GDPR Compliance

1. Scope

This page explains how we handle personal data under the EU General Data Protection Regulation and the UK GDPR. It applies to you if you are located in the European Union, the wider European Economic Area, or the United Kingdom.

2. Controller and Roles

For account and payout data, VM345 Distribution acts as the data controller. For the recordings and metadata you upload for delivery, we act as a processor carrying out your distribution instructions.

3. Lawful Bases for Processing

Contract. Operating your account, delivering releases to stores, and paying royalties.

Legal obligation. Retaining tax, accounting, and anti-fraud records.

Legitimate interests. Securing the platform, preventing fraudulent uploads, and improving the service — balanced against your rights and freedoms.

Consent. Optional analytics and marketing communications, which you may withdraw at any time.

4. Your Rights

You have the right to access your data; to correct inaccurate data; to erasure where we have no overriding obligation to retain it; to restrict or object to processing; to data portability in a machine-readable format; and to withdraw consent where consent is the basis for processing.

Exercising these rights is free, and we respond within one month. We may extend that by two further months for complex requests and will tell you if we do.

5. International Transfers

Our infrastructure and the digital service providers we deliver to operate globally, so your data may be transferred outside the EEA and UK. Where it is, we rely on adequacy decisions or Standard Contractual Clauses with appropriate safeguards.

6. Retention

We keep account data for as long as your account is open. After closure we retain only what is required for financial, tax, and rights-history obligations, then delete or anonymise the rest.

7. Complaints

You may lodge a complaint with your national supervisory authority — the Information Commissioner’s Office in the UK, or your local Data Protection Authority in the EEA. We would ask you to raise it with us first so we can try to resolve it.

To make a data subject request, contact privacy@visionmedia345.com with the subject “GDPR Request”. See also our Privacy Policy and Cookie Policy.