Privacy Policy.

1. Introduction

Welcome to WBBT Records ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (wbbt.net), use our distribution platform (app.wbbt.net), and tell you about your privacy rights and how the law protects you under GDPR (EU/UK), CCPA (California) and other applicable regulations.

2. Data We Collect

We may collect, use, store and transfer different kinds of personal data about you, grouped as follows:

• Identity Data: first name, last name, username, artist stage name, date of birth.
• Contact Data: email address, telephone number, billing address.
• Financial Data: bank account details, PayPal email, payment history (encrypted at rest).
• Technical Data: IP address, browser type and version, time zone, location, browser plug-in types and versions, operating system and device identifiers.
• Usage Data: information about how you use our website, distribution dashboard, and listening behaviour data shared with us by DSPs (Spotify, Apple Music, etc.).
• Music Catalogue Data: ISRC codes, UPC barcodes, audio masters, cover artwork, songwriter splits and copyright assertions you provide.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the distribution contract you've entered into with us.
• Where it is necessary for our legitimate interests (such as fraud detection, royalty collection, and platform improvement) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation (HMRC tax reporting, PPL UK royalty distribution, anti-money-laundering checks).
• Where you have given clear consent (marketing emails, public profile features, social account linking).

4. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. We use TLS 1.3 encryption for all data in transit, AES-256 encryption at rest for sensitive data, and limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

5. Third Parties & Data Sharing

We share data with the following infrastructure partners strictly for service delivery:

• AudioSalad, distribution pipeline (track metadata, ISRC codes, artwork)
• Sonovy, royalty accounting (DSP earnings reports, payment data)
• PPL UK, neighbouring rights collection (work registrations)
• Spotify, Apple Music, YouTube, Beatport and other DSPs (audio masters, metadata)
• Stripe / Wise, payment processing (billing data)
• Cloudflare, CDN and security (anonymized request logs)

6. Your Rights

To exercise any of these rights, email [email protected]. We respond within 30 days.

Under GDPR and applicable laws you have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request erasure of your data ('right to be forgotten')
• Object to processing of your personal data
• Request restriction of processing
• Request transfer of your data (data portability)
• Withdraw consent at any time

To exercise any of these rights, email [email protected]. We respond within 30 days.

7. Cookies

We use essential cookies for authentication and basic functionality. Optional analytics cookies (Google Analytics) and personalization cookies require your explicit consent via our cookie banner.

8. Contact

If you have any questions about this privacy policy or our privacy practices, please contact us at [email protected] or write to: WBBT GROUP LTD, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.