Privacy Policy

Last updated 18 August 2026

This policy explains how DMO Studio Ltd collects and uses your personal data when you use this platform, and the rights you have over it.

Who we are

This platform is operated by DMO Studio Ltd. We are the data controller for the personal data described here. For any privacy question, or to exercise your rights, write to us by post at 66 Paul Street, Shoreditch, London EC2A 4NA.

What we collect

Account details — the email address, artist/producer name and password you provide when you sign up, plus any profile photo or social handles you add. Passwords are stored in hashed form by our authentication provider; we never see them.
Purchase details — your email and a record of what you licensed. Card payments are processed by Stripe; we receive confirmation of payment but do not store your card number.
Licence consent records — when you accept a licence at checkout we record the agreed terms, the time, and your IP address and browser (user agent) as evidence the agreement was made.
Usage and analytics — if you accept analytics cookies, privacy-friendly usage statistics (see our Cookie Policy).
Marketing — your email address, only if you opt in to marketing.
Correspondence — anything you send us by email.
Identity documents — in some cases during verification we will require you to upload identity documents (for example a photo ID and a proof of address) so we can confirm who you are and set the account up correctly for your resident country.

How we use it, and our legal basis

To create and run your account and provide the service — performance of our contract with you.
To verify your identity where the law of your resident country requires a parent or guardian, or where we review documents ourselves — performance of our contract, and our legal obligations under the laws of England and Wales.
To take payment and deliver the licences you buy — performance of our contract.
To keep records of the licence agreements you enter into — our legitimate interest in holding evidence of contracts, and compliance with our legal obligations such as tax and accounting.
To keep the service secure and prevent fraud or abuse — our legitimate interests.
For analytics — your consent, which you can withdraw at any time.
To send you marketing — your consent, which you can withdraw at any time using the unsubscribe link or by contacting us.

Who we share it with

We use a small number of trusted processors who handle data on our behalf:

Supabase — database, authentication and file storage.
Stripe — payment processing.
Vercel — website hosting and, with your consent, analytics.
Resend — sending transactional email such as confirmations and receipts.

Some of these providers may process data outside the UK; where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or an adequacy decision. We do not sell your personal data.

Seller payouts and Stripe verification

If you sell as a producer on DMO Studio, you can be paid out only once you have set up a payment account with Stripe, our payments provider, and Stripe has verified it. The details Stripe asks for — such as your legal name, date of birth, home address, bank account details and, where Stripe requests them, identity documents — are provided by you directly on Stripe's own pages. They do not pass through us and we never store them. We share only your producer display name and contact email with Stripe to create the account. Stripe collects and verifies this information to meet its own legal obligations as a regulated payments provider and is the data controller for it — see Stripe's privacy policy and the agreement you accept with Stripe when you onboard.

What we receive and keep is the verification status only: whether your payment account has been verified by Stripe and payouts are enabled, which requirement categories Stripe still needs, and a dated record of status changes — never the underlying documents or bank details. We use this to decide when a payout can be released; no payout is released until Stripe has verified the payment account. Our legal basis is the performance of our contract with you as a seller, and our legitimate interest in paying the right person and preventing fraud.

Status records are kept as business records on the same schedule as our purchase records (generally up to six years). To correct the identity or bank details Stripe holds, use the payout setup in your account, which returns you to Stripe's pages; for anything about the status information we hold, write to us by post at 66 Paul Street, Shoreditch, London EC2A 4NA.

How long we keep it

Account data — for as long as your account is open.
Identity documents uploaded for verification — retained only for the minimal period necessary for us to abide by our legal obligations as determined by the laws of England and Wales, then deleted. The decision that we reached is kept as a business record.
Purchase and licence-agreement records — kept for as long as needed for legal, tax and accounting purposes, generally up to six years after the transaction.
Download links — expire 7 days after purchase; store credit expires under its own terms.
Marketing data — until you unsubscribe.

Your rights

Under UK data protection law you have the right to access, correct, erase, restrict or object to our use of your personal data, to data portability, and to withdraw consent at any time. To exercise any of these, write to us by post at 66 Paul Street, Shoreditch, London EC2A 4NA. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you are unhappy with how we handle your data.

Cookies

We use cookies and similar technologies as described in our Cookie Policy. Non-essential analytics load only with your consent.

Children

This platform is for people who are classified as an adult in their resident country, or for a minor represented by a parent or guardian. Our verification process uses resident country and date of birth to set the account up correctly. If you believe a child has provided us with personal data without that representation, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time; the date at the top shows when it was last revised.

What we collect

Account details — the email address, artist/producer name and password you provide when you sign up, plus any profile photo or social handles you add. Passwords are stored in hashed form by our authentication provider; we never see them.

Purchase details — your email and a record of what you licensed. Card payments are processed by Stripe; we receive confirmation of payment but do not store your card number.

Licence consent records — when you accept a licence at checkout we record the agreed terms, the time, and your IP address and browser (user agent) as evidence the agreement was made.

Usage and analytics — if you accept analytics cookies, privacy-friendly usage statistics (see our Cookie Policy).

Marketing — your email address, only if you opt in to marketing.

Correspondence — anything you send us by email.

Identity documents — in some cases during verification we will require you to upload identity documents (for example a photo ID and a proof of address) so we can confirm who you are and set the account up correctly for your resident country.

How we use it, and our legal basis

To create and run your account and provide the service — performance of our contract with you.

To verify your identity where the law of your resident country requires a parent or guardian, or where we review documents ourselves — performance of our contract, and our legal obligations under the laws of England and Wales.

To take payment and deliver the licences you buy — performance of our contract.

To keep records of the licence agreements you enter into — our legitimate interest in holding evidence of contracts, and compliance with our legal obligations such as tax and accounting.

To keep the service secure and prevent fraud or abuse — our legitimate interests.

For analytics — your consent, which you can withdraw at any time.

To send you marketing — your consent, which you can withdraw at any time using the unsubscribe link or by contacting us.

Who we share it with

We use a small number of trusted processors who handle data on our behalf:

Supabase — database, authentication and file storage.

Stripe — payment processing.

Vercel — website hosting and, with your consent, analytics.

Resend — sending transactional email such as confirmations and receipts.

Seller payouts and Stripe verification

How long we keep it

Account data — for as long as your account is open.

Identity documents uploaded for verification — retained only for the minimal period necessary for us to abide by our legal obligations as determined by the laws of England and Wales, then deleted. The decision that we reached is kept as a business record.

Purchase and licence-agreement records — kept for as long as needed for legal, tax and accounting purposes, generally up to six years after the transaction.

Download links — expire 7 days after purchase; store credit expires under its own terms.

Marketing data — until you unsubscribe.

Your rights

Children