Privacy Policy

1. Data controller

Rating4dating is a trade name of Bonneman Holding BV ("we", "us", or "our"). We determine the purposes and means of the processing of personal data in connection with our website, photo scoring service, certificate generation, protected photo sharing, and related support.

2. Categories of personal data

• Contact data, including your email address and certificate name.
• Content data, including the uploaded image and any optional protected photo content.
• Service data, including scores, certificate number, payment status, and transaction references.
• Promotion data, including referral, affiliate, or promo codes.
• Technical data, including basic logs, timestamps, and session or browser storage used for the service.
• Support correspondence and any information you voluntarily provide when contacting us.

3. Purposes and legal bases

• To provide the service, generate the certificate, and deliver associated communications, based on performance of a contract.
• To process payment and prevent misuse or fraud, based on performance of a contract and our legitimate interests.
• To store certificate records and provide support, based on performance of a contract and legitimate interests.
• To comply with accounting, tax, and legal obligations, based on legal obligation.
• To process optional protected photo sharing, based on your request and the settings you choose for the service.

4. Automated AI processing

The image you upload is transmitted to OpenAI for automated analysis. The system estimates the score dimensions (Length, Thickness, and Aesthetics) and assists with safety screening.

The processing is automated and does not involve a human reviewer unless we separately investigate a support, safety, or abuse issue. We do not use your image to train our own models.

OpenAI processes API data according to its own terms, settings, and retention controls. API requests are typically retained for a limited period for abuse monitoring, often up to 30 days, unless different settings or contractual arrangements apply.

5. Retention

• Uploaded photos without sharing: the image is processed for scoring and is not intended to be stored after processing. We retain only the score and certificate record as necessary to perform the service, maintain records, and handle support.
• Shared photos with password protection: the protected photo and access token are retained so the shared link can function. We retain them until you request deletion, or earlier if required for security, support, or legal reasons.
• Email addresses and certificate records: retained for as long as necessary to deliver the certificate, provide support, resolve disputes, and comply with legal obligations. Where statutory retention periods apply, we keep the relevant records for the required period.
• Payment data: card details are processed by the selected payment provider. We do not store full card details ourselves. We retain only transaction references, amount, payment status, and related accounting records as required by law and for support purposes.
• Promo and referral codes: retained with the order for discount processing, affiliate reporting, and internal reconciliation.
• Logs and technical data: retained for a limited period necessary for security, troubleshooting, and abuse prevention.

6. Disclosure to processors

We may share personal data with service providers acting as processors on our behalf, including:

• OpenAI for image analysis and safety checks.
• Stripe or Mollie for payment processing, depending on the selected provider.
• AgentMail for sending certificate emails.

Where required, cross-border transfers and safeguards are handled in accordance with applicable data protection law.

7. Adult-only service, consent, and eligibility

We implement reasonable technical and organisational measures to protect personal data. The service is intended for adults only and is provided for entertainment and novelty purposes. By using the service, you represent and warrant that you are at least 18 years old, that you have the right to upload the image, and that the person depicted is an adult who has consented to the processing where consent is required.

We do not knowingly accept images of minors, non-consensual content, unlawful content, exploitative content, or obvious group photos, and we may refuse, remove, or delete content that is unsafe, unlawful, or abusive. The service does not provide medical, scientific, legal, or identity verification advice, and the results are not a substitute for professional judgement.

8. Your rights

Subject to applicable law, you may request access, rectification, erasure, restriction of processing, and portability, and you may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time.

To exercise your rights, contact us at support@officialdickrating.com.

9. Data breach notifications

If you believe there has been an unauthorized disclosure, loss, or access to personal data, please notify us immediately at support@officialdickrating.com. We will assess the incident and take any steps required under applicable law.

10. Complaints

If you are not satisfied with our response, you also have the right to lodge a complaint with the competent supervisory authority, including the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), where applicable.

11. Contact

For questions about this privacy policy or to submit a request, contact support@officialdickrating.com.