Privacy Policy

Privacy Policy

Liquid Ritual Music Ltd · Last updated: 17 July 2026

Contents

1. Important information and who we are
2. The personal data we collect about you
3. How your personal data is collected
4. How we use your personal data
5. Marketing
6. Who we share your personal data with
7. International transfers
8. Data security
9. How long we keep your personal data
10. Your legal rights
11. Contact details
12. Complaints
13. Changes to this policy and third-party links

1. Important information and who we are

1. Important information and who we are

Liquid is a record label that discovers and signs music primarily from TikTok and other social platforms, and promotes signed releases through influencer and creator marketing campaigns. This policy applies to personal data we process about:


  • artists and other counterparties we sign or contract with;

  • prospective artists and content creators we research for talent-scouting and A&R purposes, including from public social media profiles;

  • influencers and creators we engage to promote releases;

  • subscribers to our newsletters and marketing, and industry contacts;

  • visitors to our website;

  • and listeners and consumers, where we receive aggregated or pseudonymised analytics from streaming services and distributors.


Liquid Ritual Music Ltd, a company registered in England and Wales under company number 10686939 with registered office at Elsley Court, 20–22 Great Titchfield Street, London, United Kingdom, W1W 8BE, is the controller responsible for your personal data. If you have any questions about this policy or wish to exercise your rights, please contact us using the details in section 11. This website and our services are not directed at children, and we do not knowingly collect personal data relating to children.

2. The personal data we collect about you

2. The personal data we collect about you

“Personal data” means any information from which a living individual can be identified. We collect, use, store and transfer the following categories:


  • Identity Data — name; artist, stage or professional name; username or social media handle.

  • Contact Data — email address; postal or billing address; telephone number; and publicly listed professional contact details.

  • Social & Engagement Data — TikTok and other social media handles and profile links; links to profiles on streaming services and other digital service providers; follower counts, engagement and performance metrics; and publicly available profile and content information.

  • Financial Data — bank account, payment and payout details; and royalty and revenue data.

  • Transaction & Contract Data — details of the agreements we enter into with you, distribution and release details, payments to and from you, and royalty statements.

  • Technical Data — internet protocol address and device identifiers.

  • Usage Data — streaming and campaign performance analytics relating to our releases.

  • Marketing & Communications Data — your marketing preferences, newsletter subscription status, and your communications with us.


We also receive aggregated and pseudonymised data about listeners and audiences from streaming services and distributors.


We do not seek to collect special category data through our website or commercial activities; where sensitive information is unavoidably involved, we only process it where a lawful condition applies.

3. How your personal data is collected

We collect personal data through the following methods:


  • Directly from you — when you complete our intake or onboarding forms (for example via online forms), sign an agreement with us, subscribe to our newsletter, attend our events, or correspond with us by email or otherwise. Our forms and records are managed using tools including Google Forms, Monday.com and PandaDoc.

  • From third parties and public sources — for talent scouting and A&R, we collect Identity, Contact and Social & Engagement Data about prospective artists and creators from public profiles on TikTok and other social media and streaming platforms, and from manual research. We also receive royalty data and aggregated audience analytics from DSPs and distributors, and information from payment and technical service providers.


Where we obtain your personal data from public sources or third parties rather than from you directly (for example when scouting prospective artists), we do so on the basis explained in section 4, and you have the rights set out in section 10, including the right to object.

We collect personal data through the following methods:


  • Directly from you — when you complete our intake or onboarding forms (for example via online forms), sign an agreement with us, subscribe to our newsletter, attend our events, or correspond with us by email or otherwise. Our forms and records are managed using tools including Google Forms, Monday.com and PandaDoc.

  • From third parties and public sources — for talent scouting and A&R, we collect Identity, Contact and Social & Engagement Data about prospective artists and creators from public profiles on TikTok and other social media and streaming platforms, and from manual research. We also receive royalty data and aggregated audience analytics from DSPs and distributors, and information from payment and technical service providers.


Where we obtain your personal data from public sources or third parties rather than from you directly (for example when scouting prospective artists), we do so on the basis explained in section 4, and you have the rights set out in section 10, including the right to object.

4. How we use your personal data

The law requires us to have a lawful basis for using your personal data. We rely on one or more of the following: performance of a contract; our legitimate interests, balanced against your rights; compliance with a legal obligation; and your consent. The table below sets out how we use each category of data and the lawful basis we rely on.

Purpose / activity

Types of data

Lawful basis

Entering into and performing agreements with signed artists (contracting, distribution and payment)

Identity, Contact, Financial, Transaction & Contract

Performance of a contract

Making royalty and distribution payments and keeping accounting records

Identity, Financial, Transaction & Contract

Performance of a contract; and legal obligation (financial and tax record-keeping)

Talent scouting and A&R — identifying and researching prospective artists and creators, including from public sources

Identity, Contact, Social & Engagement

Legitimate interests (discovering talent and business-to-business outreach)

Planning and running influencer and creator marketing campaigns to promote releases

Identity, Contact, Social & Engagement

Legitimate interests (promoting our releases); or performance of a contract where the creator is engaged directly

Sending newsletters and marketing communications to subscribers and industry contacts

Identity, Contact, Marketing & Communications

Consent, or the “soft opt-in” where applicable (see section 5)

Streaming analytics and audience insight

Usage; aggregated / pseudonymised audience data

Legitimate interests (understanding the performance of releases and campaigns)

Administering and protecting our business, IT and network security, and preventing fraud

Identity, Contact, Technical

Legitimate interests (running a secure business); and legal obligation

Managing our relationship with you, responding to queries and complaints, and notifying you of changes

Identity, Contact, Marketing & Communications

Performance of a contract; legal obligation; and legitimate interests (keeping our records updated)

Where we rely on legitimate interests, we carry out a balancing assessment to make sure our interests are not overridden by your rights. For our talent-scouting activities we maintain a legitimate interests assessment, which you can ask to see using the contact details in section 11.

5. Marketing

Marketing

Where required, we will only send you electronic marketing (such as email newsletters) with your consent, or on the “soft opt-in” basis permitted by the Privacy and Electronic Communications Regulations (PECR). You have an absolute right to object to direct marketing at any time — you can opt out using the unsubscribe link in any marketing message or by contacting us. We will not sell your personal data, and we will obtain your consent before sharing it with any third party for that party’s own direct marketing.

6. Who we share your personal data with

We share personal data, where necessary, with service providers who process it on our behalf under written agreements, and with certain other recipients. These include:


  • cloud storage and productivity providers (for example Google Workspace and Dropbox);

  • project, workflow and contract-management providers (for example Monday.com and PandaDoc);

  • automation and integration providers that move data between our tools (for example Make.com and n8n);

  • marketing, campaign and analytics providers;

  • streaming services (DSPs) and distributors, in connection with releases, royalties and analytics;

  • our professional advisers, such as lawyers, accountants and auditors; and

  • a buyer or successor if we sell, transfer or reorganise our business, and regulators or authorities where required by law.


We require all service providers to keep your personal data secure, to use it only for the purposes we specify, and to process it in accordance with our instructions and applicable law.

7. International transfers

Some of our service providers are located outside the UK, including in the United States and Israel. Whenever we transfer your personal data outside the UK to a country that is not covered by UK “adequacy” regulations, we take steps to ensure an appropriate level of protection, in particular by relying on one or more of the following:


  • the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses;

  • a UK adequacy decision, where the destination country is recognised as providing adequate protection; or

  • the UK Extension to the EU–US Data Privacy Framework, where the provider is certified.


To request more information about the safeguards we apply, or a copy of them, please contact us using the details in section 11.

8. Data security

We have put in place appropriate technical and organisational measures to protect your personal data from being lost, misused, altered, disclosed or accessed without authorisation. These include:


  • access controls and a least-privilege approach, so that access is limited to those who need it (for example, certain records are restricted to board members);

  • two-factor authentication on the systems we use to store personal data;

  • confidentiality and data-protection obligations in our staff and contractor agreements; and

  • written data-processing agreements with our service providers.


We have procedures in place to deal with any suspected personal data breach and will notify you and the ICO where we are legally required to do so.

9. How long we keep your personal data

We keep personal data only for as long as necessary for the purposes we collected it for, including to meet any legal, accounting, tax or reporting requirements. Our general retention periods are:


  • contract and payment data — for the term of the relevant agreement plus six years (for limitation and tax purposes);

  • marketing data — until you opt out, or after 24 months of inactivity;

  • talent-scouting and prospect data — 6 to 12 months where the individual is not signed.


Our full retention schedule is available on request.

10. Your legal rights

Under UK data protection law you have the right to: request access to your personal data; request correction of inaccurate data; request erasure; object to processing based on our legitimate interests; object to direct marketing (an absolute right); request restriction of processing; request the transfer of your data (data portability); and, where we rely on consent, withdraw that consent at any time.


You will not usually have to pay a fee, and we aim to respond within one month. We may need to verify your identity before acting on a request. Some rights are qualified — for example, we may need to keep certain data to meet legal obligations — and we will explain this if it applies to your request. To exercise any right, please contact us using the details in section 11.

11. Contact details

If you have any questions about this policy or wish to exercise your rights, please contact us at [email protected].

12. Complaints

You have the right to complain to the ICO, the UK data protection regulator, at any time at www.ico.org.uk. We would, however, appreciate the chance to address your concerns first, so please contact us before approaching the ICO.

13. Changes to this policy and third-party links

We keep this policy under regular review. This version was last updated on 17 July 2026. Please keep us informed if your personal data changes. Our website may contain links to third-party websites, plug-ins and applications. We do not control those sites and are not responsible for their privacy practices, so we encourage you to read the privacy policy of every site you visit.