Privacy Policy for Gloamed Records

Effective Date: February 6, 2026

Gloamed Records ("we," "us," or "our"), based in Europe, is committed to protecting the privacy of individuals who visit our website at gloamed.com (the "Website") and interact with our services. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of personal information in compliance with the General Data Protection Regulation (GDPR), the ePrivacy Directive (Directive 2002/58/EC as amended), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable data protection laws worldwide, including but not limited to the UK GDPR, Brazil's Lei Geral de Proteção de Dados (LGPD), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Australia's Privacy Act 1988, and similar regulations in other jurisdictions where we operate or have users. By accessing or using the Website, you consent to the terms described herein. This policy applies to information collected through the Website, which is hosted on the Wix platform. Please note that Wix may have its own privacy practices, and we encourage you to review their policies separately at the Wix Privacy Policy. We aim to make this policy clear and accessible for our worldwide audience, with a particular focus on our primary users in Europe.

1. What Type of Information Do We Collect?

We collect various types of personal information from visitors and users of our Website to facilitate our services, enhance user experience, and support our operations. This information may be provided directly by you or collected automatically through monitoring tools such as cookies, web beacons, and analytics software. The specific types of personal information we collect include, but are not limited to:

Contact Information: Such as your full name and email address (required when using our contact form), mailing address, and telephone number, provided when you subscribe to newsletters, submit artist demos, contact us via forms, or otherwise communicate with us.
Demographic Information: In certain cases, we may collect details such as date of birth or gender if voluntarily provided for purposes like age verification for events or personalized marketing.
Account Information: If you create an account for purchasing music, merchandise, or accessing exclusive content, this may include usernames, passwords (for direct email sign-ups), and payment details (such as credit card information, billing address, and transaction history, processed securely through third-party payment processors like Stripe or PayPal). If you choose to connect or sign in via third-party services such as Google or Facebook, we may collect information from those providers, including your name, email address, profile picture, and other data as authorized by you during the connection process. We do not collect sensitive financial details like social security numbers.
Usage Data: Automatically collected information, including IP addresses, browser type, device identifiers, pages visited, time spent on the Website, and interactions with embedded content such as YouTube videos or Spotify players.
Marketing and Preferences Data: Information about your interests in music genres, artists, or events, as well as your marketing communication preferences.
Other Submissions: Any content you voluntarily provide, such as feedback, reviews, or submissions for artist opportunities.

We do not intentionally collect sensitive personal information beyond what is necessary, such as racial or ethnic origin, political opinions, health data, or social security numbers, unless explicitly provided by you for a specific purpose and with your consent. When you interact with embedded third-party services (e.g., YouTube videos or Spotify players), those services may collect additional data as described in their respective privacy policies.

In the future, we may expand our collection and processing practices to include additional information related to contacting users, handling payments, data processing for improved services, marketing initiatives, and analytics to better understand user behavior, subject to applicable laws and with appropriate notice and consent where required.

For the past 12 months, we have collected the categories of personal information described above from sources including directly from users, automatically via the Website, and from third parties such as payment processors and analytics providers.

2. Legal Basis for Processing Personal Data (GDPR and Similar Laws)

Under the GDPR and equivalent laws (e.g., UK GDPR, LGPD), we process personal data on the following legal bases:

Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as subscribing to newsletters or submitting contact forms.
Contractual Necessity: To perform a contract with you, such as processing payments for purchases.
Legitimate Interests: For purposes such as improving our Website, marketing our services, and ensuring security, provided these interests are not overridden by your rights.
Legal Obligation: To comply with legal requirements, such as tax or regulatory obligations.

We will only process sensitive personal data with your explicit consent or where otherwise permitted by law.

3. How We Collect Information

Directly from You: Through forms (including contact forms requiring full name and email), registrations, purchases, or communications on the Website, including direct email sign-ups.
Automatically: Via cookies, web beacons, and similar tracking technologies to analyze Website usage and improve user experience, in compliance with the ePrivacy Directive. This may include data from interactions with embedded content, such as playback of YouTube videos or Spotify playlists. For details, see our section on Cookies and Tracking Technologies.
From Third Parties: Such as social media platforms (e.g., Google or Facebook) if you connect or sign in using those accounts, analytics providers like Google Analytics, payment processors for handling transactions, or embedded services like YouTube and Spotify, which may collect data when you engage with their content on our Website.

4. How We Use Your Information

We use the collected information for the following purposes:

To provide and maintain our services, including processing purchases and payments via third-party processors, sending updates on artists and releases, responding to contact form inquiries, facilitating account creation or login (including via third-party services like Google or Facebook), and enabling access to embedded content like YouTube videos and Spotify players.
To communicate with you, such as sending newsletters, promotional materials, or event notifications, subject to your preferences and applicable laws like the ePrivacy Directive.
To improve the Website and our offerings, by analyzing usage patterns (including interactions with embeds) and user feedback.
To comply with legal obligations, enforce our terms, or protect our rights and those of our users.
For marketing and advertising, including targeted promotions based on your interests, where permitted by law.

The business or commercial purposes align with the categories collected, such as fulfilling transactions, providing customer support, and enhancing user experience.

5. Sharing Your Information

We may share your personal information with:

Service Providers: Third parties that assist us with Website hosting (e.g., Wix), payment processing (e.g., secure handling of payment information through providers like Stripe or PayPal), email delivery, or analytics, under strict confidentiality agreements. We do not store your payment details directly; they are managed by these processors. For more details, review the Stripe Privacy Policy or PayPal Privacy Policy.
Authentication Providers: If you sign in or connect via third-party services, we may share limited data with providers such as Google or Facebook to facilitate authentication. For more details, review the Google Privacy Policy or Facebook Privacy Policy.
Affiliates and Partners: Related entities or music industry partners for joint promotions or services, including streaming platforms like Spotify.
Third-Party Embed Providers: Services such as YouTube (operated by Google) and Spotify may receive data when you interact with their embedded players or videos on our Website, in accordance with their own privacy policies. For more details, review the Google Privacy Policy (applicable to YouTube and Google Analytics) or Spotify Privacy Policy.
Legal Authorities: As required by law, in response to subpoenas, court orders, or to prevent harm.
Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred as part of the transaction.

We do not sell your personal information to third parties for their independent marketing purposes. Your data will not be transferred to any third party except as necessary for the purposes described in this policy and under appropriate data protection measures.

We do not sell or share your personal information for cross-context behavioral advertising as defined under the CCPA. In the past 12 months, we have disclosed the categories of personal information described above to service providers and affiliates for the business purposes outlined.

6. Do Not Sell My Personal Information

In accordance with the CCPA, we provide a "Do Not Sell My Personal Information" link on our Website. Although we do not sell personal information as defined under the CCPA, California residents may use this link to opt out and receive confirmation of their choice. For additional requests or inquiries related to your personal information, such as access, deletion, or correction, please contact us directly at submit@gloamed.com. We will process verifiable requests in compliance with applicable laws.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting requirements. For example, contact information may be retained for the duration of our relationship with you plus a reasonable period thereafter, while transaction data may be kept for up to seven years to comply with tax laws. When data is no longer needed, it is securely deleted or anonymized.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, loss, or alteration. However, no method of transmission over the internet or electronic storage is entirely secure, and we cannot guarantee absolute security. Payment information is handled exclusively by certified third-party processors that comply with industry standards such as PCI DSS.

9. Your Rights and Choices

Depending on your jurisdiction, you have various rights regarding your personal information. For individuals in the European Economic Area (EEA) under the GDPR, these include:

The right to access the personal data we hold about you.
The right to rectification of inaccurate or incomplete data.
The right to erasure (right to be forgotten) under certain circumstances.
The right to restrict processing.
The right to object to processing, including for direct marketing.
The right to data portability.
The right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.

For California residents under the CCPA, additional rights include:

The right to know the categories and specific pieces of personal information collected, disclosed, or sold.
The right to delete personal information, subject to exceptions.
The right to correct inaccurate personal information.
The right to opt-out of the sale or sharing of personal information (though we do not sell or share as defined).
The right to limit the use of sensitive personal information.
The right to non-discrimination for exercising these rights.

Similar rights may apply under other laws, such as the LGPD (e.g., confirmation of processing, access, correction, anonymization, blocking, or deletion) or PIPEDA (e.g., access and correction). To exercise any of these rights, contact us at the details provided below. We will respond to verifiable requests within the timeframe required by applicable laws (e.g., 30 days under GDPR, 45 days under CCPA). You may make up to two requests per 12-month period under CCPA for the right to know.

You may also opt out of marketing emails by following the unsubscribe link in our communications or manage cookie preferences through your browser settings. For third-party embeds like YouTube and Spotify, you can control data collection through their respective account settings or privacy tools.

If you are in the EEA or another jurisdiction with supervisory authorities, you have the right to lodge a complaint with your local authority if you believe your rights have been violated.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance functionality, remember preferences, and gather analytics, in compliance with the ePrivacy Directive and similar regulations. Essential cookies are necessary for the Website's operation, while others (e.g., for advertising or tracking interactions with embeds) require your consent. Third-party services like YouTube and Spotify may set their own cookies when you interact with their content. You can control cookies via your browser, but disabling them may limit Website features, including playback of embedded media. For full details, please refer to our separate Cookies Policy.

11. Third-Party Content and Services

Our Website may include embedded content from third-party providers, such as YouTube videos for playback and Spotify players or apps for showcasing music playlists. These embeds are provided for your convenience and to enhance your experience. When you interact with this content (e.g., playing a video or playlist), the third-party provider may collect information about your device, IP address, and usage directly. This data collection is governed by the third-party's privacy policy (e.g., Google Privacy Policy for YouTube or Spotify Privacy Policy). We recommend reviewing those policies for details on their practices. We are not responsible for the privacy practices of these third parties.

12. External Links

The Website includes clickable icons linking to our profiles on external social media platforms, including Facebook, Twitter (X), Instagram, YouTube, and TikTok. These links are provided to allow visitors to access additional content hosted on those platforms. Clicking these icons will redirect you to the respective third-party websites, where your interactions will be subject to their privacy policies and terms of service. We do not collect personal information through these links on our Website, but the third-party platforms may set cookies or collect data upon your arrival. We encourage you to review the privacy policies of these platforms for more information:

We are not responsible for the content, privacy practices, or data collection on these external sites.

13. Children's Privacy

Our Website is not intended for individuals under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children without parental consent. If we become aware of such collection, we will take steps to delete it, in compliance with laws such as the Children's Online Privacy Protection Act (COPPA) where applicable.

14. International Data Transfers

As we are based in Europe, your personal data is primarily processed within the EEA. However, some service providers (e.g., Stripe or PayPal in the US) may involve transfers outside the EEA. In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other mechanisms recognized under GDPR, LGPD, and similar laws, to protect your data.

15. Changes to This Privacy Policy

We may update this policy periodically to reflect changes in our practices or legal requirements. The updated policy will be posted on the Website with the revised effective date. We encourage you to review it regularly.

16. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Gloamed Records Email: submit@gloamed.com Website: gloamed.com

For data protection inquiries, you may also contact our Data Protection Officer (if appointed) via the above email.