
• Account data: Until deletion of your account
• IP addresses: Maximum 30 days
• Marketing data: Until withdrawal of consent

6. Sharing data with third parties

We only share your data with:

• Payment providers (Stripe) for secure payment processing
• AI services (Replicate) for generating portraits
• Production and shipping partners (PrintAPI, DHL, PostNL) for printing and delivery of physical products
• Email services (Resend) for order and service communications
• Authentication and database (Supabase) for user accounts and data storage
• Caching services (Redis/Upstash) for website performance and session management
• Hosting and analytics (Vercel) for website hosting and performance monitoring

6.4 Recipients on the basis of consent (analytics & marketing)

When you accept optional cookies (Accept all), your browser shares data with the following recipients on the basis of your consent (Art. 6(1)(a) GDPR; Art. 11.7a Dutch Telecommunications Act):

• Google Ireland Ltd. (Google Analytics 4, Google Ads): visit and conversion data. Transfer to the United States under the EU Standard Contractual Clauses.
• Google Ireland Ltd. (Google Ads Customer Match): separate from cookies, and only if you have signed up for our newsletter or for offers via ads: your hashed email address and, where known, your hashed phone number and name, plus country and postcode. For sign-ups before 23 September 2026 the basis is legitimate interest rather than consent; see 14.3.1.
• Meta Platforms Ireland Ltd. (Meta/Facebook Pixel): conversions and audience building. Transfer to the United States under SCCs.
• TikTok Technology Ltd. (TikTok Pixel): conversions and audience building. Transfer to the United States under SCCs.
• Microsoft Corporation (Clarity session analytics): session statistics and heatmaps. Transfer to the United States under SCCs. You may withdraw consent at any time via cookie settings.

7. Cookies

We use cookies to ensure our website functions properly and to improve your experience. For more information about the cookies we use, see our Cookie Policy.

9. Security

We take the security of your data seriously and have implemented appropriate technical and organizational measures, including SSL/TLS encryption, secure servers, and limited access to personal data.

10. Children

Our services are not intended for children under 16 years of age. We do not knowingly collect data from children under this age. If we discover that we have collected such data, we will delete it immediately. If you suspect that we have inadvertently collected data from a child, please contact us.

11. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal reasons. The most recent version is always available on our website. We will communicate important changes to you via email or via a notification on our website.

12. Complaints

If you have a complaint about how we process your personal data, please first contact us at info@makemefamous.nl. We strive to resolve your complaint within 30 days.

If you are located outside the Netherlands, you may also file a complaint with your local data protection supervisory authority.

The controller of your personal data is see our company details.

13. Contact

For questions about this privacy policy or your data:

14. Tracking, Analytics & Advertising

We use various tracking and analytics tools to improve our website, analyze usage and optimize our advertising. These tools are only activated after you have given your consent via our cookie banner.

15. International data transfers

Some of the service providers mentioned above are located outside the European Economic Area (EEA), particularly in the United States. We ensure that your data remains adequately protected when transferred outside the EU:

• Service providers certified under the EU-US Data Privacy Framework (DPF) provide an adequate level of protection in accordance with the European Commission's adequacy decision.
• For service providers not covered by the DPF, we use European Commission-approved Standard Contractual Clauses (SCCs) as a safeguard for the protection of your data.

The following service providers process data outside the EU: Google (US, DPF certified), Meta Platforms (US, DPF certified), TikTok (US/Singapore, SCCs), Microsoft (US, DPF certified), Vercel (US, DPF certified), Supabase (US, SCCs), Resend (US, SCCs), Replicate (US, SCCs) and Redis/Upstash (US, SCCs).