1. What information or personal data do We collect from You and why?

We may collect and process personal data and related information (collectively, “Data”) as reasonably necessary to provide services, manage onboarding, operate our website, communicate with You, comply with legal obligations, protect our business, and support artist, label, distribution, royalty, rights, promotional, and related workflows.

Please do not send highly sensitive personal information unless it is specifically requested and lawfully required for a defined service, compliance, payment, or verification purpose. Where any such information is required, it should only be submitted through approved and secure channels.

Our forms, onboarding processes, and service agreements may indicate which Data is required and which is optional.

1.1 Personal Data

Personal Data means information that directly or indirectly identifies You or relates to an identified or identifiable natural person. Depending on the service, form, workflow, or relationship, this may include:

• Name and surname;
• Artist name, label name, stage name, company name, or brand name;
• Postal or billing address;
• Phone number;
• Email address;
• Account, payout, banking, invoicing, or payment-related information where necessary;
• Government-issued identification details where required for verification, compliance, tax, payment, or contractual purposes;
• Preferred language or communication preferences;
• Login, account, or identity verification information;
• Artist, release, catalog, rights, royalty, metadata, asset, or content-related information such as song titles, artist names, album names, release dates, ISRC, UPC, ownership details, contributor details, and related music metadata;
• Uploaded files, documents, proofs, screenshots, artwork, images, videos, or supporting materials submitted through forms or service workflows;
• Tax or business registration information where required for payment or compliance purposes;
• Customer support messages, contact form submissions, survey responses, or service-related communications;
• IP address and device-related identifiers collected through website or service use;
• Location-related information where enabled or required for service delivery, fraud prevention, or analytics, subject to device and browser permissions where applicable;
• Third-party contact information that You choose to provide, provided You have the authority or consent to share it.

1.2 Other information

We may also collect non-identifying or indirectly identifying information (“Other Information”) relating to the use of our Website, systems, communications, and services.

Depending on the context, this may include:

• Browser type, device type, operating system, and screen resolution;
• Website usage information such as viewed pages, clicks, session activity, referral sources, and interaction patterns;
• Technical logs, server logs, timestamps, and diagnostic information;
• Cookie, analytics, pixel, and similar technology data, subject to applicable consent requirements;
• General demographic or audience information that does not directly identify an individual;
• Service performance, engagement, and aggregated analytical information;
• Survey, questionnaire, and feedback responses submitted to us.

2. How do we collect Your Data?

We may collect Your Data from:

• Forms You submit on our Website;
• Artist, label, or service onboarding processes;
• Account creation or service registration;
• Direct communications by email, phone, WhatsApp, support requests, or other channels;
• Purchases, invoices, payments, or payout-related workflows;
• Newsletter signups or promotional opt-ins;
• Service requests, support tickets, claims, or disputes;
• Uploaded files, documents, proofs, and supporting materials;
• Publicly available databases or publicly shared professional information where lawfully permitted;
• Commercial, promotional, business, or platform partnerships relevant to the services requested;
• Third-party services, platforms, or tools where You choose to connect, authorize, or submit information as part of a workflow;
• Your use of the Website, its pages, features, forms, and digital tools.

We may collect Other Information through:

• Browsers, devices, and digital interactions;
• Server logs and system logs;
• Cookies and similar tracking technologies;
• Analytics tools;
• Security, fraud-detection, and performance monitoring tools;
• Information shared during communications, support, or workflow collaboration.

3. What do We process Your Data for?

We may process Your Data to:

• Create, manage, and administer accounts or service records;
• Review, onboard, and support artists, labels, partners, or service applicants;
• Provide requested services or deliver purchased products;
• Manage releases, rights, royalties, payouts, support operations, and related workflows;
• Process invoices, transactions, and payment-related operations;
• Respond to inquiries, support requests, and service issues;
• Communicate service updates, notices, and operational information;
• Send newsletters, updates, or promotional communications where permitted;
• Improve website performance, user experience, and service quality;
• Maintain system security, detect fraud, prevent abuse, and protect our operations;
• Analyze trends, website usage, and service effectiveness;
• Support internal reporting, planning, and business administration;
• Comply with legal, financial, tax, contractual, and regulatory obligations;
• Establish, exercise, or defend legal claims where necessary.

4. On what legal ground can We process Your Data?

We may process Your Data based on one or more of the following legal grounds:

• Your consent;
• The performance of a contract or pre-contractual request;
• Compliance with a legal or regulatory obligation;
• Our legitimate interests, including operating and improving our Website and services, securing systems, preventing fraud, managing business relationships, and supporting our business operations, provided such interests do not override Your rights where applicable.

5. Who receives Your data?

Data may be accessed only by authorized persons, teams, contractors, or service providers where reasonably necessary for the purposes described in this Privacy Policy and subject to appropriate confidentiality, contractual, and security measures.

Recipients may include:

• Prime Digital Arena team members, staff, and authorized internal personnel;
• Affiliated entities, operational units, or approved business partners where relevant to service delivery;
• Hosting, storage, email, analytics, technical support, payment, security, compliance, communication, and infrastructure providers;
• Distribution, platform, royalty, metadata, rights, content, support, or workflow partners where reasonably necessary to provide or support the requested service;
• Professional advisers such as accountants, auditors, lawyers, consultants, or compliance providers;
• Promotional, survey, campaign, or communication partners where applicable and lawfully permitted;
• Authorities, regulators, courts, law enforcement, or governmental bodies where disclosure is required by law or necessary to protect legal rights or prevent harm.

We may also disclose Data where reasonably necessary to:

• Comply with applicable law or lawful requests;
• Enforce our terms, contracts, or policies;
• Protect our rights, property, systems, users, partners, or operations;
• Investigate fraud, abuse, security incidents, or unlawful conduct;
• Support a merger, acquisition, restructuring, asset sale, financing, or business transfer;
• Protect You or third parties from harm, abuse, fraud, or illegal acts.

If You choose to publish or share information through public areas, social media, community spaces, or external third-party services, that information may become publicly visible or subject to those third parties’ own rules and privacy practices.

6. How long do We use Your Data for? (data retention period)

We retain Data only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain records, comply with legal, tax, accounting, contractual, and operational obligations, resolve disputes, and protect legal rights.

Retention may depend on factors such as:

• The duration of the relationship or service arrangement;
• Applicable legal, tax, accounting, or compliance requirements;
• The need to maintain operational, contractual, or support records;
• Security, fraud-prevention, audit, and enforcement needs;
• Your consent, where a particular processing activity depends on consent.

When Data is no longer required, we may delete, anonymize, or securely archive it in accordance with applicable law and internal retention practices.

7. Hosting, storing, and transfer of your data

Our Website, systems, and service operations may be managed using infrastructure, tools, or partners located in different jurisdictions depending on operational needs, technology providers, service workflows, and partner requirements.

As a result, Your Data may be stored, accessed, processed, or transferred in countries other than Your place of residence. Where such transfers occur, we aim to use reasonable contractual, technical, and organizational safeguards appropriate to the nature of the data and the services involved.

We may also use third-party service providers, distribution partners, platform partners, or technical vendors to support hosting, communications, service delivery, reporting, rights workflows, or business operations.

By using our Website or submitting Your Data for relevant services, You understand that such processing may involve cross-border operational or technical handling where necessary for service performance, compliance, security, or support.

8. Security measures

We implement reasonable physical, technical, administrative, and organizational safeguards designed to protect Data against unauthorized access, disclosure, alteration, misuse, or destruction.

While no online system or transmission method can be guaranteed to be completely secure, we take commercially reasonable steps to secure our Website, systems, forms, and communications.

These measures may include:

• Restricted access to systems and data;
• Password protection and account controls;
• Secure hosting or protected infrastructure;
• Encryption or secure transmission methods where appropriate;
• Monitoring, logging, and security review processes;
• Confidentiality obligations for staff or service providers handling Data.

You are also responsible for protecting account credentials, devices, and communication channels used to interact with us.

9. Your rights

Subject to applicable law, You may have rights relating to the personal data we hold about You. These rights may include:

• Right to be informed: to know how Your Data is used;
• Right of access: to request access to Your personal data;
• Right of rectification: to request correction of inaccurate or incomplete data;
• Right to erasure: to request deletion of data in certain circumstances;
• Right to restrict processing: to request limited use of data in certain cases;
• Right to object: to object to certain processing activities, including some direct marketing;
• Right to withdraw consent: where processing is based on consent, You may withdraw it;
• Right to data portability: where applicable, to request transfer of certain data in a structured format.

To exercise any applicable rights, please contact us using the contact details provided below. We may request reasonable verification of identity before processing certain requests.

10. What if a data breach occurs?

If we become aware of a data breach affecting personal data under our control, we will assess the incident and take appropriate action based on the nature of the breach, the systems involved, the potential impact, and our legal obligations.

Where required by applicable law, we may notify affected individuals, relevant authorities, partners, or other stakeholders within the timeframes and manner required.

11. How can You contact us?

If You have any questions, requests, or concerns regarding this Privacy Policy or how Your Data is handled, You may contact Prime Digital Arena through the details below:

This page should be read together with any additional service-specific terms, onboarding terms, payout terms, or platform notices that may apply to a particular Prime Digital Arena workflow.