Privacy Notice

Last updated: 1 October 2026

Website Visitors & Professional Contacts

This Privacy Notice replaces the earlier privacy policy previously published on this website, which described only website visitors and did not explain NVL Music’s professional outreach.

Last updated: 1 October 2026

1. Who we are

This Privacy Notice explains how NVL Music handles personal information.

The data controller is Nicole Lauren, operating as NVL Music. NVL Music is a United States-based independent artist practice. It is not a record label, marketing agency, or sync-music company.

NVL Music creates and shares original music, compositions, recordings, videos, and related creative work. It also communicates with professional contacts about possible radio, playlist, publication, licensing, sync, and collaboration opportunities.

NVL Music is a small creative practice and treats personal information carefully. This Notice explains what information may be held, why it is used, how it is obtained, who may receive it, and how to contact NVL Music about it.

Data protection contact (email only):
Email: nvl@nvlmusic.com

NVL Music does not currently claim a UK establishment or UK registration.

2. Who this Notice covers

This Notice applies to:

  1. people who visit, comment on, or register on nvlmusic.com; and
  2. professional contacts with whom NVL Music communicates about music, including radio programmers, curators, music supervisors, journalists, artists, producers, collaborators, and other industry contacts.

Our previous privacy information primarily addressed website visitors, comments, account registration, and cookies. It did not adequately describe professional-contact and outreach information. This Notice corrects that omission.

3. Information collected through the website

Comments

If you leave a comment, the information entered into the comment form may be collected, together with your IP address and browser user-agent information. This is used primarily to help detect and prevent spam, abuse, and malicious activity.

A shortened or anonymised version of your email address may be provided to an avatar service to determine whether you use that service. The avatar service’s own privacy notice applies to that activity.

Account registration

If the website permits account registration, NVL Music may collect your name, username, email address, password-related information, and any other details you choose to provide.

You may also be offered an optional opportunity to receive news or updates. That subscription is voluntary and can be withdrawn at any time.

Cookies and analytics

The website may use:

  • strictly necessary or functional cookies;
  • session cookies;
  • analytical cookies; and
  • similar technologies needed to operate, protect, and understand use of the website.

The website uses a cookie prompt to provide information and, where required, request consent for non-essential cookies.

You can manage or disable cookies through your browser settings and, where available, through the website’s cookie controls. Disabling some cookies may affect how the website functions.

NVL Music does not intentionally use advertising cookies unless this Notice and the website’s cookie controls are updated to describe them.

Embedded content

Articles or pages may include embedded content from other websites, such as videos, audio players, music services, social-media content, or other media.

Embedded content may behave as though you had visited the other website directly. That service may collect information about you, use cookies, and monitor your interaction with the embedded content under its own privacy notice.

Media uploads

If you upload an image or other media to the website, avoid uploading material containing embedded location information, such as GPS or EXIF data, unless you intend to share that information.

Hosting and security logs

The website host or security systems may automatically record technical information such as IP address, browser type, device information, access times, requested pages, error information, and security events.

These records help operate, secure, troubleshoot, and protect the website.

4. Professional contacts and outreach

NVL Music may hold limited professional information about people who may be relevant to its music-related work.

What may be held

Depending on the relationship, this may include:

  • name;
  • professional email address;
  • job title;
  • employer, station, organisation, or publication;
  • a professional profile or website link, where relevant;
  • the date, subject, and content of outreach emails;
  • replies or other correspondence;
  • basic contact-record information in NVL Music’s CRM; and
  • limited internal information needed to identify the source or status of the contact record.

NVL Music aims to keep this information limited to what is reasonably necessary for a professional relationship.

Why it is used

Professional contact information may be used for one-to-one communication about whether an existing NVL Music composition, recording, video, or other creative work may be relevant to:

  • radio or other programming;
  • a playlist;
  • a publication or interview;
  • a music-supervision or sync opportunity;
  • licensing;
  • a collaboration; or
  • another genuine professional connection.

It may also be used to maintain an accurate record of correspondence and to avoid sending repeated or inappropriate communications.

How professional information is obtained

Professional contact information may come:

  • directly from the person, such as through an email, website form, registration, or reply;
  • from an existing contact record;
  • from a publicly available professional source, such as a station, organisation, publication, or professional profile; or
  • from information supplied to NVL Music in the course of an existing professional relationship.

Where information is obtained from a source other than the person concerned, this Notice provides information about that processing and its source categories.

What NVL Music does not do

NVL Music uses a third-party data-enrichment service to fill in missing professional contact details (such as an email address), drawing on publicly available sources.

NVL Music does not:

  • purchase personal profiles;
  • intentionally collect guessed or inferred personal information;
  • create behavioural profiles;
  • assign engagement scores;
  • carry out automated decision-making about professional contacts;
  • intentionally collect sensitive or special-category information for outreach; or
  • sell, rent, or trade professional contact information.

Where NVL Music obtains professional contact details through an enrichment service, NVL Music will tell the person the information came from a third-party enrichment service drawing on publicly available sources if the person asks. The specific source may not always be identifiable because the enrichment service does not always log which source it used.

Limits on outreach

NVL Music limits itself to a single, individual, one-to-one introductory email to a named professional where it considers that the communication is relevant to the person’s professional role and interests.

NVL Music does not run repeat or campaign email outreach to UK radio contacts without consent or a valid soft opt-in. This reflects the additional requirements that may apply where a station or organisation is an unincorporated body, sole trader, or other individual subscriber under applicable electronic-marketing rules.

All outreach remains subject to applicable data-protection and electronic-marketing laws. If a person objects to outreach or asks NVL Music not to contact them, NVL Music will stop the relevant outreach and retain only the minimum information needed to respect that request.

5. Lawful bases for using personal information

The lawful basis depends on the activity.

Website comments, registration, and site security

NVL Music generally relies on legitimate interests under Article 6(1)(f) of the UK GDPR for operating, maintaining, securing, and protecting the website, including detecting spam and abuse.

News and updates

Where you actively opt in to receive news or updates, NVL Music relies on consent.

You may withdraw consent at any time. Withdrawal does not affect processing that took place before withdrawal.

Professional outreach and contact records

NVL Music generally relies on legitimate interests under Article 6(1)(f) for limited professional outreach and basic contact-record keeping.

The interests considered include:

  • communicating about existing music and creative work;
  • maintaining genuine professional relationships;
  • keeping a reliable record of communications;
  • using only limited professional information;
  • contacting people in a professional context about matters relevant to their role; and
  • avoiding unnecessary or intrusive data use.

NVL Music considers the effect on the individual by looking at the limited nature of the information, the professional context, the relevance of the communication, the absence of sensitive data, the absence of profiling, and the ability to object easily.

A person’s rights and interests take priority if they outweigh NVL Music’s interests. Anyone may object to this processing, and NVL Music will stop direct marketing when a person objects.

NVL Music may process information where necessary to comply with a legal obligation, such as maintaining tax records, responding to a valid legal request, or documenting compliance.

Contracts and potential contracts

NVL Music may process information where necessary to take steps at a person’s request before entering into a contract, or to perform a contract. This may include discussing or administering a licensing, sync, collaboration, distribution, or other professional agreement.

Where consent is the lawful basis, it may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

6. How information is obtained

NVL Music may obtain personal information:

  • directly from you through website forms, comments, account registration, email, or other communications;
  • from an existing professional or business contact record;
  • from a publicly available professional source, such as an organisation website, station listing, professional directory, or professional profile; or
  • from another person involved in a professional relationship with NVL Music.

If information is obtained from somewhere other than you, NVL Music will provide the relevant privacy information required by applicable law. This Notice is intended to provide that information for professional contacts.

7. Who may receive personal information

NVL Music may share limited personal information with service providers and professional advisers where necessary to operate the practice.

These categories may include:

  • Email service provider — Marblism, used to send and receive email.
  • Contact-record system — Zoho Bigin, used to keep professional contact records.
  • Data-enrichment provider — WebAmigo, installed via the Zoho Bigin marketplace, used to look up missing professional contact details from publicly available sources.
  • Website hosting and content management for nvlmusic.com.
  • Cookie consent tool for the website.
  • Comment spam screening for the website.
  • Courts, regulators, law-enforcement bodies, or other authorities where disclosure is legally required or permitted.

These providers act on NVL Music’s instructions and only for the purposes described in this Notice. They receive only the information reasonably needed to provide their services.

NVL Music does not sell, rent, or trade personal information.

NVL Music does not set advertising cookies.

8. International transfers

NVL Music is based in the United States. Some of our providers may store or make information accessible from outside the United Kingdom and the European Economic Area. Where required, NVL Music relies on an appropriate safeguard, such as an adequacy regulation or approved standard contractual clauses, so that your information continues to be protected.

9. How long information is retained

NVL Music aims to keep personal information only for as long as it has a genuine business, legal, security, or relationship reason to do so.

The intended retention approach is:

Comments and comment metadata

Comments and comment metadata are generally retained for 24 months.

Registered user profiles

Registered user information is retained while the account remains active. It will be deleted on request where appropriate, except that a username or other limited information may need to remain where technically necessary or legally permitted.

Professional contact records and outreach correspondence

Professional contact records may be retained for as long as there is an active or ongoing professional relationship with the person. Once that relationship ends and there is no further meaningful contact, NVL Music will generally retain the contact record and any outreach correspondence for 12 months from the “last meaningful contact” date, followed by review and deletion unless there is a legal need to retain the information.

“Last meaningful contact” means the most recent date on which (a) NVL Music sent a direct one-to-one outreach message to the professional contact, or (b) the professional contact replied or otherwise directly communicated with NVL Music.

If no outreach has ever been made to a professional contact (i.e., NVL Music has never sent a message and has never received a message from them), the 12-month retention period runs from the date the contact record was created.

Suppression-record carve-out: where someone has objected to outreach or unsubscribed (or asked not to be contacted), NVL Music retains the minimum information necessary to honour that request indefinitely, with no fixed expiry date, because the only purpose of that record is to ensure the person is never contacted again. The suppression record is kept separate from ordinary contact records, is limited to what is needed to prevent re-contact (for example, an email address and a suppression flag), is excluded from the ordinary deletion schedule, and is reviewed periodically to confirm it is still needed and still minimal. The person may ask for the suppression record to be removed; if they do, NVL Music will explain why a minimal suppression marker may need to be kept in order to respect their request.

Server and security logs

Server and security logs are generally retained for 12 months, subject to security, technical, or legal requirements.

Information required for tax, accounting, legal, dispute-resolution, or regulatory purposes is retained for as long as required by the applicable law or reasonably necessary to establish, exercise, or defend legal rights.

The periods selected must match what NVL Music actually does. Where possible, NVL Music will use a defined period rather than retaining information simply because it may be useful someday.

10. Your rights

Depending on the circumstances and applicable law, you may have the following rights:

Access

You may ask whether NVL Music processes your personal information and request a copy of it.

Rectification

You may ask NVL Music to correct inaccurate or incomplete information.

Erasure

You may ask NVL Music to delete your personal information where there is no good reason for it to continue being processed.

Restriction

You may ask NVL Music to limit how it uses your information while a concern, objection, or accuracy issue is being considered.

Objection

You may object to processing based on legitimate interests. You have an absolute right to object to direct marketing, and NVL Music will stop that marketing.

Data portability

You may ask to receive certain personal information in a structured, commonly used, machine-readable format or to have it sent to another controller where the legal conditions apply.

Data portability generally applies only to automated processing based on consent or a contract. It will not usually apply to NVL Music’s processing based on legitimate interests.

Where NVL Music relies on your consent, you may withdraw it at any time.

Automated decisions

You have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects. NVL Music does not currently carry out this type of processing.

You do not have to pay a fee or give a reason to exercise your rights. NVL Music may need to verify your identity before releasing or changing information, particularly where necessary to protect someone else’s privacy.

To exercise a right, contact nvl@nvlmusic.com.

11. Complaints and contact

If you have a question, concern, or request, please contact NVL Music:

Email: nvl@nvlmusic.com

NVL Music will review the concern and try to resolve it fairly and promptly.

You may also complain to the Information Commissioner’s Office at any time:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom

Helpline: 0303 123 1113
Website: https://ico.org.uk

The ICO is the relevant supervisory authority for individuals in the United Kingdom. Although NVL Music is based in the United States, it provides this contact route for UK individuals whose information it processes under the UK GDPR.

12. Automated decision-making and profiling

NVL Music does not carry out solely automated decision-making that produces legal or similarly significant effects.

NVL Music does not create behavioural profiles or use automated engagement scoring for professional contacts.

13. Security and data minimisation

NVL Music collects and retains only the information reasonably needed for the relevant purpose.

Access to information is limited to what is needed to operate NVL Music and respond to legitimate business, legal, or security needs. NVL Music uses reasonable technical and organisational measures to protect information against unauthorised access, loss, misuse, alteration, or disclosure.

As a small independent practice, NVL Music keeps its security measures proportionate to the nature and amount of information it holds and the risks involved.

No method of storage or transmission is completely secure. If NVL Music becomes aware of a personal-data incident that requires notification, it will take the steps required by applicable law.

14. Changes to this Notice

NVL Music may update this Notice when its website, services, technology, professional-contact practices, legal obligations, or data-handling arrangements change.

The current version will be published on this page, with the date of the latest update shown at the top. Where a change is material, NVL Music will provide additional notice where required by law.

15. Last updated

[LAST UPDATED DATE]

Powered by CookieAdmin