Privacy Policy

1. Who we are

Córdoba Music Group Ltd. (company number 13563900), registered at Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset BH16 6FA, United Kingdom, is responsible for the personal information described in this notice. Our ICO registration reference is ZB253373.

This notice covers this public website and its contact form. A separate notice may apply to information collected through other CMG services or agreements.

2. Information we collect

When you contact us, we receive the information you choose to submit: your name, email, role, company or label, country, project and catalogue details, music or social links, dates, goals, rights claims and message, as applicable to the type of enquiry. We also receive your selected language, consent confirmation and a security-verification token. Please do not include sensitive personal information unless it is necessary for your enquiry.

When you use the website, our hosting and security services may process technical information such as IP address, device or browser details, request times and pages visited. If web analytics is enabled, we receive aggregated usage information. Your browser may also store your language preference locally.

• Information you provide directly in the contact form.
• Technical data generated when you visit the site or complete anti-spam verification.
• Information you provide later as part of a business relationship, subject to any applicable separate notice or agreement.

3. Why we use your information

We use personal information to receive and answer enquiries, assess potential projects or business relationships, communicate with you, maintain website functionality, measure site usage where enabled, prevent spam and abuse, protect our services and meet legal obligations. We do not sell contact-form submissions.

4. Legal bases

Depending on the circumstances, we rely on steps requested before entering a contract, our legitimate interests in responding to enquiries and securing and improving this site, compliance with legal obligations, or your consent where required. You may withdraw consent at any time, without affecting processing that took place before withdrawal. Providing information needed to answer your enquiry is optional, but we cannot respond without a way to contact you.

5. Who receives information

Authorised CMG staff and service providers involved in website hosting, security, analytics (if enabled) and enquiry delivery may access information only as needed for those purposes. The form sends your submission directly to our backend; Cloudflare Turnstile checks the verification token to help block spam. We may also disclose information where required by law, to protect rights or safety, or in connection with a business reorganisation subject to applicable safeguards.

Third-party websites linked from this site have their own privacy notices; this notice does not govern their processing.

6. How long we keep it

We keep enquiries for as long as necessary to respond, manage any resulting relationship, resolve disputes and meet legal requirements, then delete or anonymise them. Technical and security records are kept only as long as needed for their operational and security purposes. Retention may differ if you become a customer or a legal preservation obligation applies.

7. International transfers

Our service providers or partners may process information outside the United Kingdom. Where a transfer requires protection under applicable data protection law, we use an appropriate transfer mechanism and safeguards. Contact us if you would like more information about safeguards relevant to your information.

8. Security

We use technical and organisational measures appropriate to the information we handle, including restricted access and transport encryption. No internet transmission or storage system is completely secure. If a personal-data breach occurs, we will notify affected people and authorities where the law requires it.

9. Cookies and similar technologies

This site uses local browser storage to remember your language choice. Cloudflare Turnstile, loaded on the contact form, may use cookies or similar signals to detect abuse. If enabled, Cloudflare Web Analytics provides cookieless, aggregated traffic measurements. We do not use this site to set advertising cookies. Browser settings can be used to manage cookies and local storage.

In the CMG app, necessary cookies and browser storage support authentication, security and app functionality. Where configured, the Sentry SDK sends application errors, technical context and sampled performance traces to GlitchTip to help us diagnose bugs and slow operations. Performance traces record page loads, navigation and request timings, including related API and database operations. Reports may include your internal account ID; we do not deliberately attach your name or email. Session replay remains disabled. These app diagnostics disclosures also apply beyond this public website. For privacy questions or requests, contact us using the details below.

We use Cloudflare Turnstile to protect our contact form and CMG sign-in against bots and abuse, including when verification runs invisibly. Turnstile processes technical signals such as your IP address, TLS fingerprint, browser User-Agent, and the sitekey and associated origin. Cloudflare uses these signals to detect and block bots and to improve Turnstile’s bot detection capabilities. These Turnstile disclosures also apply to security verification on the CMG sign-in page. Further information is provided in Cloudflare’s Turnstile Privacy Addendum and Privacy Policy.

Cloudflare Turnstile Privacy Addendum ↗

Cloudflare Privacy Policy ↗

10. Your rights

Subject to applicable law, you may request access to, correction or deletion of your personal information, restriction of or objection to processing, and portability where applicable. You may also withdraw consent when processing relies on it. To exercise your rights, use the contact form below and select a general enquiry; we may need to verify your identity before responding.

If you are unhappy with our response, you can complain to the UK Information Commissioner’s Office (ICO) or another competent data protection authority.

Information Commissioner’s Office ↗

11. Children and changes to this notice

This website is not intended for children to submit personal information without appropriate permission from a parent or guardian. We may update this notice to reflect changes in our practices or legal obligations. The date above shows when it was last updated.