ERIK CMS - Privacy Policy & Data Retention Policy
Platform Owner and Operator: ERIK Business Consultancy Services LLP (“Erik”)
Date: 1 November 2026
1.Introduction
1.1This privacy policy (“Privacy Policy”) and data retention policy (“Retention Policy”) read together and referred to as (“Policy”) govern Erik’s processing of Personal Data through ERIK CMS, including its App, website, dashboard, web application and associated tools and functionalities (collectively, the “Platform”). It forms part of the contractual framework under the ERIK CMS Terms of Service (“Terms”) and shall be read with the Terms and applicable Underlying Agreement. Capitalised terms not defined herein have the meanings given in the Terms.
1.2The Platform is intended only for authorised persons or entities that have entered into an Underlying Agreement with Erik, and their authorised representatives.
1.3By registering for, accessing or using the Platform, You acknowledge that You have read and understood this Policy and consent to the processing of Your Personal Data as outlined herein. If You do not agree, You shall not use the Platform.
2.Definitions
For the purposes of this Policy, unless the context otherwise requires:
2.1“Personal Data” means any data about an individual who is identifiable by or in relation to that data, which Erik processes in connection with the Platform.
2.2“Third Party Personal Data” means Personal Data of any individual other than You, including artists, performers, writers, producers, featured artists and other contributors whose name, credit, image, likeness, voice or performance appears in Your Content or in any information You submit.
2.3“Grievance Officer” means the person identified in Clause 8.5.
2.4“process” and “processing” mean any operation performed on Personal Data, including collection, recording, storage, use, adaptation, retrieval, sharing, disclosure, transmission, restriction, erasure and destruction.
3.Personal Data Erik Processes
3.1Erik may process the following Personal Data, whether provided by You, generated through Your use of the Platform, or received from Your Organisation, DSPs, verification, payment or other service providers or other third party systems:
a.Account and contact details: name, login ID, email address, mobile number, Organisation and role;
b.Verification records: information and documents provided or obtained to satisfy Verification Requirements;
c.Authentication and security data: password and authentication data, one-time password and other verification records, account activity, access records and security logs;
d.Content and related information: Your Content, including uploaded audio, artwork, metadata, release details, contributor names and credits, and instructions concerning delivery, updates or takedowns;
e.Communications and activity records: support requests, correspondence, records of consent or acceptance, and Platform instructions; and
f.Financial and statutory records: royalty statements, payment details, invoices, and accounting and tax records.
3.2This list is illustrative and not exhaustive, and extends to any other Personal Data that You or Your Organisation submit or that is generated through the Platform.
4.Your Responsibilities for Personal Data
4.1You shall provide accurate, complete and current Personal Data in accordance with the Terms. Erik may rely on all information submitted through the Platform and is not responsible for its inaccuracy or incompleteness.
4.2You are solely responsible for all Third Party Personal Data that You submit. You represent and warrant that You have given all notices and obtained all consents, permissions and releases required under applicable law and the Terms for Erik and the recipients described in Clause 6 to process that Third Party Personal Data for the purposes in this Privacy Policy. Erik has no obligation to verify any such notice, consent, permission or release, or to give notice to or obtain consent from any such individual.
4.3The Platform is not intended for individuals under 18 (Eighteen) years of age. You shall not submit Personal Data of any individual under 18 (Eighteen) years of age unless You have obtained every consent required by applicable law, including from the parent or lawful guardian, and You are solely responsible for doing so.
5.Purposes of Processing
5.1Erik may process Personal Data to create and administer accounts; verify users and their authority; operate, maintain and secure ERIK CMS; host and manage Content and related metadata; carry out delivery, update and takedown instructions; provide statements and payment records; respond to requests and maintain Platform records; investigate misuse, infringement, fraud or security incidents; and meet legal, regulatory, tax, accounting, DSP and contractual obligations or establish, exercise or defend legal claims and for any purpose incidental to them.
6.Hosting, Disclosure and Sharing
6.1Erik may host and manage the Platform itself or use other service providers, and may change them at any time.
6.2Erik may disclose Personal Data to:
a.authorised representatives and administrators of Your Organisation, in accordance with the Terms;
b.DSPs, for delivery of Your Content under the Underlying Agreement;
c.Erik’s affiliates, service providers and contractors that process Personal Data on Erik’s behalf for hosting, storage, security, communications, verification, payment or accounting services;
d.professional advisers and any person to whom Erik assigns or transfers its rights, obligations or business; and
e.courts, regulators, public authorities and other persons where required or permitted by law, or where necessary to protect Erik’s rights, investigate suspected Improper Activities, or establish or defend legal claims.
6.3For the purposes of the Underlying Agreement and the Terms, DSPs and other recipients process Personal Data as independent parties under their own terms and policies, wherever located. Erik does not control, and is not responsible for, their use, retention, display or removal of Personal Data after delivery or disclosure.
7.Security
7.1You are responsible for Your login credentials in accordance with the Terms, and Erik is not liable for any unauthorised access as set out in that Clause.
7.2Erik implements the security measures required by applicable law. No method of transmission or storage is completely secure, and Erik does not guarantee absolute security. You submit Personal Data at Your own risk.
7.3Erik may treat any instruction received through an authenticated account or valid credential as authorised by You, and may apply fraud, risk and security controls but is not obliged to do so.
7.4Where required by applicable law, Erik may notify You, affected individuals and authorities of a personal data breach as per the process outlined in the Terms.
8.Requests
8.1You may request access to, correction, completion or erasure of Your Personal Data, or raise a grievance, by contacting the Grievance Officer subject to the Terms and the Policy.
8.2Withdrawal of consent does not affect prior processing. Erik may suspend or terminate Your access to the Platform and continue processing Personal Data where required or permitted by applicable law or necessary for the Underlying Agreement.
8.3Erik may verify a requester’s identity and decline, defer or limit a request to the extent permitted by applicable law, including where Personal Data is retained under the Retention Policy or for the Underlying Agreement, the rights of others or operation of the Platform.
8.4Erik is not responsible for changing or deleting Personal Data held by a DSP or other recipient. You must contact them directly.
8.5The Grievance Officer is:
Name: Deepak Bali
Email: grievance@erik.co.in
9.Liability and Indemnity
9.1Erik is not liable for:
a.the acts or omissions of DSPs, Your Organisation, its administrators or any other third party;
b.inaccurate, incomplete or unlawfully submitted Personal Data, including Third Party Personal Data;
c.any disclosure made in accordance with this Privacy Policy, or any access by a person using Your credentials; or
d.any event described in the Terms.
9.2The Terms apply to any claim arising from Personal Data that You submit or from Your breach of this Privacy Policy.
10.Data Retention
10.1Erik retains Personal Data for as long as Erik considers necessary for the purposes stated in the Privacy Policy, the Terms or the Underlying Agreement, or as required by applicable law or for the establishment, exercise or defence of legal claims. Erik does not apply one retention period to every record.
11.Retention by Record Type
11.1Erik retains Personal Data as follows:
a.Account, login and verification records: while the account or relationship is active and afterwards as Erik considers necessary for security, contractual, legal or claims purposes;
b.Passwords and authentication data: as needed to authenticate users and secure accounts;
c.Content, files, metadata, credits and instructions: as needed to operate the Platform, administer rights and royalties, evidence instructions, resolve disputes or meet legal obligations;
d.Royalty, payment, accounting and tax records: for the periods required by applicable law and as necessary for accounting, audit or claims;
e.Security logs and access records: for the period required by applicable law and in any case not less than 1 (one) year, and for any longer period that Erik considers necessary for security purposes; and
f.Support, acceptance and correspondence records: as needed to respond to requests, evidence Platform activity, administer agreements or meet legal obligations.
12.Backups, Closure and Deletion
12.1Erik makes backups and retains them in accordance with applicable laws and its backup processes. Personal Data in backups may remain until the backups are overwritten or purged.
12.2Closing or suspending Platform access does not itself terminate the Underlying Agreement or require immediate deletion of any data. Erik may retain, return, restrict access to, remove or delete Your Content and Personal Data as provided in the Terms.
12.3When Personal Data is no longer required, Erik may delete or anonymise it at the time and in the manner determined by Erik, subject to the retention periods in this Retention Policy.
12.4You are responsible for keeping copies of Your Content and records that You may need, in accordance with the Terms.
13.General Terms
13.1Erik may amend this Policy at any time and shall make the current version available through the Platform or Erik’s designated website. The Terms apply to amendments to this Policy as it applies to amendments to the Terms.
13.2This Policy is governed by the laws of India, and the courts at Mumbai, Maharashtra, shall have exclusive jurisdiction over disputes arising out of or relating to it.
13.3This Policy continues to apply for as long as Erik retains Personal Data, including after expiry or termination of the Terms or the Underlying Agreement.