1 Introduction

Adastra Music Group ("AMG", "we", "us", or "our") is operated by ADASTRA MUSIC, registered under the Companies Commission of Malaysia (SSM) with Registration No.: 202503330570 (003801097-A). We value your privacy and are committed to protecting your personal data.

This Privacy Policy applies to the Adastra Music Group website, dashboard, and all related digital platforms.

Applicable Laws: This Privacy Policy is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable data protection regulations.

Data Controller & Processor: Adastra Music acts as a data controller for user account information and as a data processor for artist content submitted for distribution to third-party platforms.

2 Information We Collect

We collect different types of information to provide and improve our services:

2.1 Personal Information

  • Full Name: For identification and communication
  • Email Address: For account creation and notifications
  • Artist Type: Independent artist, label, producer, etc.
  • Submitted Messages: Feedback, questions, or comments

2.2 Technical Information

  • IP Address: For security and geographic analysis
  • Browser & Device Data: Device type, browser version, OS
  • Cookies: Session management and preferences
  • Usage Analytics: Page views, time spent, navigation

2.3 Uploaded Content

When our platform launches, we may collect:

  • Music Files: Audio tracks for distribution
  • Artwork: Album covers and promotional images
  • Metadata: Song titles, artist names, genres, ISRC
  • Distribution Info: Platform selections, release dates

Important: Artists are responsible for ensuring they have the necessary rights to upload and distribute content provided to AMG.

3 How We Use Your Information

We use collected information for legitimate business purposes:

  • Managing waitlist subscriptions and launch notifications
  • Contacting artists about platform updates and opportunities
  • Creating and managing user accounts
  • Improving platform features and user experience
  • Processing music distribution to streaming platforms
  • Fraud prevention, security monitoring, and legal compliance
  • Sending service-related announcements and updates

4 Data Sharing & Third Parties

We Do Not Sell Your Data

Adastra Music Group does not sell, rent, or trade your personal information to third parties for marketing purposes.

Third-Party Services We Use:

  • Formspree: Form submissions and email collection
  • Cloudflare: Security, DDoS protection, CDN
  • Email Providers: Notifications and communication
  • Payment Gateways: Future subscription payments
  • Streaming Platforms: Music distribution

5 Cookies & Tracking

We use cookies to enhance your experience:

  • Essential Cookies: Required for basic functionality
  • Analytics Cookies: Help us understand site usage
  • Preference Cookies: Remember your settings

You can control cookies through your browser settings. Where required, cookie consent will be obtained via a cookie banner before non-essential cookies are placed.

6 Data Retention

  • Waitlist Submissions: 24 months from submission
  • Account Data: Duration of activity plus 12 months
  • Legal Requirements: As required by law
  • Analytics Data: Aggregated after 36 months

7 Security Measures

  • Encryption: HTTPS/TLS for data in transit
  • CSP Protection: Against XSS attacks
  • Restricted Access: Authorized personnel only
  • Cloudflare Protection: DDoS mitigation and WAF
  • Regular Audits: Security assessments
  • Data Minimization: Collect only what's necessary

8 Your Rights (PDPA Malaysia)

Under PDPA Malaysia, you have the following rights:

  • Access Right: Request access to your data
  • Correction Right: Request correction of data
  • Deletion Right: Request deletion of your data
  • Withdrawal of Consent: Withdraw data processing consent
  • Data Portability: Transfer data to another organization
  • Restriction: Limit how we process your data

To exercise these rights, contact us at pdpa@adastramusicgroup.com with "PDPA Request" in the subject line. We will respond to PDPA requests within a reasonable timeframe, typically within 21 business days.

9 Children's Privacy

Our services are not directed to individuals under 13 years of age.

  • We do not knowingly collect data from children under 13
  • If we discover we have collected such data, we delete it immediately
  • For artists under 18, we require parental consent when platform launches

10 Legal Basis for Processing

Under PDPA Malaysia, we process your personal data based on the following legal grounds:

10.1 Consent

You actively choose to submit your information through our waitlist, contact forms, or registration. We rely on your explicit consent for marketing communications and non-essential processing.

10.2 Performance of Contract

When you use our music distribution services, we process data necessary to fulfill our agreement with you, including distribution to platforms, royalty tracking, and account management.

10.3 Legal Obligation

We process data as required by Malaysian law, tax regulations, anti-money laundering (AML) requirements, and intellectual property compliance.

10.4 Legitimate Interests

We process data to protect against fraud, maintain platform security, prevent abuse, improve our services, and conduct internal analytics. We balance these interests against your rights.

11 Data Breach Notification

In the unlikely event of a data breach, AMG is committed to transparency and prompt action:

  • Investigation: We will immediately investigate the breach
  • Mitigation: We will take steps to prevent further unauthorized access
  • Notification: We will notify affected users where required by law, without unreasonable delay
  • Cooperation: We will cooperate with relevant authorities and regulators
  • Transparency: We will provide details about the breach, impact, and remedial measures

Our Commitment

This policy demonstrates AMG's commitment to data protection and good faith responsibility toward our users.

12 International Data Transfers

As a music distribution platform, AMG necessarily transfers data across international borders:

12.1 Where Your Data Goes

  • Cloudflare: Global CDN and security infrastructure
  • Streaming Platforms: Spotify (Sweden/USA), Apple Music (USA), YouTube (USA), KKBOX (Taiwan), and others worldwide
  • Payment Processors: May be located in various countries
  • Analytics Services: For platform performance monitoring

12.2 Safeguards

We ensure adequate safeguards for international transfers:

  • All transfers are encrypted in transit (HTTPS/TLS)
  • Partner companies maintain comparable data protection standards
  • Compliance with Malaysian PDPA requirements
  • Standard contractual clauses in place with third parties

13 Automated Processing & AI Tools

AMG may use automated processing and AI tools to enhance your experience:

  • Playlist Recommendations: Algorithmic suggestions based on your preferences
  • Content ID & Rights Matching: Automated identification of music rights
  • Fraud Detection: Machine learning to prevent abuse and unauthorized access
  • Analytics & Reporting: Automated dashboards and performance metrics
  • Email Optimization: Automated timing and personalization of communications

Your Rights

No decision producing legal effects (such as account suspension or royalty disputes) will be made solely by automated processing without human review. You have the right to request human review of any automated decision affecting your account.

14 Marketing Communications

Your Communication Preferences:

  • Service Emails: We will always send critical service updates (account security, payment notifications, platform changes)
  • Marketing Emails: You may opt out of promotional content, newsletters, and non-essential updates
  • Opt-Out Method: Click "Unsubscribe" in any email or contact us at support@adastramusicgroup.com
  • Preference Center: Manage your communication preferences in your account dashboard (coming at launch)

PDPA Compliance

We comply with PDPA Malaysia by requiring explicit consent for marketing messages and providing easy opt-out mechanisms. Opting out of marketing does not affect your service access.

15 Policy Updates & Changes

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors:

  • Changes Effective: Updated policies take effect upon posting to this page
  • Notification: We will notify users of material changes via email or prominent website notice
  • Your Acceptance: Continued use of AMG services after policy updates constitutes your acceptance of the updated terms
  • Previous Versions: Archive versions available upon request

Last Updated

December 15, 2025 - Added comprehensive PDPA-compliant sections for data protection and user rights.

16 Jurisdiction & Dispute Resolution

Governing Law: This Privacy Policy is governed by and construed in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable Malaysian data protection laws.

Data Protection Authority

If you believe your data rights have been violated, you may file a complaint with the Malaysian Personal Data Commissioner's Office (PDPC) in addition to contacting us directly.

  • PDPC Contact: For formal complaints regarding data protection violations
  • Amicable Resolution: We encourage users to contact us first for informal resolution
  • Jurisdiction: Any disputes shall be handled under Malaysian law

17 Contact Information

Get in Touch

Adastra Music Group
support@adastramusicgroup.com
SSM: 202503330570 (003801097-A)
PDPA Officer: pdpa@adastramusicgroup.com