Privacy Policy
This policy explains what personal information Rising Music Hub collects, why we hold it, who we share it with and the control you have over it. We keep it in plain language on purpose.
1. Who we are
Rising Music Hub operates this platform and is the data controller for the personal information described in this policy. We are based in United Kingdom, and we handle personal data in accordance with the UK GDPR and the Data Protection Act 2018.
If you have any question about how your information is handled, write to hello@richmusichub.com.
2. Information we collect
We collect only what the platform needs to run. In practice that falls into a handful of categories.
- Account details
- Your name, email address, password (stored only as a secure hash) and any profile information you choose to add, such as a display name, biography or avatar.
- Order and billing data
- What you bought, when, the amount, the currency, your invoice details and a reference from our payment provider. We never receive or store your full card number.
- Subscription data
- Your plan, billing cycle, renewal date, status and how much of your download allowance you have used.
- Usage data
- Tracks you stream, preview, like, add to a playlist or download, and the licence certificates issued to you. This drives your library, your recently played list and the public charts.
- Communications
- Messages you send through the contact form or by email, and your newsletter subscription status if you sign up.
- Artist data
- For artist accounts: your verification details, the releases you submit, your royalty balances and the payout details you give us.
- Technical data
- IP address, browser and device type, and log records of requests to the platform — used for security, abuse prevention and diagnosing faults.
Where a field is optional, leaving it blank does not affect your access to the platform.
3. How we use it, and on what legal basis
Under the UK GDPR we must have a lawful basis for each use of your data. Ours are:
- Performance of a contract — creating and running your account, taking payment, issuing licences and download links, managing your subscription and allowance, and paying artist royalties.
- Legitimate interests — keeping the platform secure, preventing fraud and abuse of download allowances, understanding which parts of the catalogue are used so we can improve it, and compiling the public charts from aggregate play and download counts.
- Consent — sending you the newsletter or other marketing email, and setting any non-essential cookie. You can withdraw consent at any time.
- Legal obligation — keeping accounting and tax records, and responding to lawful requests from authorities.
We do not sell your personal information, and we do not use it to make automated decisions that produce legal or similarly significant effects on you.
5. Who we share it with
We share personal data only with service providers who process it on our behalf, under contract and only for the purposes we set:
- Stripe and PayPal — payment processing, subscription billing and refunds. They receive your payment details directly; we receive a confirmation and a reference.
- Our hosting and storage providers — running the platform and storing audio, artwork and backups.
- Our email provider — sending transactional email such as receipts, download notifications and password resets, and the newsletter if you subscribe.
Where an artist’s track is purchased, the artist sees the sale and the royalty it generated. They do not see your name, email address or payment details.
We may also disclose information where we are legally required to, or to establish or defend legal claims. If the business is ever sold or restructured, personal data may transfer to the new owner under the same protections.
6. International transfers
Some of our providers operate outside the UK. Where personal data is transferred abroad, we rely on UK adequacy regulations or on the International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses), so that your data keeps an equivalent level of protection.
7. How long we keep it
- Account data
- For as long as your account is open, and then up to 12 months after closure in case you return or a dispute arises.
- Orders and invoices
- Six years from the end of the relevant financial year, as required by UK tax law.
- Licence records
- Kept for as long as the licence is capable of being relied on, so we can evidence your right to use a track.
- Usage and log data
- Typically 12 months, after which it is deleted or reduced to aggregate statistics that no longer identify you.
- Marketing data
- Until you unsubscribe, plus a suppression record so we do not contact you again by mistake.
8. How we protect it
Traffic to the platform is encrypted in transit. Passwords are stored as one-way hashes and are never readable by us or recoverable by support. Master audio files are held on private storage and released only through signed links that expire, so a shared URL stops working.
Access to production data is limited to the people who need it, and administrative actions are logged. No system is perfectly secure, but if a breach ever affects your rights we will notify you and the Information Commissioner’s Office as the law requires.
9. Your rights
You have the right to:
- Access a copy of the personal data we hold about you;
- Rectify anything inaccurate or incomplete;
- Erase your data where we no longer have a reason to keep it;
- Restrict or object to processing based on our legitimate interests;
- Port the data you gave us to another provider in a machine-readable format;
- Withdraw consent at any time, for anything we do on that basis.
Much of this is available directly in your account: your profile, purchase history, download library and subscription can all be viewed and updated there. For anything else, email hello@richmusichub.com — we respond within one month, free of charge.
Erasure is not absolute: where we are legally required to keep a record — an invoice, for example — we retain the minimum needed and remove the rest.
10. Marketing choices
We send marketing email only if you have asked for it. Every such email has an unsubscribe link, and unsubscribing takes effect immediately.
Transactional messages are different: receipts, licence certificates, download notifications, password resets and important account or billing notices are part of the service, and you will continue to receive them while your account is open.
11. Artists and payouts
If you register as an artist, we additionally process the verification details you supply, your submitted releases and the payout details needed to pay your royalties. Payout information is used solely to make payments to you and to satisfy our accounting and tax obligations.
Your public artist profile — display name, biography, image and released tracks — is visible to everyone by design. Only publish there what you are happy to make public.
12. Children
The platform is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal information, contact us and we will delete it.
13. Changes to this policy
We update this policy when our processing changes. The current version and its effective date are always shown at the top of this page, and we will tell you by email before any change that materially affects your rights takes effect.
14. Contact and complaints
For any privacy question or to exercise a right, contact hello@richmusichub.com or use the contact form. We typically respond within 1–2 working days.
If you are unhappy with our response, you can complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
See also our Terms & Conditions.