Effective Aug 6, 2026

Community Music - Privacy Policy

Here at UNIFIED Recorded Music Pty Ltd (ACN 668 630 304) atf URM Trust t/a Community Music, we take your privacy seriously. This privacy policy is designed to help you understand how Community Music and its related entities (we, our, us) protect your privacy, and manage, collect, use and share your personal information.

We are committed to supporting the Australian Privacy Principles (APPs) and complying with the Privacy Act 1988 (Cth) (Act) and the General Data Protection Regulation (GDPR) which sets out clear standards and guidelines for the collection, access, storage and use of personal information (collectively the Privacy Laws).

We reserve the right to review and amend this Privacy Policy from time to time. If we update this Privacy Policy, we will make the most up-to-date version of it available via our primary website (https://www.communitymusic.net) and any relevant secondary websites (individually and collectively, our Websites). It is your responsibility to ensure that you have read the current Privacy Policy each time you use our Websites. Please contact our Privacy Officer (using the details in section 9 below) if you have any questions about this document.

IF YOU DO NOT AGREE WITH ANY PART OF THIS POLICY, PLEASE DO NOT BROWSE, ACCESS OR USE ANY WEBSITE OPERATED BY US, OR, APPLY TO ACCESS, USE OR OTHERWISE ENGAGE WITH OUR SERVICES. YOUR CONTINUED USE OF OUR WEBSITES CONSTITUTES YOUR ACCEPTANCE OF THIS PRIVACY POLICY.

1. Types of information that we collect and purpose of collection

1.1 At a high level, ‘Personal information’ means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

1.2 The type of Personal Information we collect about you via our Websites may include:

  • your name;
  • your age, gender and demographic;
  • your email address;
  • your phone number;
  • your social media account name handles;
  • your Spotify, SoundCloud or similar, profile and/or account;
  • any institution you are associated with;
  • your IP address and hardware model;
  • your browsing type, behaviour and history;
  • identity verification information or documents;
  • information about the content you’ve viewed, the date and time, and other information about your interactions with our Websites;
  • and, in some circumstances, financial information.

1.3 We also collect and store other materials and information you provide to us via our Websites, such as audio and audio-visual files, associated materials such as artwork, your CV, biography, photographs, and other materials you may provide to us.

1.4 In accordance with the Act, we take reasonable steps to ensure the information we collect is necessary, relevant, and not excessive for our functions. For example:

  • If you are a mailing list subscriber, we may collect contact details from you such as your full name, email address, country, postcode and year of birth.
  • If you apply for access to our services, we may collect your full name and email address, financial information for the processing of royalties or other payments.
  • If you enter a competition or giveaway organised by us, we may collect your full name, email address, social media account name handles and further information depending on the competition.
  • For recruitment purposes, we may collect and hold Personal Information about prospective employees, such as your tax file number, date of birth, driver’s licence number and employment history. We may also need to collect sensitive information about you such as your membership in professional or trade associations and certifications from police checks. Unless the collection of sensitive information is permitted by the Privacy Laws, we will only collect sensitive information with your consent where that information is reasonably necessary for our business.

1.5 When we collect your Personal Information, we will tell you why we are collecting it and how we plan to use it, or these things will be obvious when we collect your information.

1.6 Our Websites and services are not directed at children under 16 years of age. We do not knowingly collect Personal Information from a child under 16 without the consent of a parent or guardian. If you believe we hold Personal Information about a child, please contact our Privacy Officer using the details in section 9 and we will take reasonable steps to delete that information.

2. How we collect your Personal Information

2.1 We collect your Personal Information when you interact with us directly via our Websites and social media accounts. We also collect your Personal Information when you join competitions or giveaways organised by us, when you apply for a job with us, or when you otherwise request or access our services.

Collection through social media platforms

2.2 When you interact with us using social media platforms, you may provide Personal Information to the operators of these social media platforms. Such information is subject to those operators’ privacy policies. We are not responsible for the privacy practices and policies of these operators even if you accessed these platforms from our Websites. We encourage you to read and understand these operators’ privacy policies before providing them with your Personal Information.

Collecting Personal Information from other sources

2.3 Sometimes we collect Personal Information about you from other sources where you have consented to the collection, where we are authorised by law to collect information, or where it is unreasonable or impracticable to collect that information from you personally.

2.4 If you apply for services, we may collect your Personal Information available via third-parties such as social media profiles or digital service providers (DSP) profiles/accounts.

2.5 If you apply for a position with us, we may collect your Personal Information from third parties such as recruitment service providers, referees, former employers, educational institutions and, if appropriate, health providers and police.

2.6 If we receive unsolicited Personal Information about you from a third party and it is clear to us that we should not have received that information, we will destroy or securely delete that information (if it is lawful and reasonable for us to do so), or ensure that the information is de-identified in accordance with the Act.

Notification of collection of Personal Information from third parties

2.7 If we collect your Personal Information from third parties in circumstances where you may not be aware that we have collected your Personal Information, we will take reasonable steps to notify you of the collection and the circumstances that surround the collection.

Use of tracking tools

2.8 We may use cookies, such as Hotjar and other similar tracking tools on our Websites to collect information about how you use our Websites. In particular:

  • Cookies are text files placed in your computer’s browser to store your preferences. These cookies collect information on how you and other visitors use our Websites, and allow us to track usage patterns and to compile data to help us improve our Websites and services. These tracking technologies do not themselves personally identify users, although they may identify a user's browser and other non-identifying features about a user; and
  • Hotjar is a combination of various online tools that we use to track the behaviour of the people who use and visit our Websites.

2.9 We use tracking tools to maintain our site, identify and analyse trends, and to obtain broad demographic information. We may transfer the information collected via tracking tools to third-party platforms (such as Meta, Google and TikTok) for the purposes of targeted marketing in relation to our products and services (Third-Party Platform Marketing).

2.10 Most browsers are initially set to accept cookies or other tracking tools. If you prefer, you can set your browser to refuse these by selecting the appropriate settings or blockings, or deleting or disabling them in your browser or device permits. If you disable cookies, we cannot guarantee that our Websites will be fully functional.

2.11 If you do not wish to receive any cookies, you may set your browser to refuse them. Where we are required to obtain your consent before setting non-essential cookies or similar tracking tools, we will do so through the cookie banner on our Websites. You can review, change or withdraw that consent at any time, and as easily as you gave it, using the cookie preferences function on our Websites.

3. Use and disclosure

Use and disclosure of Personal Information

3.1 We use Personal Information for a variety of purposes to conduct our business, including:

  • to supply services and products to you via our Websites (including merchandise and tickets to our events);
  • to provide you with access to the Websites;
  • to contact and communicate with you and engage in marketing campaigns (including in relation to your purchases, our competitions, and to provide you with information about our products and services);
  • to run our competitions and promotions;
  • to conduct market research and website development;
  • for internal record keeping;
  • to work with our related companies and service providers;
  • to consider applications for current and future employment or other opportunities with us;
  • to comply with applicable ‘know-your-customer’ requirements;
  • to comply with legal and regulatory requirements (including, without limitation, providing Personal Information to law enforcement and relevant State and Territory authorities, when required to do so). In such instances we will provide written notice of the use or disclosure;
  • to protect and uphold the rights, property and safety of us, our users and others;
  • to identify and contact and/or ban you from our Websites if you breach our Terms and Conditions;
  • to investigate your activity on our Websites for any reported suspicious or prohibited behaviour;
  • to facilitate acquisitions and potential acquisitions of our business and assets; and
  • to enforce our Terms and Conditions, or to protect the rights, property or safety of ourselves or others.

3.2 We will not use or disclose Personal Information we hold about you that was collected for a particular purpose for another purpose, unless:

  • you have consented to the use or disclosure of the information for another purpose; or
  • the use or disclosure is otherwise permitted under applicable Privacy Laws.

3.3 We will only collect sensitive information (for example, identification documents and financial account information) with your consent, and if it is reasonably necessary for our business functions and activities. You may direct us to only use that information for limited purposes.

Direct Marketing

3.4 Direct marketing involves communicating directly with you for the purpose of promoting our events, merchandise and other goods or services. Direct marketing can be delivered by a range of methods including email, SMS or social media.

3.5 We (and our affiliates, contractors, service providers and business partners) may carry out direct marketing activities from time to time. You have a right under the Spam Act 2003 (Cth) or any other relevant Acts of Commonwealth, to opt out from direct marketing and you can opt out at any time by emailing our Privacy Officer at legal@unifiedmusicgroup.com or by clicking the ‘unsubscribe’ link on any direct marketing communications.

Disclosure to third parties

3.6 We may disclose Personal Information about you to third parties in connection with the purposes described above (including for direct marketing purposes). This may involve disclosing Personal Information to entities including:

  • our related entities (including UNIFIED Recording IP Pty Ltd atf UNIFIED Recording IP Trust and UNIFIED Music Group Pty Ltd);
  • our business partners or joint venture entities in the music, entertainment and marketing industries;
  • our service providers (including FUGA, The Annex Creative, Rareform and Trolley);
  • our artists (and their label and representatives) if you purchase their products;
  • our external service providers, including mail houses, couriers, payment processors or payment gateway providers and e-commerce website providers;
  • our professional advisers, such as auditors, insurers and lawyers;
  • debt collection agencies and credit reporting bodies;
  • law enforcement, government agencies and regulatory authorities (as required or authorised by law or a court/tribunal order); and
  • any other person where you have given your consent.

3.7 We take reasonable steps to ensure that these third parties are bound by privacy obligations in relation to your Personal Information.

3.8 We will not sell, gift, rent or trade your Personal Information to anyone. We do, however, share information collected via tracking tools with third-party platforms for the purposes of Third-Party Platform Marketing, as described in section 2.9.

Links to Third Party Sites

3.9 We are not responsible for the content or practices of websites or applications operated by third parties that are linked to our Websites. These links are meant for your convenience only and you agree that once you leave our Websites via such a link, you are responsible for checking the applicable privacy policy of the third party site or application.

Disclosure overseas

3.10 In some circumstances, we may need to disclose your Personal Information to third party suppliers and service providers located overseas including FUGA, Stripe and Trolley. The locations of these overseas entities include the United States, Canada, the United Kingdom, Europe and India. We take reasonable steps to ensure overseas recipients of your Personal Information do not breach Privacy Laws.

3.11 Our Websites may contain features or links to websites and services provided by third parties such as social media platforms, e-commerce platforms, online streaming services and external payment gateways. Any such third-party service providers have their own privacy policies and may disclose your Personal Information to overseas recipients.

4. Protecting Personal Information

Storing Personal Information

4.1 We store your Personal Information in different ways, including in physical and electronic form on site and with third party storage providers.

4.2 We maintain physical, electronic and procedural security measures designed to safeguard your Personal Information and protect it from misuse and unauthorised access, disclosure or interference. For example, we may implement:

  • physical security measures for access to systems, including restricting access to authorised personnel only, control of access to buildings and use of user identifiers and passwords;
  • electronic security systems such as firewalls and data encryption, backup and recovery of systems, staff management and finance software, use of secure payment portals; and
  • procedural security measures, including imposing confidentiality obligations on employees, consultants and contractors, requiring them to comply with strict privacy and security policies and procedures including account decommissioning for exiting staff.

Security Breach

4.3 Although we take care with your Personal Information, and use our best efforts to maintain security of your information, unfortunately we cannot 100% guarantee that there will not be any security breaches. If we suspect that a data breach involving your Personal Information has occurred, we will assess it promptly and, where the breach is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Act.

4.4 To the extent permitted by law, and without limiting our obligations under the Privacy Laws, we are not liable for loss or damage arising from a breach of security, hacking of our systems, or unintentional disclosure, loss or misuse of information or data by third parties who obtain it, except to the extent that the loss or damage is caused by our failure to take the steps required of us under the Privacy Laws.

What happens if we no longer need your Personal Information?

4.5 If we no longer need your Personal Information for any reason connected to the purpose it was originally collected or retention of such information is no longer necessary for any other legal or business purposes, we will take reasonable steps to destroy or permanently de-identify the information, unless the information is contained in a Commonwealth record or we are required by law, or a court/tribunal order, to retain the information. In deciding how long to retain your Personal Information, we consider the purpose for which it was collected, the nature of the information (including whether it is sensitive information), our legal, tax, accounting and regulatory obligations, and whether we need the information to resolve or defend a complaint, dispute or claim. We retain the information only for as long as those purposes require.

4.6 If deletion is not possible, then we will securely store and isolate your Personal Information from any further processing.

5. Access to, and correction of, Personal Information

Access to Personal Information

5.1 You may request access to Personal Information we hold about you by contacting our Privacy Officer in accordance with the contact details set out at the end of this policy in section 9.

5.2 We will respond to a request for access within a reasonable time and give you access in the manner that you requested, if it is reasonable and practicable to do so.

5.3 We may need to verify your identity before we give you access to your Personal Information. Depending on the nature of the request, we may charge you a fee to cover our reasonable costs in providing access to that information.

5.4 If there is an exception in the applicable Privacy Laws or another applicable privacy law applies, for example, if providing this access may disclose information about another person and have an unreasonable impact on their privacy, we may need to refuse to grant you access.

Correct Information

5.5 We take reasonable steps to ensure that all Personal Information we store about you is accurate, however, it is your responsibility to maintain the accuracy and completeness of your Personal Information and your failure to do so may impact our ability to undertake our various business functions, including delivering services.

5.6 You may request that we correct any information about you which you think is inaccurate, incomplete or out of date. Please contact us using the contact details in section 9 at any time and ask for a correction. We will respond to a correction request within a reasonable time.

5.7 If we correct your Personal Information that we have previously disclosed to another entity, and you ask us to tell the other entity about the correction, we will take reasonable steps to tell the other entity about the correction, unless it is impractical or unlawful to do so.

Refusal to allow access to, or correction of, Personal Information

5.8 If we refuse to allow you access to your Personal Information or to correct that information, then we will provide you with the reasons for our decision and will inform you of mechanisms available to complain about the refusal.

6. Anonymity

You have the option to remain anonymous, or to use a pseudonym when dealing with us where it is lawful and practical to do so. However, without your Personal Information we may not be able to provide you with our products and services.

7. Withdrawing Consent

7.1 You can opt out from receiving our marketing communications or further communications at any time by contacting us directly at legal@unifiedmusicgroup.com or following any 'opt out' or 'unsubscribe' features that may be displayed in our emails from time to time.

7.2 You may request to have your Personal Information deleted or withdraw your consent for our use of your Personal Information by contacting us at legal@unifiedmusicgroup.com and, within a reasonable time, we will no longer collect, use and/or disclose your Personal Information, except to the extent that we retain your Personal Information for compliance, regulatory or other legal purposes.

7.3 You acknowledge and agree that if you withdraw your consent for us to use, store and process your Personal Information, we may no longer be able to provide you with the services made available via our Websites.

8. Your Data Protection Rights

Depending on where you live and the Privacy Laws that apply to you, you may have the following rights:

  • The right to access - you have the right to request us for copies of your Personal Information.
  • The right to rectification - you may request for us to correct any information you believe is inaccurate.
  • The right to erasure - you may request that we erase your Personal Information.
  • The right to restrict or object to processing - you have the right to object or request that we restrict our processing of your Personal Information, under certain conditions.
  • The right to data portability - you have the right to request that we transfer the data that we have collected to another organisation or directly to you, under certain conditions.
  • The right to withdraw consent - where we rely on your consent to collect, use or disclose your Personal Information, you may withdraw that consent at any time by contacting our Privacy Officer, without affecting anything done before the withdrawal.
  • The right to complain - you have the right to complain to us and, if you are not satisfied with our response, to the relevant privacy regulator (see section 9).

9. Contact

Privacy Officer

9.1 If you have any questions in relation to our Privacy Policy or complaints about our privacy practices, or if you would like further information, please contact our Privacy Officer:

Privacy Officer

Mail: 51 Wangaratta St, Richmond VIC 3121 Australia

Email: legal@unifiedmusicgroup.com

9.2 When contacting us please provide as much detail as possible in relation to your question, comment or complaint. We will take any privacy complaint seriously and any complaint will be assessed with the aim of resolving any issue in a timely and efficient manner.

External complaint mechanism (AU)

9.3 If you are a resident of Australia and you are not happy with the outcome of the Privacy Officer’s investigation or we have not replied to you within 30 days, then you can raise your concern with:

The Office of the Australian Information Commissioner

Telephone: 1300 363 992

Mail: Office of the Australian Information Commissioner

GPO Box 5218 Sydney NSW 2001

Online: https://www.oaic.gov.au/privacy/privacy-complaints/

10. GDPR

10.1 This section applies where the GDPR or the UK GDPR applies to your Personal Information, and prevails to the extent of any inconsistency with the rest of this Privacy Policy.

10.2 In this section, references to Personal Information include personal data, and references to sensitive information include special categories of personal data, as those terms are defined in the GDPR. Where we rely on your consent to process special categories of personal data, we will obtain your explicit consent.

10.3 UNIFIED Recorded Music Pty Ltd (ACN 668 630 304) atf URM Trust t/a Community Music is the controller of your Personal Information.

10.4 Our legal bases for the uses and disclosures in section 3 are:

  • (a) performance of a contract with you, or pre-contractual steps taken at your request;
  • (b) your consent, including for direct marketing, non-essential cookies, Third-Party Platform Marketing and sensitive information;
  • (c) our legitimate interests in operating, securing and improving our Websites and services, preventing fraud and administering our business, unless overridden by your rights; and
  • (d) compliance with our legal obligations.

10.5 Where we need your Personal Information in order to enter into or perform a contract with you, or to comply with a legal obligation, we will tell you at the time of collection. If you do not provide it, we may be unable to provide our products or services to you.

10.6 We do not use automated decision-making, including profiling, that significantly affects you.

10.7 Where we disclose your Personal Information overseas under section 3.10 to a country without an adequacy decision, we will put in place an appropriate safeguard permitted under Chapter V of the GDPR, such as standard contractual clauses. You may request details of the safeguard from our Privacy Officer.

10.8 We will respond to requests under section 8 within one month, and the first copy is free. We may extend by up to two months for complex or repeated requests, and will tell you if we do.

10.9 We will notify the competent supervisory authority of a personal data breach within 72 hours where it is likely to risk your rights and freedoms, and will notify you without undue delay where the risk to you is high.

10.10 You may also complain to the supervisory authority where you live or work, or where the alleged infringement occurred, or to the UK Information Commissioner's Office. Section 9.3 sets out the equivalent mechanism for Australian residents.