Privacy Policy – Adastra Music Group

Adastra Music Group ("AMG", "we", "us", or "our") is operated by ADASTRA MUSIC, registered under the Companies Commission of Malaysia (SSM) with Registration No.: 202503330570 (003801097-A). We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, visit our website, or join our waitlist.

Effective Date: 4 Disember 2025

Applicable Laws: This Privacy Policy is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable data protection regulations.

We collect different types of information for various purposes to provide and improve our services:

We use collected information for legitimate business purposes, including:

• Managing waitlist subscriptions and sending launch notifications
• Contacting artists about platform updates and opportunities
• Creating and managing user accounts when the platform launches
• Improving platform features and user experience
• Processing music distribution to streaming platforms
• Fraud prevention, security monitoring, and legal compliance
• Sending service-related announcements and updates

Third-Party Services We Use:

• Formspree: For form submissions and email collection
• Cloudflare: For security, DDoS protection, and CDN services
• Email Providers: For notifications and communication
• Payment Gateways: For future subscription payments (when platform launches)
• Streaming Platforms: For music distribution (Spotify, Apple Music, etc.)

Data Sharing Circumstances: We only share data when necessary to operate our platform, comply with legal obligations, or protect our rights and users.

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for basic website functionality
• Analytics Cookies: Optional cookies that help us understand how visitors use our site
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling cookies may affect website functionality.

We retain personal data only as long as necessary for the purposes collected:

• Waitlist Submissions: 24 months from submission date, unless you request earlier deletion
• Account Data: For the duration of your account activity plus 12 months
• Legal Requirements: As required by law, regulation, or legal proceedings
• Analytics Data: Aggregated and anonymized after 36 months

We implement industry-standard security measures to protect your data:

• Encryption: HTTPS/TLS for data in transit
• Content Security Policy (CSP): Protection against XSS attacks
• Restricted Access: Limited server access to authorized personnel only
• Cloudflare Protection: DDoS mitigation and web application firewall
• Regular Audits: Security assessments and vulnerability testing
• Data Minimization: Collecting only necessary information

Under the PDPA Malaysia, you have the following rights regarding your personal data:

• Access Right: Request access to your personal data we hold
• Correction Right: Request correction of inaccurate or incomplete data
• Deletion Right: Request deletion of your personal data
• Withdrawal of Consent: Withdraw consent for data processing
• Data Portability: Request transfer of your data to another organization
• Restriction of Processing: Request restriction of how we process your data

To exercise these rights, contact us at support@adastramusicgroup.com with "PDPA Request" in the subject line.

Our services are not directed to individuals under 13 years of age.

• We do not knowingly collect personal data from children under 13
• If we become aware that we have collected data from a child under 13, we will delete it immediately
• For young artists under 18, we require parental consent for platform usage when we launch