Privacy PolicyEffective Date:  26 October, 2025

Privacy Policy

Last modified: 6 Jan, 2026

​​

This website is operated by TheUnforgettable.me.

We are committed to protecting your privacy and handling your data with care and transparency.

1. Who We Are

For all data-related inquiries and to execute your data rights, contact us directly:

Kinga Bali - kingabali@theunforgettable.me​

​

2. What Personal Data We Collect

We collect and process the following personal data categories:

​

• Contact & Account Information – Name, email, and other details shared via forms, account creation, or when booking 121 services.

• Transaction & Checkout Data – Payment/billing details for all services (121, digital, merchandise), processed securely by our partners.

• Order Fulfillment Data – Address and shipping information for merchandise purchases.

• Digital Product Access Data – Information required to deliver and manage your access to digital products.

• Service Delivery Data – Information you share during the provision of 121 services (e.g., scheduling details, service intake forms).

• Usage Data – Website interaction, analytics, and IP data via cookies and platform tracking.​

​

3. How We Use Your Data

We utilize your data to:

• Process payments and fulfill all orders (121 services, physical products, and digital products).

• Provide and manage your 121 services, including scheduling, communication, and delivery of service outcomes.

• Deliver and manage access to purchased digital products.

• Manage your subscription to updates and communications.

• Improve our services, website functionality, and communications.

• Prevent fraud and ensure platform security.

​

4. Legal Basis for Processing

We establish the lawful basis for processing your data as:

• Contract – When fulfilling your purchases or delivering the contracted 121 services.

• Consent – When you specifically opt-in (e.g., newsletter sign-up, non-essential cookies).

• Legal Obligation – When necessary to comply with legal, tax, or regulatory requirements.

• Legitimate Interest – For improving services, fraud prevention, and analytics, unless overridden by your fundamental rights and freedoms.

•  

5. Sharing Your Data and International Transfers

We do not sell your data. We only share it with trusted service providers who help us operate our business and deliver the services you've purchased.

We act as the Data Controller, and our service providers act as Data Processors. These include:

​

• Stripe – for processing payments across all our services.

• ThriveCart – for managing checkout, payment flows, and digital product delivery.

• Printful – for order fulfillment and shipping of physical merchandise.

5A. Additional Processors and International Data Transfers

We use ThriveCart to process digital product checkouts, manage payment flows, and host digital content. As part of this service:

ThriveCart may store/process customer data outside of the EU, including in the United States.

We ensure adequate protections are in place through Standard Contractual Clauses (SCCs) and a Data Processing Agreement (DPA) signed with ThriveCart, along with their technical and organizational safeguards.

You can view ThriveCart’s legal documentation here:
https://legal.thrivecart.com

​

5B. Sensitive Data Disclaimer

We do not request, collect, or store any special category personal data (e.g., health, race, political beliefs) on our platform or through our checkout systems. Do not enter sensitive data into purchase or contact forms.

​​

6. Cookies and Tracking

We deploy cookies and tracking technologies for essential website functionality, analytics, and marketing.

You can manage your cookie preferences through your browser settings or, if available, our onsite cookie banner.

6A. ThriveCart-Specific Tracking

Note: ThriveCart’s checkout pages may include fraud detection tools (e.g., reCAPTCHA, hCaptcha) that track behavioral metadata (e.g., IP, mouse movement) to detect bots. These tools are activated for security purposes under legitimate interest.

You can read more about:

Google reCAPTCHA Privacy Terms

hCaptcha Privacy Terms

​

7. Data Retention

We retain your personal data only as long as required to fulfill the purposes outlined in this policy, deliver the contracted service, and comply with our legal and fiscal obligations.

​

8. Your GDPR Data Rights

As a data subject, you maintain strong rights under GDPR, including the right to:

• Access your personal data

• Request correction or deletion of your data

• Object to or limit the processing of your data

• Request data portability

• Withdraw consent at any time

• Lodge a complaint with the supervisory authority (Autoriteit Persoonsgegevens in the Netherlands)

To exercise any of these rights, please email us at:
kingabali@theunforgettable.me

9. Changes to This Policy

We may update this policy periodically to reflect changes in our data processing practices or legal requirements. We urge you to review it regularly.