Privacy

Last updated 21 October 2026 · Version 2026-10-21

Internet Label (“we”) runs theinternetlabel.com, where people value music rights and sell or license them to buyers. We decide how your information is used, so under UK data protection law (UK GDPR and the Data Protection Act 2018) we’re the controller. Questions, or to use any of your rights: hello@theinternetlabel.com.

What we collect, and why

• Your account: email, a scrambled (hashed) password, whether you sell or buy, and which version of our terms you accepted and when. Needed to run your account and show what you agreed to.
• Your profile: artist or company name, website, and invoice details if you add them. Needed to list music, buy, and draft agreements and invoices.
• Buyer checks: company details, who signs and who owns the business, ID evidence, and the result of a sanctions check. Needed to keep the marketplace safe and prevent fraud and money laundering.
• Music and valuation details: titles, rights and splits, streams, TikTok numbers and earnings you enter. Used to value your music and, if you list it, to show buyers.
• TikTok, if you log in with it: your TikTok username and account ID, to prove you posted a sound. We don’t keep access to your TikTok account.
• Deals: offers, counters, messages, the agreement, the name you type to sign and when, and delivery confirmations. Needed to run the deal and keep a record of it.
• Emails: account alerts, valuation emails and password resets, and a record of each one we send. Marketing emails only if you tick the box, until you unsubscribe.
• Which ad you came from: if you arrive from one of our ads, the link says which one. We save that with your valuation or account to see which ads work. No cookie is used for this.
• Site analytics: page views counted by Vercel Web Analytics, which doesn’t use cookies or identify you.
• Ad measurement, only if you agree: if you accept the cookie banner, TikTok’s and Meta’s pixels record that you completed a valuation or signed up. Decline, and they never load.
• Security logs: IP address and browser details in server logs, to keep the site secure.

Legal bases: running the service you asked for (contract). Our legitimate interests in keeping the marketplace safe, checking listings and buyers, measuring our ads without cookies, and improving valuations. Your consent for marketing email and ad pixels, which you can withdraw at any time. And legal obligations, such as keeping deal and tax records.

Royalty statements

Statements often hold names, addresses, ID numbers, bank details, and details of other people such as co-writers. So:

• Before any statement text goes to our AI reader, we remove personal ID numbers (such as a personnummer, National Insurance or US Social Security number), bank details, email addresses, phone numbers, and the names, addresses and member numbers that follow labels like “Name” or “Address”. We also strip long numbers from stored file names. Removal is automatic, so it can occasionally miss something; our AI provider doesn’t keep or train on what we send.
• We keep the earnings lines we need for your valuation, and the file itself until you delete it or close your account, so you can check our reading.
• We use other people’s details in your statements only to read your earnings, never to contact them. If you’re one of those people, ask us anything.

Valuations and AI

• Valuations are produced automatically, but they’re estimates you can ignore. They don’t decide whether you can use the site or sell. A person checks every listing and every buyer.
• We improve our model by comparing completed sale prices with the valuation for each listing. That uses figures, not your files or identity. We don’t train AI on your uploads.
• If you run a valuation without an account, we keep it so the link keeps working, and attach it to your account if you sign up within 30 minutes on the same device. Ask and we’ll delete it.

Who we share it with

• Buyers and sellers: when you list, verified buyers see the listing and its deal file, unless you mark it confidential. Buyers must keep deal files confidential. In a deal, both sides see each other’s names, companies and emails in the agreement.
• Our staff: a small number of staff can see accounts, including from a seller’s or buyer’s point of view, to check listings and buyers and help you. Admin access needs a separate login.
• Service providers acting for us:
  • Vercel: hosting, file storage, analytics.
  • Neon: database.
  • Resend: sending email.
  • Anthropic: reading PDF statements, after personal details are removed.
  • TikTok: login, if you use it.
  • TikTok and Meta: ad measurement, only with your consent.
  • Once deals take payment: the independent escrow or payment provider that holds the money, which also runs its own identity checks under its own privacy notice.
• Advisers and authorities: our lawyers, accountants and insurers, and the police, regulators, HMRC or the National Crime Agency where the law requires or allows it.

We don’t sell your information.

Outside the UK

Some of these providers are based in, or use servers in, the US. Where they do, the transfer is covered by the UK–US data bridge (for certified providers) or the UK’s approved contract clauses. Ask us for details. If you live in the EU, EU data protection law may also apply to you.

How long we keep it

• Account and profile: while your account is open. When you close it, we delete it within 30 days, except what we must keep below.
• Deal records, agreements and invoices: six years after the deal, for legal and tax reasons.
• Buyer checks: five years after the buyer relationship ends.
• Statements: until you delete them or close your account.
• Valuations run without an account: until you ask us to delete one.
• Email records: two years.
• Marketing: until you unsubscribe. After that we keep only your address and that you unsubscribed, so we never email you again by mistake.

Your rights

You can ask to see your information, correct it, delete it, limit or object to how we use it, or get a copy to take elsewhere. You can also withdraw consent at any time. Email hello@theinternetlabel.com and we’ll reply within a month. Every marketing email has an unsubscribe link.

If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d like the chance to put it right first.

The site is for people aged 18 and over.

Cookies

• Login (internetlabel_session): keeps you logged in, for up to 30 days. Strictly necessary.
• Valuation link (il_drop): links a valuation you ran before signing up to your new account. Lasts 30 minutes. Strictly necessary.
• TikTok login check (tt_oauth): lasts 10 minutes, to make sure a TikTok login started on our site. Strictly necessary.
• Your cookie choice (il_consent): saved in your browser so we don’t ask again. Strictly necessary.
• TikTok and Meta pixels: only if you accept. They set their own cookies for ad measurement.

To change your mind about the pixels, clear this site’s data in your browser and the banner will ask again, or email hello@theinternetlabel.com.

Changes

If we change this notice, we’ll update the date and version at the top. If a change matters to how we use your information, we’ll tell you by email first.