Privacy statement

Last modified: 16 April 2026

At UGC.NL, we value protecting the privacy of everyone who uses our services. In this privacy statement, we explain how we handle personal data and protect your privacy.

Contact details

UGC.NL B.V.
Keizersgracht 520 H
1017 EK Amsterdam
Chamber of Commerce: 88229912
VAT: NL864546749B01
Website: www.ugc.nl
General email: info@ugc.nl
Privacy email: privacy@ugc.nl

Processing of personal data

We only process personal data insofar as this is necessary to carry out our tasks.

We process the following personal data:

Email address,
First name, name prefix, last name
Address details,
Date and place of birth
Gender,
Phone number,
Customer number,
Order history,
Bank details,
Other relevant personal data.

We use the personal data only for the following purposes:

To be able to maintain contact with you,
Performance of the agreement with you,
Sending newsletters,
To inform you of new developments, including offers,
To fulfil our administrative obligations,
To combat fraud.

Special and/or sensitive personal data

We only process personal data of individuals under the age of 16 if we have consent from the person holding parental authority. By providing us with personal data for processing, you declare that you are at least 16 years old or that you have consent for the processing from parents or other persons with parental authority.

If you have any indication that we are processing personal data of a person under the age of 16 without the consent of the authorised person, please contact us at privacy@ugc.nl so that we can delete the data in question.

Retention period of personal data

We do not retain personal data for longer than necessary for the purposes for which it was collected. Retention periods differ per type of data:

Account data: as long as the account is active, plus 12 months after termination
Transaction and invoice data: 7 years (statutory retention obligation)
Contact details for marketing: until you unsubscribe
Meta API data: as long as the connection is active, plus 30 days after disconnection
Communication via the platform: a maximum of 24 months

Security of personal data

We take care of your personal data and have therefore taken the following measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification:

The connection to the UGC.NL website is established via a secure SSL/TLS connection
The computers on which the personal data are processed and stored are always equipped with the latest security updates
The computers are equipped with an adequate virus scanner
The group of employees who have access to the personal data is kept to a minimum
All employees who have access to personal data are bound by a confidentiality agreement
A processing agreement has been concluded with all external parties that have access to personal data

If you suspect that your data are not properly secured or you have indications of misuse of your data, please let us know at privacy@ugc.nl.

We do not sell personal data to third parties and only provide it to others if this is necessary for the performance of our agreement with you or to comply with a legal obligation. We conclude processing agreements with companies that process your data on our behalf.

Parties with whom we may share data include:

Stripe (payment processing)
Hosting providers for platform infrastructure
Email providers for transactional and marketing communication
Meta Platforms (only for linked accounts, see section 7)
Tax and Customs Administration (in the context of DAC7 obligations)

7. Use of the Meta Platforms API (Facebook and Instagram)

UGC.NL uses the Meta Marketing API and Meta Business Login to retrieve performance data from advertising campaigns when users explicitly give permission for this. This enables us to display aggregated metrics on creator profiles, such as hook rate, click-through rate and video view metrics. In this way, brands can make more informed decisions about which creators they want to hire for their advertising campaigns.

7.1 Which data we collect via Meta

When a user explicitly gives permission via OAuth to link their Meta Business account to UGC.NL, we process the following data:

Meta Business Manager ID and name
Ad account IDs of the linked accounts
Campaign performance metrics such as impressions, clicks and views
Video performance data such as 3-second views, watch time and completion rate
Ad creative metadata such as video IDs, placements and status

We explicitly do NOT collect any personal data of end users who have seen the advertisements, NO audience information, and NO financial data such as ad spend or budget.

7.2 What we use this data for

Calculating performance metrics per creator
Displaying aggregated data on creator profiles on UGC.NL
Helping brands make informed decisions about creators
Improving our match-making between creators and brands

7.3 Legal basis

The processing of data via the Meta Platforms API takes place on the basis of explicit consent (Article 6(1)(a) GDPR). This consent is obtained through the OAuth linking process, in which it is clearly indicated which data is collected and for what purpose.

7.4 Retention period

Meta campaign data is retained for as long as the user keeps the connection with Meta active, plus 30 days after disconnection. Aggregated and anonymised metrics such as average hook rate may be retained longer for statistical and internal analysis purposes, without being traceable to individual persons or campaigns.

7.5 Your rights regarding Meta data

You can at any time:

Disconnect your Meta account from UGC.NL via your account settings
Submit a request for the complete deletion of your Meta data via privacy@ugc.nl
Gain access to which Meta data we have processed about you
Request a copy of your Meta data in a machine-readable format

7.6 Data deletion

Users can submit a data deletion request via: https://www.ugc.nl/data-deletion

After receipt of a deletion request, your Meta data will be completely removed from our systems within 30 days. You will receive a confirmation by email once the deletion has been completed.

7.7 Data Controller

UGC.NL B.V. is the data controller for data retrieved via the Meta Marketing API. For specific questions about Meta data, you can contact us at privacy@ugc.nl.

7.8 Meta Platform Terms

The Meta Platform Terms also apply to the use of the Meta Platforms API. UGC.NL acts in accordance with these terms when processing data originating from Meta Platforms.

8. Cookies on UGC.NL

To ensure our website functions optimally, we use third-party services, but here too we keep your privacy in mind. The cookies on our website do not endanger your privacy. A cookie is a small text file that is stored on your computer, tablet or smartphone the first time you visit our website. The cookies ensure that the website functions properly and that preference settings are retained.

We do not process your IP address in a way that is traceable to you. Cookies can be deleted via your browser settings. In addition, it is also possible to set your browser so that cookies are no longer stored.

9. Monitoring and analysis of communication via the platform

Communication between users that takes place via the UGC.NL platform may contain personal data. UGC.NL processes this communication data to a limited extent.

UGC.NL monitors and analyses communication via the platform solely for the following purposes:

Preventing and combating misuse, fraud and other undesirable actions
Enforcing the terms and conditions of UGC.NL
Safeguarding the security and integrity of the platform and its users
Gaining insights to improve and optimise the platform

The processing of this communication data takes place on the basis of the legitimate interest of UGC.NL.

For these purposes, (partly) automated analysis may be used. Decisions that may have consequences for users are not based solely on automated processing; where necessary, human assessment always takes place.

10. Rights of individuals whose personal data we process

Your data remains yours. You always have the option to:

View which data we process about you
Have the data corrected
Have the data deleted
Withdraw your consent for the data processing
Object to the processing of your data
Have your data sent to you or an organisation designated by you in a computer file (data portability)

You can submit requests via privacy@ugc.nl. We respond to your request within 30 days.

11. Automated decision-making

We do not use personal data for automated decisions that have legal consequences for the data subject. Where automated processing takes place, for example in fraud detection or communication monitoring, human assessment always takes place before any consequences arise for the user.

12. Complaints to the Dutch Data Protection Authority

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe that we are not handling your personal data properly. This can be done via www.autoriteitpersoonsgegevens.nl.

13. Changes

UGC.NL reserves the right to make changes to this privacy statement. These changes will take effect immediately after they are posted on the site. We advise you to consult this page regularly. In the event of substantial changes, we will inform active users by email.

This privacy statement was last modified on 9 April 2026.

This privacy statement was originally drawn up by Bleijerveld Juridisch advies.