Privacy

1. Who is responsible for your data

The data controller is Heritage Music SARL, which operates the IKI Records label: 3 chemin des Égreffins, 91890 Videlles, France, SIRET 514 288 356 00017.

For any question about your data: nicolas@iki-records.com.

2. Cookies and trackers: nothing before your consent

On your first visit a banner asks you to accept or decline advertising and audience-measurement cookies. The “Accept” and “Decline” buttons have the same size and prominence. Until you accept, no tracking script is loaded and no data is sent to these services.

If you accept, we load the following tools:

• Google Tag Manager and Google Analytics 4 (Google Ireland Ltd / Google LLC): audience measurement, page views, clicks to streaming platforms.
• Google Ads (only if a conversion tag is configured): measuring conversions from ad campaigns.
• Meta Pixel (Meta Platforms Ireland Ltd): knowing which Facebook / Instagram ads led to a visit or a click to a streaming platform, and targeting them better.
• Meta Conversions API: the same events are also sent from our server to Meta for reliability. Sent: event name, page address, your IP address, your browser (user agent), Meta cookie identifiers (_fbp, _fbc) and campaign (UTM) parameters. No name or email is sent through this channel.
• TikTok Pixel and Snap Pixel: present in the code but not enabled today. If they ever are, they will be subject to the same consent and this page will be updated.

Your choice, and how to change it

Your choice is stored in your browser (local storage, key “iki-cookie-consent”) for 13 months at most, after which the banner is shown again. You can change your mind at any time with the “Cookies” link at the bottom of every page. If you decline after having accepted, the page reloads, known tracking cookies are deleted and no tracking remains active.

Declining does not prevent you from using the site. You can also block cookies in your browser settings.

3. Sync catalog accounts (Supabase)

The Sync catalog, intended for professionals (music supervision, production, advertising), requires an account. We collect your email address and a password (stored only in hashed form by our authentication provider, Supabase). An account created through the public form stays inactive until IKI Records approves it manually.

When you use the catalog we also record your favorite tracks and a few usage events (listening, downloads) linked to your email, to manage access to WAV files and understand which tracks are of interest. This data is not used for advertising and is never resold.

Legal basis: performing what you request (catalog access) and our legitimate interest in managing and securing that access.

4. Atelier Fiche Technique (tech rider tool)

The “Atelier Fiche Technique” tool (/atelier) helps you prepare a concert tech rider. If a sign-up is requested, we collect your first name, last name, email address and, optionally, your band name, stored with Supabase. A strictly necessary functional cookie (“atelier_access”, signed, valid for 1 year) remembers your access; it is not used for advertising tracking. If a verification code is required, it is emailed to you and expires after 15 minutes.

This data is used to give you access to the tool and to contact you about it. Legal basis: performing what you request, and our legitimate interest. The tracking cookies of the banner (section 2) are also subject to your consent there.

5. Contact by email

If you write to nicolas@iki-records.com, we use your message and address only to reply and follow up. The site has no contact form collecting anything else.

6. Google and YouTube data: the internal “IKI CRM” application

IKI Records uses an internal application called “IKI CRM”, reserved for the label’s team. It connects to Google APIs (YouTube Data API, YouTube Analytics API, Google Ads API and Google Analytics) solely to manage and analyze the label’s and its artists’ own YouTube channels, advertising accounts and Analytics properties, with their agreement.

This data (channel statistics, video and campaign performance) is used only to run the label’s work. It is not sold, not shared with third parties, not used for targeted advertising and not transferred to data brokers. No one outside the IKI Records team has access to it.

IKI Records’ use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke the application’s access at any time from your Google account permissions page (myaccount.google.com/permissions), or ask us to delete data obtained from your account at nicolas@iki-records.com.

7. Hosting and processors

Some of these providers may process data outside the European Union. In that case the transfer relies on the safeguards provided by the GDPR (standard contractual clauses or an adequacy decision).

• Google Cloud Run (Google, Europe region, Belgium): hosting of the site and its server.
• Cloudflare R2: storage of images and audio files.
• Supabase: authentication, Sync accounts and Atelier sign-ups.
• Google Workspace (Gmail): sending account emails (for example password reset) from nicolas@iki-records.com.
• Google, Meta: only if you accepted cookies (see section 2).

8. Retention periods

• Cookie choice: 13 months at most in your browser.
• Tracking cookies set by Google and Meta: according to their own lifetime, generally a few months up to 13 months.
• Atelier sign-ups: 3 years after last access, or deleted on request.
• Sync accounts: while the account is active, then deleted on request or after 3 years of inactivity.
• Catalog usage events: 24 months.
• Email exchanges: 3 years after the last contact.
• Data from Google APIs: as long as needed to manage the accounts concerned, deleted when access is revoked or on request.

9. Your rights

You may request access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on our legitimate interest. You can withdraw your cookie consent at any time without justification (“Cookies” link in the footer).

To exercise your rights, write to nicolas@iki-records.com; we reply within one month. If you disagree with our answer you may lodge a complaint with the CNIL (cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France).

10. Security and updates

Traffic with the site is encrypted (HTTPS) and access to data is limited to the IKI Records team. This policy may change, for example if a new measurement tool is enabled; the date of the last update is shown at the top of this page.