Privacy Policy

LKK Records is the data controller responsible for personal information collected through this platform. For questions about this Privacy Policy or your personal information, contact us at privacy@lkkrecords.distrosupport.com.

This platform is powered by technology provided by enarumusic Benelux (Netherlands), which acts solely as a data processor on behalf of LKK Records and has no independent data controller relationship with users of this platform.

2.1 Account Information

When you create an account, we collect:

• Email address (required for account creation and authentication)
• Password (stored securely using bcrypt hashing)
• Full name (for identification and payment processing)
• Artist or stage name (for profile display and release attribution)
• Profile picture URL (optional, if you choose to upload an avatar)
• Account creation date and last login timestamp

2.2 Payment Information

For royalty payouts, we may collect:

• Bank account details (name, IBAN, BIC) or PayPal email address
• Payment request history, including amounts, dates, and status
• Transaction records for royalty deposits

We do not store credit card information. Financial transactions are processed by our payment partners, which maintain their own privacy policies and security standards.

2.3 Music Content and Metadata

When you upload music releases, we store:

• Audio files (in various formats as you upload them)
• Album artwork and promotional images
• Release metadata including titles, descriptions, genres, release dates, and ISRC codes
• Track listings, durations, and other technical information
• Distribution platform selections and preferences
• Release status (draft, pending, live, or taken down)

2.4 Usage and Technical Data

We automatically collect certain technical information when you use our platform:

• IP address (for security monitoring and fraud prevention)
• Browser type, version, and language preferences
• Operating system and device information
• Pages visited, features used, and time spent on the platform
• Error logs and diagnostic information for troubleshooting

2.5 Communications

We store records of:

• Support tickets and help desk interactions
• Email correspondence with our team
• Notifications and alerts sent to your account
• Feedback, suggestions, and survey responses

2.6 Royalty and Streaming Data

We collect royalty information from streaming platforms, including:

• Stream counts and listener statistics
• Revenue generated by platform and territory
• Historical performance data for your releases

2.7 Age Information

During account registration, you are required to confirm your age in compliance with COPPA and our Terms of Service. We store your confirmed age category for legal compliance purposes. You are responsible for providing accurate age information. Providing false information may result in immediate account termination.

We process your personal information for the following purposes:

3.1 Service Provision

• Creating and maintaining your artist account
• Distributing your music to streaming platforms and digital stores
• Collecting and distributing royalties from your music
• Processing payout requests
• Providing customer support and responding to inquiries

3.2 Platform Improvement

• Analyzing usage patterns to improve platform functionality and user experience
• Developing new features and services based on user needs
• Testing new features

3.3 Security and Fraud Prevention

• Monitoring for fraudulent streaming activity and artificial stream manipulation
• Detecting and preventing unauthorized account access
• Investigating violations of our Terms of Service
• Maintaining the integrity of our platform and payment systems

3.4 Legal Compliance

• Complying with applicable Dutch and EU laws (GDPR, UAVG, and sector-specific regulations)
• Responding to lawful legal requests, court orders, and regulatory demands
• Enforcing our Terms of Service and other agreements
• Meeting regulatory obligations for financial recordkeeping under Dutch commercial law (Burgerlijk Wetboek Boek 2)

3.5 Communications

• Sending transactional emails about your account, releases, and royalties
• Notifying you of platform updates and policy changes
• Sending promotional communications (only with your consent, where required by law)

You may opt out of promotional communications at any time by clicking the unsubscribe link in our emails or contacting us at privacy@lkkrecords.distrosupport.com.

We do not sell your personal information to third parties. We share your information only in the following limited circumstances:

4.1 Platform Technology Provider

This platform is operated on technology infrastructure provided by enarumusic Benelux (Netherlands). enarumusic Benelux processes technical platform data solely as a data processor under contract with LKK Records, in compliance with GDPR Article 28. enarumusic Benelux does not independently use, sell, or disclose your personal information.

4.2 Music Distribution Partners

We share your music, artwork, and associated metadata with streaming platforms (such as Spotify, Apple Music, Amazon Music) and digital stores to fulfill our distribution services. These platforms have their own privacy policies.

4.3 Payment Processors

We use payment processors to handle royalty payouts. When you request a withdrawal, we share the minimum necessary information with our payment processor to complete the transaction.

4.4 Cloud Infrastructure

We use Vercel for application hosting, Supabase for database services, and Backblaze B2 for file storage (EU Central region). These providers have access to your data only to the extent necessary to provide their services and are bound by Data Processing Agreements in accordance with GDPR Article 28.

4.5 Email Services

We use third-party providers for transactional and promotional email delivery. These providers have access to your email address and the content of emails we send you.

4.6 Legal Requirements

We may disclose your information if required to do so by applicable law, including:

• Valid legal processes such as subpoenas, court orders, or search warrants
• Requests from law enforcement or government authorities
• Emergencies involving potential harm to individuals
• Protection and enforcement of our legal rights

4.7 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the successor entity. We will notify you of any material change in ownership or control of your personal information.

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Account information: Retained while your account is active and for 7 years after account closure as required by Dutch commercial law (Art. 2:10 BW) and tax law (Art. 52 AWR)
• Payment and financial records: Retained for 7 years after the last transaction as required by Dutch tax law (Art. 52 Algemene wet inzake rijksbelastingen — AWR)
• Music content: Retained until you request deletion or close your account
• Royalty and streaming data: Retained for 10 years for historical reporting and accounting purposes
• Usage logs and analytics: Retained for 2 years unless anonymized earlier in accordance with GDPR
• Support communications: Retained for 3 years after resolution

Depending on where you reside, you may have certain rights regarding your personal information.

6.1 Rights under GDPR / UAVG (EU & Dutch Residents)

As a Netherlands-based operator under the GDPR and UAVG, all users have the following rights:

• Right of Access (Art. 15 GDPR): You may request a copy of all personal data we hold about you, including processing purposes, recipients, and retention periods.
• Right to Rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17 GDPR): You may request deletion of your personal data, subject to legal retention obligations under Dutch law.
• Right to Restriction (Art. 18 GDPR): You may request that we restrict processing of your data in certain circumstances.
• Right to Data Portability (Art. 20 GDPR): You may request your data in a structured, machine-readable format.
• Right to Object (Art. 21 GDPR): You may object to processing based on legitimate interests.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (AP), at autoriteitpersoonsgegevens.nl.

To exercise your privacy rights, contact us at privacy@lkkrecords.distrosupport.com. We will respond within 30 days as required by GDPR Article 12.

6.2 General Privacy Rights (All Users)

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may update most account information directly in your account settings.
• Deletion: You may request deletion of your account by contacting privacy@lkkrecords.distrosupport.com, subject to our legal retention obligations.
• Opt-Out of Marketing: You may unsubscribe from promotional emails at any time.

6.3 Rights for EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you are protected by the General Data Protection Regulation (GDPR). You retain all rights afforded under the GDPR, including rights of access, rectification, erasure, restriction, portability, and the right to lodge a complaint with your local supervisory authority. For GDPR-related inquiries, contact privacy@lkkrecords.distrosupport.com.

Note: The technology infrastructure underlying this platform is provided by enarumusic Benelux (Netherlands), which processes data as a data processor under a Data Processing Agreement with LKK Records in compliance with GDPR Article 28.

LKK Records does not knowingly collect personal information from children under the age of 13 without verifiable parental consent, in compliance with the Children's Online Privacy Protection Act (COPPA).

Our platform is not directed at children under 13. If you are under 13, you may not create an account or use our services. If we become aware that we have inadvertently collected personal information from a child under 13 without appropriate consent, we will delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at privacy@lkkrecords.distrosupport.com. We will take steps to remove that information and terminate the associated account.

Users between 13 and 17 years of age may only use our services with the consent and supervision of a parent or legal guardian who agrees to be bound by these terms on their behalf.

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit using TLS and HTTPS
• Encryption of sensitive data at rest using AES-256 encryption
• Secure password storage using bcrypt hashing with salt
• Access controls and authentication requirements for all team members
• Monitoring and logging of suspicious activity
• Incident response procedures for potential data breaches

While we take reasonable precautions to protect your data, no method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

LKK Records is a Netherlands-based operator and processes data primarily within the European Economic Area (EEA). Where we engage service providers located outside the EEA (e.g. for hosting or email delivery), we ensure appropriate safeguards are in place in accordance with GDPR Chapter V, including Standard Contractual Clauses (SCCs) approved by the European Commission.

The underlying platform infrastructure is provided by enarumusic Benelux (Netherlands), operating entirely within the EEA. No additional transfer mechanism is required for data processed by enarumusic Benelux on behalf of LKK Records.

We use cookies and similar technologies to:

• Maintain your login session and remember your preferences
• Analyze platform usage and improve our services
• Provide security features and prevent fraud

Types of cookies we use:

• Essential cookies: Required for the platform to function, including authentication and security
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Help us understand how you use the platform

You can manage cookie preferences through your browser settings. Disabling certain cookies may limit platform functionality.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform functionality. Material changes will be communicated to you via email or through a notice on the platform. Your continued use of LKK Records after the effective date of an updated Privacy Policy constitutes your acceptance of the changes.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For all GDPR-related requests (access, rectification, erasure, portability, objection), we will respond within 30 days as required by GDPR Article 12. You also have the right to lodge a complaint with the Dutch data protection supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).