Privacy Policy

1. Data Controller

Mcarthur Records Ltd (Company No. 13112134), incorporated in England and Wales, is the Data Controller for the purposes of UK GDPR, the Data Protection Act 2018, and PECR.

Registered Office: 52248, Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, United Kingdom, BH16 6FA.

2. Scope

This Privacy Policy applies to:

• Website visitors to mcarthurent.com and auth.mcarthurent.com
• Mcarthur Digital platform users (artists, labels, rights holders)
• Employees, contractors, partners, and investors
• Any individual whose personal data we process

3. Personal Data Collected

3.1 Identity & Contact Data

• Full name, email address, phone number, postal address
• Business/label name and registration details
• Artist or band name and associated information

3.2 Account & Distribution Data

• Uploaded content metadata, release files, and audio/video content
• Royalty and bank payment details for distribution payments
• User account information and login credentials
• Distribution history and platform usage data

3.3 Technical Data

• IP address, browser type, device information, and operating system
• Cookies and tracking data (see Section 6 for details)
• Usage data (pages visited, interactions, and time spent)
• Referral source and clickstream data

4. Lawful Basis for Processing

We process personal data relying on one or more lawful bases:

• Contractual obligations: To fulfill distribution agreements and provide services
• Legal obligations: To comply with tax, accounting, and regulatory requirements
• Legitimate interests: For platform operations, security, marketing, and business improvement
• Consent: Where applicable for email marketing, cookies, and optional communications

5. Purpose of Processing

We process your personal data for the following purposes:

• Operating Mcarthur Digital: Managing your account, distributing your music, and providing platform services
• Royalty Processing: Calculating, reporting, and paying royalties based on distribution data
• Communications: Sending service updates, promotional materials, and important notices
• Compliance: Meeting legal and regulatory requirements
• Platform Security: Preventing fraud, protecting against unauthorized access, and ensuring system integrity
• Business Improvement: Analysing usage patterns to improve our services and user experience

6. Cookies & Tracking

We use cookies and similar tracking technologies to enhance website usability, track platform usage, and improve our services.

• Essential Cookies: Required for basic website functionality and security
• Analytics Cookies: Help us understand how visitors interact with our website
• Marketing Cookies: Used for targeted advertising and promotional content (consent required)

Users can manage consent via their browser settings or our cookie preference centre. For marketing cookies, explicit consent will be obtained before they are set.

7. Data Sharing

We may share your data with the following categories of recipients:

• Digital Service Providers: Streaming platforms, music stores, and distribution partners
• Payment Processors: For royalty and payment processing
• IT Service Providers: Cloud hosting, software, and technical support providers
• Professional Advisors: Legal, auditing, and compliance professionals
• Regulatory Authorities: Where legally required to do so

8. International Transfers

Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office
• Adequacy decisions where the recipient country provides an adequate level of protection
• Other lawful transfer mechanisms as permitted by UK data protection law

9. Data Retention

We retain personal data only as long as necessary to fulfill contractual, legal, or regulatory obligations.

• Account Data: Retained for the duration of your account and for a reasonable period thereafter to comply with legal obligations
• Royalty Records: Retained for at least 6 years as required by UK tax and accounting regulations
• Communication Records: Retained for as long as necessary to provide services and for legitimate business purposes

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption: All data transmitted and stored using industry-standard encryption
• Access Control: Strict access controls and authentication measures
• Secure Storage: Data stored in secure, ISO-certified data centres
• Regular Audits: Ongoing security reviews and vulnerability assessments
• Staff Training: Regular data protection and security awareness training

11. User Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Restrict Processing: Limit how we use your data in certain circumstances
• Right to Object: Object to processing based on legitimate interests or marketing
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time
• Right to Complain: Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk)

12. Mcarthur Digital Platform & User Passwords

Mcarthur Digital is built and owned exclusively by Mcarthur Records Ltd. All platform personal data is governed by this Privacy Policy and applicable UK data protection laws.

User Passwords:

• User account passwords are generated automatically by our internal secure password generator and sent directly to the user's registered email address.
• Only the user can view their password; Mcarthur Records Ltd employees do not have access to user passwords or accounts.
• Mcarthur Records Ltd cannot retrieve or recover lost passwords. Users must request a new password via official communication channels.
• Each password reset email includes guidance on keeping the password and account secure.
• Passwords are stored securely using strong encryption and cannot be reverse-engineered by any internal staff.

13. Marketing Communications

With your explicit consent, we may send newsletters, promotional materials, and updates about our services. You can unsubscribe at any time through the link provided in each communication or by contacting us directly.

• Email Marketing: You may opt out at any time using the unsubscribe link
• Service Updates: We may send important service-related communications that are not subject to opt-out

14. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

15. Updates to Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The latest version will always be available on our website. We encourage you to review this policy regularly.

16. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer:

• Data Protection Officer: Mcarthur Records Ltd
• Email: privacy@mcarthurent.com
• Portal: auth.mcarthurent.com
• Address: 52248, Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, United Kingdom, BH16 6FA