Privacy Policy
Last updated: May 10, 2026
1. Introduction
MakeMeFamous.nl ("we", "us", "our") values your privacy and is responsible for the processing of your personal data. This privacy statement explains how we collect, use and protect your data.
We process personal data in accordance with the General Data Protection Regulation (GDPR). This policy explains what data we collect, how we use it and your rights regarding your data.
2. Contact Details
MakeMe (trading as MakeMeFamous), Owners: Julian Roddeman & Teun Thyssen
Correspondence address: Kaaplandstraat 57a, 6543 PC, Nijmegen, NL
E-mail: info@makemefamous.nl
Website: www.makemefamous.nl
3. What data do we collect
We collect and process the following personal data:
- Contact details: name, email address, phone number
- Address details: shipping and billing address for delivery of physical products
- Payment details: processed via our secure payment provider Stripe
- Uploaded photos: images you upload for generating AI portraits
- Order details: order history, product preferences, shipping status
4. Purposes and legal basis
Important information about AI processing
Your uploaded photos are processed by our AI service to generate personalized portraits. This processing is necessary to fulfill your order.
Uploading photos
When you upload a photo, it is temporarily stored and processed by our AI service (Replicate) to generate your personalized portrait.
Data processing
We process your personal data to fulfill your order, including AI generation, production and shipping of your personalized products.
Photo deletion
Your uploaded photos are automatically deleted within 24 hours of processing. Generated portraits are stored for up to 14 days for your order. You can also request earlier deletion via info@makemefamous.nl.
5. Retention periods
We do not store your data longer than necessary. Order data is stored for 7 years (legal obligation), uploaded photos are automatically deleted within 24 hours of processing, generated portraits are stored for up to 14 days, and account data is stored until deletion of your account.
6. Sharing data with third parties
We only share your data with:
- Payment providers (Stripe) for secure payment processing
- AI services (Replicate) for generating portraits
- Production and shipping partners (PrintAPI, DHL, PostNL) for printing and delivery of physical products
- Email services (Resend) for order and service communications
- Authentication and database (Supabase) for user accounts and data storage
- Caching services (Redis/Upstash) for website performance and session management
- Hosting and analytics (Vercel) for website hosting and performance monitoring
6.4 Recipients on the basis of consent (analytics & marketing)
When you accept optional cookies (Accept all), your browser shares data with the following recipients on the basis of your consent (Art. 6(1)(a) GDPR; Art. 11.7a Dutch Telecommunications Act):
- Google Ireland Ltd. (Google Analytics 4, Google Ads): visit and conversion data. Transfer to the United States under the EU Standard Contractual Clauses.
- Meta Platforms Ireland Ltd. (Meta/Facebook Pixel): conversions and audience building. Transfer to the United States under SCCs.
- TikTok Technology Ltd. (TikTok Pixel): conversions and audience building. Transfer to the United States under SCCs.
- Microsoft Corporation (Clarity session analytics): session statistics and heatmaps. Transfer to the United States under SCCs. You may withdraw consent at any time via cookie settings.
8. Your rights
Under the GDPR you have the following rights:
9. Security
We take the security of your data seriously and have implemented appropriate technical and organizational measures, including SSL/TLS encryption, secure servers, and limited access to personal data.
10. Children
Our services are not intended for children under 16 years of age. We do not knowingly collect data from children under this age. If we discover that we have collected such data, we will delete it immediately. If you suspect that we have inadvertently collected data from a child, please contact us.
11. Changes to this policy
We may update this privacy policy from time to time to reflect changes in our practices or for legal reasons. The most recent version is always available on our website. We will communicate important changes to you via email or via a notification on our website.
12. Complaints
If you have a complaint about how we process your personal data, please first contact us at info@makemefamous.nl. We strive to resolve your complaint within 30 days.
You also have the right to file a complaint with the supervisory authority:
Autoriteit Persoonsgegevens
Postbus 93374
2509 AJ Den Haag
Website: www.autoriteitpersoonsgegevens.nl
If you are located outside the Netherlands, you may also file a complaint with your local data protection supervisory authority.
The controller of your personal data is see our company details.
13. Contact
For questions about this privacy policy or your data:
14. Tracking, Analytics & Advertising
We use various tracking and analytics tools to improve our website, analyze usage and optimize our advertising. These tools are only activated after you have given your consent via our cookie banner.
14.1 Google Tag Manager
We use Google Tag Manager (GTM) by Google Ireland Limited as a tag management system. GTM itself does not collect personal data, but manages the scripts and tags of other services on our website.
14.2 Google Analytics 4
We use Google Analytics 4 (GA4) by Google Ireland Limited for website analysis. GA4 collects anonymized data about page visits, user behavior, device information and demographic characteristics. IP addresses are anonymized. Data is processed based on your consent (Art. 6(1)(a) GDPR).
14.3 Google Ads
We use Google Ads by Google Ireland Limited for measuring conversions and displaying targeted advertisements. Cookies are placed to track whether you made a purchase after clicking on an advertisement. Remarketing is also used to show you relevant advertisements based on your previous visit to our website.
14.4 Meta Pixel & Events Manager
We use the Meta Pixel and Events Manager by Meta Platforms Ireland Limited for measuring conversions and optimizing advertisements on Facebook and Instagram. The Meta Pixel records actions such as page visits, additions to cart and purchases. This data is used to measure the effectiveness of advertisements and to create audiences.
14.5 TikTok Pixel
We use the TikTok Pixel by TikTok Technology Limited for measuring conversions and optimizing advertisements on TikTok. The pixel records website visits and conversion events to measure the effectiveness of our TikTok advertising campaigns.
14.6 Microsoft Clarity
We use Microsoft Clarity by Microsoft Corporation for behavioral analysis via heatmaps and session recordings. Microsoft Clarity automatically masks all images and text content, so personal data is not recorded. More information can be found in the Microsoft Privacy Statement.
14.7 Vercel Analytics
We use Vercel Analytics by Vercel Inc. for monitoring website performance. Vercel Analytics collects anonymized performance data such as load times and Web Vitals, without storing personally identifiable information.
14.8 Legal basis and consent
The use of the above tracking and analytics tools is based on your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time via the cookie settings at the bottom of our website. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.
14.9 Opting out
You can disable tracking at any time by adjusting your cookie preferences via the 'Cookie Settings' link at the bottom of each page. Additionally, you can block or delete cookies in your browser settings.
15. International data transfers
Some of the service providers mentioned above are located outside the European Economic Area (EEA), particularly in the United States. We ensure that your data remains adequately protected when transferred outside the EU:
- Service providers certified under the EU-US Data Privacy Framework (DPF) provide an adequate level of protection in accordance with the European Commission's adequacy decision.
- For service providers not covered by the DPF, we use European Commission-approved Standard Contractual Clauses (SCCs) as a safeguard for the protection of your data.
The following service providers process data outside the EU: Google (US, DPF certified), Meta Platforms (US, DPF certified), TikTok (US/Singapore, SCCs), Microsoft (US, DPF certified), Vercel (US, DPF certified), Supabase (US, SCCs), Resend (US, SCCs), Replicate (US, SCCs) and Redis/Upstash (US, SCCs).
Do you have questions about our privacy policy? Feel free to contact us via Contact