Privacy Policy

This policy applies when you browse the website, contact Sonet Music, submit an application or otherwise communicate with us about potential publishing administration services.

A separate privacy notice or client agreement may apply if you become a client and use a future account or dashboard.

• Identification and contact information, including your name and email address.
• Professional information, including your role and the information you provide about yourself, your catalogue and your music.
• Links and public profile information, including Spotify and optional Instagram links.
• Correspondence, requests, feedback and records of our communications.
• Technical information that may be processed by hosting and security providers, such as IP address, browser, device, timestamps, request records and security events.
• Public music and rights information that you ask us to review.

Do not submit special-category data, confidential third-party information or personal data that you are not authorised to provide.

We collect data directly from you, from people authorised to act for a rightsholder, from public links you submit, and automatically through the technical operation and security of the website.

• Reviewing and responding to an application and taking requested steps before a possible agreement. Legal basis: Article 6(1)(b) GDPR.
• Managing correspondence, improving application handling, maintaining business records, protecting the website, preventing abuse and establishing or defending legal claims. Legal basis: legitimate interests under Article 6(1)(f) GDPR.
• Complying with legal, regulatory, tax and law-enforcement obligations. Legal basis: Article 6(1)(c) GDPR.
• Using information for another purpose where you have given valid consent, if consent is requested. Legal basis: Article 6(1)(a) GDPR.

Required application fields are necessary for a review. We cannot assess an application without them.

We use personal data to identify and communicate with applicants, assess potential suitability, review submitted public links, maintain records, answer enquiries, protect rights and security, comply with law and prepare a possible separate agreement.

We do not currently sell personal data or use application data for targeted advertising.

Data may be processed by website hosting and security providers, Supabase for secure application storage and account data, FormSubmit for email delivery and anti-spam handling, email and productivity providers, professional advisers, contractors who require access for authorised work, and public authorities where disclosure is legally required.

Providers are permitted to process data only for the relevant service and subject to applicable contractual and legal protections.

The application form is stored in Sonet's Supabase database and a notification copy is delivered through FormSubmit. FormSubmit states that submissions may be retained for up to 30 days. Do not use the form to send unreleased audio files, identification documents, payment information or highly confidential material.

Some providers may process data outside the European Economic Area. Where required, transfers will rely on an adequacy decision, approved contractual safeguards or another lawful transfer mechanism.

• Unsuccessful, withdrawn or incomplete applications: normally up to 12 months after the last contact.
• General correspondence: normally up to 24 months after the last contact.
• Accepted clients: for the duration of the relationship and the legal, accounting and claims periods applicable under the separate client agreement.
• Technical and security records: for the period reasonably required by the relevant provider and security purpose.

Information may be retained longer where required by law, a rights dispute, fraud prevention or a legal claim.

We use reasonable organisational and technical measures appropriate to the nature of the data and the current website. No internet transmission or storage system can be guaranteed completely secure.

If you believe information has been submitted incorrectly or a security issue affects your data, contact us promptly.

You are responsible for ensuring that information you provide is accurate and that you have authority to provide personal data about co-writers, representatives or other people. Where required, you must inform them about this policy.

Depending on the circumstances, you may request access, correction, deletion, restriction or portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.

We may request information needed to verify identity and authority before acting on a request. Legal exemptions may apply.

The application is only for people aged 18 or over. We do not knowingly accept applications from minors.

Applications are reviewed by people. We do not make decisions producing legal or similarly significant effects solely by automated means.

The website links to services such as Spotify and Instagram. Those services operate independently and their own privacy policies apply when you visit them.

We may update this policy to reflect changes to the website, providers, services or legal requirements. The current version and update date will be published here.

The data controller is Mike Vidziunas, operating as Sonet Music, Vilnius, Lithuania.

Privacy requests may be sent to hello@sonetmusic.com.

You may complain to the Lithuanian State Data Protection Inspectorate at vdai.lrv.lt, L. Sapiegos str. 17, LT-10312 Vilnius, Lithuania.