GDPR

Your rights under the GDPR

If you're located in the European Union, EEA or United Kingdom, the General Data Protection Regulation gives you enforceable rights over the personal data LUCY Sounds holds about you. These rights apply whether you're a free Academy user or a paying PRO or Label subscriber, and exercising them is always free.

Access — get a copy of the personal data we hold on you. Rectification — correct data that's inaccurate or incomplete. Erasure — request deletion ('the right to be forgotten'). Portability — receive your data in a portable, machine-readable format. Object & restrict — limit or object to certain processing

What data we process and why

We process only the data we need to run your distribution account: things like your name and contact details, login credentials, your releases and metadata, and the payout information required to send you your royalties. Each use has a clear legal basis, from performing your contract to meeting legal and tax obligations.

Account and identity data to operate your account. Release and royalty data to distribute and pay you. Limited usage data to keep the apps secure and working

How to make a GDPR request

Submit any data-rights request through our Help Center. We'll verify your identity to protect your account, then respond within one month as the GDPR requires — extendable only for genuinely complex requests, in which case we'll tell you why. There's no charge for a standard request.

Send your request via the Help Center. We verify it's really you before acting. We respond within one month, free of charge

Transfers, retention and complaints

Where data moves outside the EU/UK, we rely on approved safeguards such as Standard Contractual Clauses. We keep your data only as long as needed for your account and legal obligations, then delete or anonymize it. If you're unhappy with how we've handled a request, you can complain to your local supervisory authority.

Approved safeguards for international transfers. Data kept only as long as legally and operationally necessary. Right to lodge a complaint with your data protection authority

Understanding Your GDPR Rights as an Artist

The General Data Protection Regulation (GDPR) is a comprehensive data privacy law that empowers individuals in the EU and UK to take control of their personal data. For independent artists using LUCY Sounds, this means you have specific rights concerning how your data is collected, processed, and stored. One of the key aspects of GDPR is the right to access your data. This allows you to know what personal information is held about you by LUCY, how it is used, and for what purpose. For artists, understanding these rights is crucial, as it directly affects your ability to manage your music distribution and marketing strategies effectively. Moreover, the right to rectification enables you to correct inaccurate or incomplete data. As an independent artist, ensuring your metadata is accurate is vital for maintaining your reputation and visibility on streaming platforms. If you notice any discrepancies in your data, you can request corrections, ensuring that your artistic identity is accurately represented. Additionally, the right to erasure, commonly referred to as the 'right to be forgotten,' allows you to request the deletion of your personal data, particularly if it is no longer necessary for the purposes for which it was collected or if you withdraw your consent. This can be particularly useful if you decide to discontinue using LUCY Sounds or if you want to remove any outdated information from the platform. In summary, understanding your GDPR rights not only empowers you as a creator but also enhances your ability to manage your music career effectively. By leveraging these rights, you can ensure that your personal data is handled transparently and securely, allowing you to focus on what you do best—creating music.

Know your rights: access, rectification, and erasure.. Ensure your metadata is accurate to maintain your visibility.. Request deletion of data when it's no longer needed.

Navigating Data Access Requests with LUCY

Making a GDPR data access request with LUCY Sounds is a straightforward process designed to ensure transparency and empower independent artists like you. To initiate a request, simply log into your LUCY account and navigate to the privacy settings section. There, you will find an option to request your personal data. It is essential to clearly specify the type of data you wish to access, whether it’s your account information, transaction history, or any other personal details stored within the platform. This clarity will help expedite the process and ensure you receive the information you need without unnecessary delays. Once your request is submitted, LUCY is legally obligated to respond within one month. It’s important to note that if your request is particularly complex or numerous, this period may be extended by an additional two months, but you will be informed of any such delay. Upon receiving your data, you should review it carefully to ensure it aligns with your records and intentions. If you find any inaccuracies, you have the right to rectify this information immediately, further enhancing the integrity of your data. In some cases, you may want to request data in a specific format, especially if you're planning to use it for other platforms or services. LUCY accommodates such requests, allowing you to receive your information in a structured, commonly used format, facilitating easier data migration or analysis. By understanding how to navigate the data access request process, you can take full advantage of your rights under GDPR and maintain control over your personal information.

Initiate a request through your LUCY account settings.. Specify the type of data you want for quicker responses.. Review your data upon receipt to ensure accuracy.

The Right to Erasure: Deleting Your Data with LUCY

The right to erasure, or the 'right to be forgotten,' is a significant provision under the GDPR that allows you, as an independent artist, to request the deletion of your personal data from LUCY Sounds. This right is particularly relevant if you decide to stop using the platform or if you believe your data is no longer necessary for the purposes for which it was collected. To exercise this right, you can submit your request directly through the privacy settings in your account or contact LUCY's support team for assistance. When making your request, it’s beneficial to include details such as your account information and any specific data you wish to be erased. This will help LUCY process your request more efficiently. However, it’s important to note that certain data may not be eligible for deletion, especially if it is required for compliance with legal obligations or if it relates to ongoing transactions. For example, data necessary for financial reporting or tax purposes may need to be retained for a certain period. Therefore, understanding the nuances of this right is crucial for effective data management. If your request for erasure is approved, LUCY will take the necessary steps to remove your data from their systems. You should receive confirmation once this process is complete. This not only protects your privacy but also reinforces your control over your digital footprint. Regularly reviewing your data and understanding your rights under GDPR can help you make informed decisions about your presence on the platform, ensuring you remain in charge of your artistic identity and personal information.

Request deletion through your account or support.. Include account details for efficient processing.. Understand that some data may need to be retained.

Frequently Asked Questions

How do I request a copy of my data under GDPR?
Submit a data access request through our Help Center. We'll verify your identity to protect your account, then provide a copy of the personal data we hold about you within one month, free of charge. For genuinely complex requests we may extend the timeline, but we'll always tell you why and keep you informed.
Can I have LUCY delete all my personal data?
Yes — under the GDPR you have the right to erasure, often called the right to be forgotten. Send the request through our Help Center and we'll delete the personal data we hold, subject to limited exceptions where we're legally required to keep certain records, such as tax and royalty-payment information, for a defined retention period.
Who can exercise GDPR rights with LUCY Sounds?
Anyone located in the European Union, the EEA, or the United Kingdom can exercise GDPR (and UK GDPR) rights over the personal data we hold. These rights apply equally to free Academy users and paying PRO or Label subscribers, and using them is always free. Identity verification is the only step we require before we act.
How long does LUCY take to respond to a GDPR request?
We respond to standard GDPR requests within one month of verifying your identity, as the regulation requires, at no cost to you. If a request is especially complex or you've made several, we may extend the period by up to two further months — but we'll notify you of the extension and the reason within that first month.
What should I do if I believe my data is incorrect?
If you believe your data is incorrect, you have the right to request rectification under GDPR. Log into your LUCY account and navigate to the privacy settings. From there, you can specify the incorrect data and submit a request for correction. LUCY is obligated to address your request and ensure your information is accurate, allowing you to maintain control over your artistic identity.
Can I request my data in a specific format?
Yes, you can request your data in a specific format when making a GDPR data access request. LUCY is committed to providing your information in a structured, commonly used format, which can be particularly helpful if you plan to use that data with other services or platforms. Be sure to specify your preferred format when submitting your request.
What happens if my GDPR request is denied?
If your GDPR request is denied, LUCY will provide you with an explanation detailing the reasons for the denial. You have the right to contest this decision, and you can also escalate the matter to relevant supervisory authorities if you believe your rights under GDPR are not being respected. Understanding your rights will empower you to take appropriate action.