Privacy Policy

Amplify Track FZCO (“Amplify Track”, “we”, “us” or “our”) is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how we use it and the rights you have over it.

We comply with the United Arab Emirates Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “UAE PDPL”), and where applicable, the EU General Data Protection Regulation (GDPR) and the UK GDPR.

1. Data controller

The data controller responsible for the personal data processed through this website and our services is:

2. Data we collect

We collect the following categories of personal data:

• Brief submissions. When you submit our campaign brief, we collect your role (label, manager, artist, agency), your artist or label name, email address, the track or sound link you share, your release date, your target market and any free-text message you choose to send.
• Direct communications. When you email or message us on WhatsApp, we receive your contact details and the content of your message.
• Service data. If you become a client, we process campaign-related data: artists and tracks, creator selections, briefs we draft for you, posting schedules, performance reports and invoices.
• Technical data. Our hosting provider records limited technical information (IP address, user agent, request timestamps) for security and infrastructure purposes.

We do not knowingly collect personal data from children under 18.

3. Purposes & legal bases

We process personal data for the following purposes:

• Responding to briefs and inquiries — basis: steps taken at your request prior to entering into a contract, and our legitimate interest in operating our business.
• Providing campaign services to clients — basis: performance of the contract between us.
• Engaging creators and processing payments — basis: performance of contracts with creators and our legitimate interest in operational continuity.
• Bookkeeping, invoicing and tax obligations — basis: legal obligation under applicable UAE law.
• Securing our website and preventing abuse — basis: our legitimate interest in keeping the service safe.

4. Sharing & processors

We do not sell personal data. We share it only with carefully selected processors who act on our instructions and under written agreements:

• Hosting — Vercel Inc. (United States) hosts this website and processes server requests.
• Email infrastructure — used to deliver replies and campaign updates from our work mailbox.
• Database & storage (Phase 2 — CRM) — when our internal CRM goes live, structured data and assets will be stored with a managed Postgres provider in the EU region by default.
• Payment & accounting partners — to issue invoices and process creator payments.

We may also disclose personal data when required by law, regulation, or a binding order of a competent UAE authority or court.

5. International transfers

As a UAE-based business operating with European, North American and global clients and creators, your data may be transferred to, stored in or accessed from countries outside the UAE. When such transfers involve EU/UK data subjects, we rely on adequacy decisions or Standard Contractual Clauses (SCCs) where required, and we ensure that equivalent levels of protection are maintained.

6. Retention

We keep personal data only for as long as needed:

• Brief submissions that do not lead to a contract: up to 12 months.
• Client and campaign data: for the duration of the engagement plus 7 years for accounting and audit purposes, in alignment with UAE record-keeping requirements.
• Email correspondence: up to 3 years from last contact, unless a longer period is needed for ongoing matters.

7. Security

We apply technical and organisational measures appropriate to the sensitivity of the data we process: encrypted transport (HTTPS), access control on internal systems, principle of least privilege, regular reviews of vendor security, and incident-response procedures. No system can be guaranteed to be entirely secure; we encourage you to use strong passwords and to notify us immediately if you suspect any unauthorised access.

8. Your rights

Subject to applicable law, you have the following rights regarding your personal data:

• Access a copy of the data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase data we no longer have a legal basis to keep.
• Restrict or object to certain processing.
• Port your data to another provider in a structured format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local supervisory authority. In the UAE, the competent authority is the UAE Data Office.

To exercise any of these rights, email alex@amplifytrack.com. We respond within 30 days.

9. Cookies

Our website currently uses only essential cookies needed to operate. See our Cookie Policy for details.

10. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Significant changes will be communicated through this page or, where appropriate, by email.

11. Contact

For any question regarding this Privacy Policy or your personal data, contact us at alex@amplifytrack.com or by post at: Amplify Track FZCO, Building A2, IFZA, Dubai Silicon Oasis, Dubai, United Arab Emirates.