Privacy Policy
Last updated: January 2026
Introduction
Obligated Records ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you use our website and services, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
Obligated Records is the data controller for personal data collected through this website. For any privacy-related enquiries, contact us at: info@obligatedrecords.com
What Data We Collect
Mailing List Subscriptions
When you subscribe to our mailing list, we collect:
- Email address
- Date and time of subscription
- IP address (for consent verification)
Demo Submissions
When you submit a demo to our label, we collect:
- Name and artist name
- Email address
- Location
- Biography
- Social media links
- Audio files you upload
- Date and time of submission
How We Use Your Data
Mailing List
We use your email address to send you updates about new releases, events, merchandise drops, and label news. We will only send marketing communications with your explicit consent.
Demo Submissions
We use demo submission data to review your music for potential release on Obligated Records. Your audio files and contact information are reviewed by our A&R team. We may contact you via email regarding your submission.
Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: For mailing list subscriptions and marketing communications
- Legitimate Interest: For reviewing demo submissions with a view to potential business relationship
- Contract: Where necessary to perform any agreement with you
Data Retention
Mailing List
We retain your email address until you unsubscribe. You can unsubscribe at any time using the link in any email we send, or by contacting us directly.
Demo Submissions
Demo submissions are retained for up to 12 months to allow adequate review time. After this period, submissions not progressing to release are securely deleted. If you wish to have your submission deleted sooner, contact us.
Your Rights
Under UK GDPR, you have the following rights:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data
- Right to Restrict Processing: Request limitation of processing
- Right to Data Portability: Request transfer of your data
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time
To exercise any of these rights, contact us at info@obligatedrecords.com
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes secure storage of audio files and encrypted transmission of data.
Third-Party Services
We may use third-party services to help operate our website and communications. These may include email service providers and hosting services. We ensure any third parties comply with data protection requirements and only process data on our behalf.
Cookies
This website uses essential cookies required for basic functionality. We do not use tracking or advertising cookies. Third-party embeds (such as Bandcamp and SoundCloud players) may set their own cookies according to their privacy policies.
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.
Contact Us
If you have any questions about this privacy policy or our data practices, contact us at: info@obligatedrecords.com
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated: ico.org.uk