Liquid Ritual Music Ltd · Last updated: 17 July 2026
Contents
1. Important information and who we are
2. The personal data we collect about you
3. How your personal data is collected
4. How we use your personal data
5. Marketing
6. Who we share your personal data with
7. International transfers
8. Data security
9. How long we keep your personal data
10. Your legal rights
11. Contact details
12. Complaints
13. Changes to this policy and third-party links
Liquid is a record label that discovers and signs music primarily from TikTok and other social platforms, and promotes signed releases through influencer and creator marketing campaigns. This policy applies to personal data we process about:
artists and other counterparties we sign or contract with;
prospective artists and content creators we research for talent-scouting and A&R purposes, including from public social media profiles;
influencers and creators we engage to promote releases;
subscribers to our newsletters and marketing, and industry contacts;
visitors to our website;
and listeners and consumers, where we receive aggregated or pseudonymised analytics from streaming services and distributors.
Liquid Ritual Music Ltd, a company registered in England and Wales under company number 10686939 with registered office at Elsley Court, 20–22 Great Titchfield Street, London, United Kingdom, W1W 8BE, is the controller responsible for your personal data. If you have any questions about this policy or wish to exercise your rights, please contact us using the details in section 11. This website and our services are not directed at children, and we do not knowingly collect personal data relating to children.
“Personal data” means any information from which a living individual can be identified. We collect, use, store and transfer the following categories:
Identity Data — name; artist, stage or professional name; username or social media handle.
Contact Data — email address; postal or billing address; telephone number; and publicly listed professional contact details.
Social & Engagement Data — TikTok and other social media handles and profile links; links to profiles on streaming services and other digital service providers; follower counts, engagement and performance metrics; and publicly available profile and content information.
Financial Data — bank account, payment and payout details; and royalty and revenue data.
Transaction & Contract Data — details of the agreements we enter into with you, distribution and release details, payments to and from you, and royalty statements.
Technical Data — internet protocol address and device identifiers.
Usage Data — streaming and campaign performance analytics relating to our releases.
Marketing & Communications Data — your marketing preferences, newsletter subscription status, and your communications with us.
We also receive aggregated and pseudonymised data about listeners and audiences from streaming services and distributors.
We do not seek to collect special category data through our website or commercial activities; where sensitive information is unavoidably involved, we only process it where a lawful condition applies.
3. How your personal data is collected
4. How we use your personal data
The law requires us to have a lawful basis for using your personal data. We rely on one or more of the following: performance of a contract; our legitimate interests, balanced against your rights; compliance with a legal obligation; and your consent. The table below sets out how we use each category of data and the lawful basis we rely on.
Purpose / activity
Types of data
Lawful basis
Entering into and performing agreements with signed artists (contracting, distribution and payment)
Identity, Contact, Financial, Transaction & Contract
Performance of a contract
Making royalty and distribution payments and keeping accounting records
Identity, Financial, Transaction & Contract
Performance of a contract; and legal obligation (financial and tax record-keeping)
Talent scouting and A&R — identifying and researching prospective artists and creators, including from public sources
Identity, Contact, Social & Engagement
Legitimate interests (discovering talent and business-to-business outreach)
Planning and running influencer and creator marketing campaigns to promote releases
Identity, Contact, Social & Engagement
Legitimate interests (promoting our releases); or performance of a contract where the creator is engaged directly
Sending newsletters and marketing communications to subscribers and industry contacts
Identity, Contact, Marketing & Communications
Consent, or the “soft opt-in” where applicable (see section 5)
Streaming analytics and audience insight
Usage; aggregated / pseudonymised audience data
Legitimate interests (understanding the performance of releases and campaigns)
Administering and protecting our business, IT and network security, and preventing fraud
Identity, Contact, Technical
Legitimate interests (running a secure business); and legal obligation
Managing our relationship with you, responding to queries and complaints, and notifying you of changes
Identity, Contact, Marketing & Communications
Performance of a contract; legal obligation; and legitimate interests (keeping our records updated)
Where we rely on legitimate interests, we carry out a balancing assessment to make sure our interests are not overridden by your rights. For our talent-scouting activities we maintain a legitimate interests assessment, which you can ask to see using the contact details in section 11.
5. Marketing
Marketing
Where required, we will only send you electronic marketing (such as email newsletters) with your consent, or on the “soft opt-in” basis permitted by the Privacy and Electronic Communications Regulations (PECR). You have an absolute right to object to direct marketing at any time — you can opt out using the unsubscribe link in any marketing message or by contacting us. We will not sell your personal data, and we will obtain your consent before sharing it with any third party for that party’s own direct marketing.
6. Who we share your personal data with
We share personal data, where necessary, with service providers who process it on our behalf under written agreements, and with certain other recipients. These include:
cloud storage and productivity providers (for example Google Workspace and Dropbox);
project, workflow and contract-management providers (for example Monday.com and PandaDoc);
automation and integration providers that move data between our tools (for example Make.com and n8n);
marketing, campaign and analytics providers;
streaming services (DSPs) and distributors, in connection with releases, royalties and analytics;
our professional advisers, such as lawyers, accountants and auditors; and
a buyer or successor if we sell, transfer or reorganise our business, and regulators or authorities where required by law.
We require all service providers to keep your personal data secure, to use it only for the purposes we specify, and to process it in accordance with our instructions and applicable law.
7. International transfers
Some of our service providers are located outside the UK, including in the United States and Israel. Whenever we transfer your personal data outside the UK to a country that is not covered by UK “adequacy” regulations, we take steps to ensure an appropriate level of protection, in particular by relying on one or more of the following:
the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses;
a UK adequacy decision, where the destination country is recognised as providing adequate protection; or
the UK Extension to the EU–US Data Privacy Framework, where the provider is certified.
To request more information about the safeguards we apply, or a copy of them, please contact us using the details in section 11.
8. Data security
We have put in place appropriate technical and organisational measures to protect your personal data from being lost, misused, altered, disclosed or accessed without authorisation. These include:
access controls and a least-privilege approach, so that access is limited to those who need it (for example, certain records are restricted to board members);
two-factor authentication on the systems we use to store personal data;
confidentiality and data-protection obligations in our staff and contractor agreements; and
written data-processing agreements with our service providers.
We have procedures in place to deal with any suspected personal data breach and will notify you and the ICO where we are legally required to do so.
9. How long we keep your personal data
We keep personal data only for as long as necessary for the purposes we collected it for, including to meet any legal, accounting, tax or reporting requirements. Our general retention periods are:
contract and payment data — for the term of the relevant agreement plus six years (for limitation and tax purposes);
marketing data — until you opt out, or after 24 months of inactivity;
talent-scouting and prospect data — 6 to 12 months where the individual is not signed.
Our full retention schedule is available on request.
10. Your legal rights
Under UK data protection law you have the right to: request access to your personal data; request correction of inaccurate data; request erasure; object to processing based on our legitimate interests; object to direct marketing (an absolute right); request restriction of processing; request the transfer of your data (data portability); and, where we rely on consent, withdraw that consent at any time.
You will not usually have to pay a fee, and we aim to respond within one month. We may need to verify your identity before acting on a request. Some rights are qualified — for example, we may need to keep certain data to meet legal obligations — and we will explain this if it applies to your request. To exercise any right, please contact us using the details in section 11.
11. Contact details
If you have any questions about this policy or wish to exercise your rights, please contact us at [email protected].
12. Complaints
You have the right to complain to the ICO, the UK data protection regulator, at any time at www.ico.org.uk. We would, however, appreciate the chance to address your concerns first, so please contact us before approaching the ICO.
13. Changes to this policy and third-party links
We keep this policy under regular review. This version was last updated on 17 July 2026. Please keep us informed if your personal data changes. Our website may contain links to third-party websites, plug-ins and applications. We do not control those sites and are not responsible for their privacy practices, so we encourage you to read the privacy policy of every site you visit.