GDPR & Your Rights.

Last updated: July 2026

This page sets out the rights the General Data Protection Regulation (GDPR) gives you if you're located in the European Union, the EEA, or the UK, and how to exercise them. It works alongside our full Privacy Policy, which describes what we collect and why in more detail — read this as the GDPR-specific detail behind that policy, not a replacement for it.

1. Who this applies to

GDPR protects the personal data of individuals in the EU and EEA (and, under the UK GDPR, the UK), regardless of where the organization processing that data is based. Next Music Group is operated by Songpro Digital Private Limited, a company incorporated in India (CIN: U92113HR2021PTC097757) — the data controller for the purposes of this page. Next Music Group works with artists, labels, and partners across many countries, including the EU, EEA, and UK, so this page sets those rights out clearly for anyone they cover.

2. What we process, and why

Our Privacy Policy covers this in full. In short: what you submit through the Contact form or the Partner With Us application, plus aggregate site analytics. We don't sell personal data, and we don't use it for third-party advertising.

3. Our legal basis for processing

GDPR requires a lawful basis for each way we use personal data. For the activities described in our Privacy Policy:

  • Contact form and partner applications — taking steps you request before entering into an agreement, and our legitimate interest in responding to enquiries.
  • Site analytics (Google Analytics) — only with your consent, given through the cookie banner. You can withdraw it at any time by clearing your stored cookie choice.
  • Spam and abuse protection (reCAPTCHA) — our legitimate interest in keeping the site's forms secure.
  • Legal and accounting records — to meet our legal obligations.

4. Your rights under GDPR

Subject to the conditions and exceptions set out in the law, you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — ask us to delete your data ("right to be forgotten").
  • Restriction — ask us to limit how we use your data while a request or dispute is resolved.
  • Portability — receive the data you gave us in a structured, commonly-used format, or have it transferred to another controller.
  • Object — object to processing based on our legitimate interests.
  • Withdraw consent — for anything processed on the basis of consent, like analytics, withdraw it at any time without affecting processing that already happened.

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects about you.

5. How to exercise these rights

Email describing the right you'd like to exercise. We may need to verify your identity before acting on a request. We aim to respond within one month, as GDPR requires — for complex requests this can be extended by a further two months, and we'll tell you if that's needed.

6. International transfers

We operate globally and work with platforms, societies, and service providers in many countries. Where personal data covered by GDPR is transferred outside the EEA or UK as a result, we take steps to keep it protected to a standard consistent with this regulation, in line with the international-transfers section of our Privacy Policy.

7. Data Protection Officer & EU/UK Representative

GDPR requires a statutory Data Protection Officer only for organizations whose core activity involves large-scale systematic monitoring or large-scale processing of special-category data. Based on the data we process, described above, we don't currently meet that threshold. Any privacy question or rights request can still be directed to .

Songpro Digital Private Limited is established in India, outside the EU, EEA and UK. Our processing of personal data belonging to individuals in the EU, EEA and UK is limited to occasional contact-form and partner-application enquiries — it is not large-scale, and does not involve special-category data. On that basis, we rely on the Article 27(2)(a) GDPR exemption (and the equivalent UK GDPR exemption) and have not appointed a representative in the EU, EEA or UK.

8. Right to complain

If you believe we haven't handled your personal data properly, you have the right to lodge a complaint with the data protection supervisory authority in your country of residence, place of work, or where the issue occurred — in addition to contacting us directly.

9. Your rights under India's DPDP Act

Songpro Digital Private Limited, the company behind Next Music Group, is incorporated in India — so India's Digital Personal Data Protection Act, 2023 (DPDP Act) applies to how we handle personal data directly, not just as a courtesy to visitors from elsewhere. If you're in India, this section covers your rights specifically.

Under the DPDP Act, as a data principal you have the right to:

  • Access — a summary of the personal data we process about you, and the processing activities involved.
  • Correction and erasure — ask us to correct inaccurate or incomplete data, or delete data that's no longer needed for the purpose it was collected for.
  • Grievance redressal — raise a complaint about how we've handled your data and receive a response within the timeframe the Act requires.
  • Nominate — name someone else to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, email .

10. Related policies

This page works alongside our Privacy Policy, Cookie Notice, and Terms of Service.