At Aiming Records (operated by Dopuu Ltd), we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services.

1. Information We Collect

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain our music distribution services
• Process your music releases and distribute them to streaming platforms
• Calculate and distribute royalty payments
• Communicate with you about your account, releases, and royalties
• Improve our services and develop new features
• Comply with legal obligations and prevent fraud

3. Data Sharing and Disclosure

We share your information only in the following circumstances:

• Streaming Platforms & Digital Stores: When you distribute music through Aiming Records, we share:
  • Audio files and cover artwork
  • Metadata (artist name, track titles, album info, ISRC/UPC codes, copyright information)
  • Your artist profile information (bio, images, social media links)
  • Territory and language preferences

  Platforms we distribute to include: Spotify, Apple Music, Amazon Music, YouTube Music, Tidal, Deezer, Pandora, iHeartRadio, and 150+ other services worldwide. Each platform has its own privacy policy governing how they use your data.

• Payment Processors: We share necessary information with:
  • Banks: Account holder name, account number, sort code/IBAN, SWIFT/BIC for wire transfers
  • PayPal: PayPal email address for electronic payments
  • Stripe: Banking details for direct deposit (if applicable)
• Tax Authorities: We report earnings to HMRC (UK tax authority) and may report to IRS (US) for US-based artists. We collect and submit W-9/W-8 forms as legally required.
• Rights Management Organizations: If you opt-in, we may share your music with:
  • PPL (Phonographic Performance Limited) for UK airplay royalties
  • SoundExchange for US digital performance royalties
  • YouTube Content ID for copyright protection and monetization
• Analytics Services: Google Analytics receives anonymized website usage data. We also receive aggregated listener analytics from streaming platforms (demographics, locations, listening habits) which we share with you in your dashboard.
• Email Service: EmailJS processes contact form submissions. Messages are delivered to us and deleted from their servers within 24 hours.
• Fraud Detection Services: To protect against streaming fraud, we share limited data (release IDs, streaming patterns, account information) with third-party fraud detection providers.
• Legal & Compliance: We disclose information when required by:
  • Court orders, subpoenas, or legal process
  • DMCA takedown notices or copyright claims
  • Platform investigations into fraudulent activity
  • Law enforcement requests (with valid legal basis)
  • Protecting our rights, safety, or property

4. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. This includes encryption, secure servers, and regular security audits.

5. Your Rights (GDPR & UK GDPR)

Under the General Data Protection Regulation (GDPR) and UK GDPR, you have the following rights:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete personal information
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data, subject to legal retention requirements (e.g., tax records, contract obligations)
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your personal data for marketing purposes
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Withdraw Consent: Withdraw consent for data processing at any time

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving your request.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

6. Cookies and Tracking Technologies

We use cookies and similar technologies:

• Google Analytics: To track website usage and improve user experience. These cookies include _ga, _gid, _gat, and _ga_SXKD0SPDH8.
• Essential Cookies: For website functionality and security (Next.js framework cookies)

For detailed information about cookies we use and how to manage them, please see our Cookie Policy.

7. Data Retention

We retain different types of data for varying periods:

• Account Information: Retained for the duration of your contract plus 7 years for tax and legal compliance (UK law requirement)
• Music Content & Metadata: Retained while distributed on platforms, plus archives as required by streaming platform agreements
• Royalty & Payment Data: Retained for 7 years for accounting and tax purposes
• Contact Form Messages: Deleted after resolution, typically within 90 days
• Google Analytics Data: Automatically deleted after 26 months

Upon contract termination, you may request deletion of your data, subject to legal retention requirements.

8. International Data Transfers

As a UK-based company, your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place to protect your information during international transfers.

9. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our platform. Your continued use of our services after changes indicates your acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at: