1. Who is responsible for your data
Loopsbox B.V. (“Loopsbox”, “we”, “us” or “our”) is responsible for personal data processed through the Loopsbox website and general platform, unless a specific service or agreement states otherwise. Loopsbox is a Dutch music company operating music distribution, record-label and music-publishing activities, together with related catalog, rights and royalty administration.
For privacy questions or requests, contact support@loopsbox.com. Our registered address is Karl Weisbardstraat 181, 3015 GM Rotterdam, the Netherlands (not a visiting address).
2. Personal data we process
The information we process depends on how you use Loopsbox. It may include:
- Access-request data: name, email address, applicant type and request status.
- Account and profile data: name, email, login details, account role, artist or label profile, contact details and preferences.
- Business and address data: organisation or label information, address, postal code, country, company details and related account administration.
- Catalog and release data: artist names, contributors, credits, metadata, identifiers, artwork, audio, ownership information and rights-related declarations.
- Support and communications: messages, requests, support history and information you choose to send us.
- Financial and payout administration: royalty, statement, transaction and payout-related information where those services are available.
- Verification and compliance information: information reasonably required for identity, business, payment, anti-fraud, rights or regulatory checks where applicable.
- Technical information: IP address, browser/device information, security logs, timestamps and similar technical records needed to operate and protect the service.
Most personal data comes directly from you. Contributor information may also be provided by an account holder acting for a release, and reporting or transaction data may be received from service providers or music platforms involved in a service you request.
3. Why we process personal data
We process personal data only where we have a lawful basis. Depending on the context, we use data to:
- review access requests and create or administer accounts;
- provide requested platform, catalog, distribution, reporting, royalty or support services;
- perform contracts and take steps requested before entering into a contract;
- verify information, prevent fraud, protect rights and secure the platform;
- meet accounting, tax, legal, sanctions, payment or other compliance obligations where applicable;
- communicate about service operation, support, security and material changes;
- improve reliability and understand how the service is used where this is compatible with applicable privacy law.
Our legal bases may include performance of a contract, steps taken at your request before entering into a contract, compliance with legal obligations, our legitimate interests in operating and protecting Loopsbox, and consent where consent is required.
The current invitation workflow does not make access decisions solely by automated processing that produces legal or similarly significant effects.
4. Catalog, releases and contributor information
Music metadata can contain information about artists, writers, producers, performers, rights owners and other contributors. If you submit personal data about another person, you are responsible for having a valid basis to provide that information and for giving any notices required by law.
Where you ask Loopsbox to provide distribution or related services, relevant release and contributor information may be shared with distribution infrastructure providers, music services, rights-management partners or other recipients necessary to carry out the requested service.
5. Verification, financial administration and compliance
Depending on the services you use, we may need additional information to verify an individual, business, rights relationship or payment destination. We aim to collect only what is reasonably necessary for the relevant check.
Some payment, payout or identity checks may be performed by specialised third-party providers acting under their own legal obligations or on our behalf. We do not require every visitor or every account to provide the same verification information.
6. Technical data and cookies
Loopsbox uses strictly necessary cookies or similar storage where needed to keep sessions secure, remember authentication state, operate essential website functions and remember basic interface preferences such as whether you have dismissed our cookie notice. We may also process server and security logs to prevent abuse and diagnose technical problems.
If we introduce non-essential analytics, advertising or similar tracking that requires consent, we will provide the appropriate notice and controls before using it where required by law.
8. International data transfers
Some service providers or music platforms may process data outside the European Economic Area. Where European data-protection law requires safeguards, we use an applicable adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism.
9. How long we keep data
We retain personal data for as long as needed for the purpose for which it was collected, including to provide an account or service, maintain security and audit records, resolve disputes, administer royalties or statements, and comply with legal, tax or accounting obligations.
Retention periods can differ by data type. When data is no longer reasonably needed, we delete or anonymise it unless a legal obligation or legitimate need requires continued retention.
10. Security
We use organisational and technical measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. No online service can guarantee absolute security, so users should also protect their credentials and notify us of suspected account compromise.
11. Your privacy rights
Depending on the law that applies to you, you may have rights to access, correct, erase, restrict or object to processing of your personal data, request portability, and withdraw consent where processing is based on consent.
You also have the right to lodge a complaint with a competent data-protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens. Exercising a privacy right will not affect processing that was already lawful before the request or withdrawal.
12. Children
Loopsbox is intended for professional music distribution and related business use. We do not knowingly invite children to create accounts independently where parental or guardian consent would be required by applicable law.
13. Changes to this policy
We may update this Privacy Policy when our services, providers or legal obligations change. The current version will be published on this page with its latest update date. Where required, we will provide additional notice of material changes.
14. Contact
To ask a privacy question or exercise a privacy right, email support@loopsbox.com. We may ask for information reasonably necessary to verify that a request relates to you.