Privacy policy
This policy explains what we do with your personal data when you visit fabulousportrait.com or order from us. Last updated: 27 August 2026.
Who is responsible
eCreathing, trading as Fabulous Portrait
Wollegras 25, 9421 NB Bovensmilde, Netherlands
Chamber of Commerce 83926143, VAT NL003890789B69
info@fabulousportrait.com
We are the data controller for everything described here. We do not have a data protection officer, we are not required to appoint one.
What we collect, why, and how long we keep it
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Name, address, email, phone, order details | To take, produce and ship your order and to contact you about it | Performance of our contract (Art. 6(1)(b) GDPR) | 7 years, our tax retention obligation |
| Payment details | To take payment | Performance of our contract | Held by our payment providers, not by us |
| The photo you upload | To create your personalised artwork | Performance of our contract | 60 days after you approve your design, then deleted |
| Your finished artwork | To print, reprint and support your order | Performance of our contract | 60 days after approval, unless you gave us marketing permission |
| Your finished artwork in our marketing | To show examples of our work | Your consent (Art. 6(1)(a)) | Until you withdraw permission |
| IP address, order and device signals | To screen orders for fraud and keep the shop secure | Our legitimate interest in preventing fraud (Art. 6(1)(f)) | 12 months |
| Analytics: pages viewed, clicks, session recordings | To understand how the shop is used and improve it | Your consent, given through our cookie banner | 12 months |
| Marketing: email and advertising audiences | To send you offers and show you relevant ads | Your consent, or our legitimate interest for email to existing customers, which you can object to at any time | Until you unsubscribe, plus 2 years of inactivity |
| Invoices and accounting records | To meet our bookkeeping duties | Legal obligation (Art. 6(1)(c)) | 7 years |
About your photo
This is the part people care about most, so we are specific.
Your photo is used for one thing: making your artwork. To create it we send it to Google's Gemini API, which generates the artwork, and we store the files with Cloudinary and on our own systems while your order runs. Google processes it on our paid business plan, which means Google does not use your photo to train its models. Your artwork is then sent to the print partner producing your order.
Your photo is deleted 60 days after you approve your design. We keep it that long so we can reprint quickly if something goes wrong in shipping. It is never sold, and never used in our marketing unless you tick the permission box on the approval page. You can untick that box at any time, or email us.
If the photo shows someone else, for example your grandchild, you are the one telling us we may use it. Please only upload photos of people who are happy to be in the picture, and of children you are responsible for.
Who we share your data with
We only share what a supplier needs to do its job, and they may only use it for us:
- Shop and payments: Shopify (including Shopify Payments), PayPal, Mollie
- Artwork creation: Google (Gemini API), Cloudinary, Customily, Vercel, Supabase
- Printing and shipping: merchOne (Poland), Gelato, Fotocadeau via Picanova, and the carriers they use
- Email and reviews: Klaviyo, Zoho, Loox
- Analytics and advertising: PostHog (EU servers), Meta, Google
We also share data when the law requires it, for example a valid request from an authority. We never sell your personal data.
Data outside Europe
Some of these suppliers are based in the United States, so your data can be processed there. Where that happens we rely on the EU-US Data Privacy Framework where the supplier is certified, and otherwise on the European Commission's standard contractual clauses. You can ask us for a copy of the safeguards that apply.
Cookies and tracking
We only place analytics and marketing cookies after you agree through our cookie banner. Necessary cookies, the ones that make your cart and checkout work, are always on because the shop cannot function without them.
You can change or withdraw your choice at any time through the cookie link in our footer. Withdrawing is as easy as giving permission, and it does not affect anything that happened before you withdrew.
Our analytics do not use your name, but they do use an identifier that is tied to your visit and your order, so this counts as personal data and you have all the rights below over it.
Your rights
You can ask us to:
- see the data we hold about you
- correct it if it is wrong
- delete it
- limit what we do with it
- hand it to you or another company in a portable file
- stop using it for direct marketing, which we always honour
- stop relying on our legitimate interest, where you can object based on your situation
Where we rely on your consent, you can withdraw it at any time without affecting what we did before that. Email info@fabulousportrait.com and we respond within one month.
We do not make automated decisions about you that have legal or similarly significant effects.
Complaints
If you think we are handling your data wrongly, tell us first, we would like the chance to fix it. You also have the right to complain to a supervisory authority:
- Netherlands: Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl
- Germany: your Landesdatenschutzbeauftragte, or the BfDI
- Elsewhere in the EU: the authority in the country where you live
Children
Our shop is meant for adults. We do not knowingly collect data directly from anyone under 16. If you think a child has given us their data, email info@fabulousportrait.com and we will delete it.
Security
We use encrypted connections, access is limited to the people who need it, and our suppliers are held to the same standard by contract.
Changes
We update this policy when our practices change. The date at the top tells you when it last happened. If a change matters to you, we let you know.
Contact
Questions, requests or complaints: info@fabulousportrait.com