Privacy Policy

Consultation form (only with your explicit consent): name, email address, contact number, the type of music entity you represent, links to your public profiles/social pages, your preferred consultation date & time, and any optional message you choose to share.

Usage data (only after you accept the consent banner): page visited, referrer, ad-campaign parameters (UTM), and a random pseudonymous session key. We do not collect your IP address, precise location or device fingerprints for analytics.

Cookies: a strictly-necessary session cookie is used only for Holdstill team members signing into the internal CRM. Your consent-banner choice is stored on your own device. No advertising cookies are set unless and until the Meta Pixel is activated, which also only runs after you accept the consent banner.

We process your personal data on the basis of your free, specific, informed and unambiguous consent (Section 6, DPDP Act), given via the checkbox on our consultation form and/or the consent banner. Purposes are limited to: (a) scheduling and conducting your free consultation; (b) contacting you about your enquiry; (c) understanding how visitors use the site so we can improve it; and (d) measuring ad-campaign performance where applicable.

We do not use your data for any purpose beyond what you consented to, and we do not sell personal data.

Data is stored in an access-controlled database and transmitted over encrypted (HTTPS/TLS) connections. Access is restricted to authorised Holdstill Records team members who sign in with verified Google accounts. We apply reasonable security safeguards as required by Section 8 of the DPDP Act to prevent personal data breach, and data minimisation is practised throughout — we only ask for what we actually need.

We retain consultation data only for as long as needed to serve your enquiry and our business relationship. If you request erasure, or when the data is no longer necessary for its stated purpose, it is deleted from our systems.

Your data is not sold or rented. It may be processed by our infrastructure providers (secure cloud hosting) strictly on our instructions. If Meta advertising measurement is active and you have accepted the consent banner, anonymised conversion events (e.g. “a lead was submitted”) are shared with Meta Platforms — you can decline this entirely via the consent banner. Embedded Instagram content on our site is loaded from Instagram and is subject to Meta's own terms when you interact with it.

You have the right to:

• Access — request a summary of the personal data we hold about you.
• Correction & erasure — have inaccurate data corrected or your data deleted.
• Withdraw consent — at any time, as easily as it was given; we will stop processing on withdrawal.
• Grievance redressal — have your concerns addressed by us, and escalate to the Data Protection Board of India if unresolved.
• Nominate — appoint another individual to exercise your rights in case of death or incapacity.

To exercise any right, email info@holdstill.in with the subject “Data Request”. We respond to verified requests within a reasonable timeframe.

Grievance / Data Protection contact: Holdstill Records — info@holdstill.in. If you are not satisfied with our response, you may approach the Data Protection Board of India under the DPDP Act, 2023.

Our services are directed at artists and music businesses. We do not knowingly process personal data of children (under 18) without verifiable parental consent, as required by Section 9 of the DPDP Act.

We may update this policy as our services or the law evolve. Material changes will be reflected here with a new version number and, where required, fresh consent will be sought.