1.Data controller
1.1The data controller responsible for personal data processed through z3nastore.com (the "Store") is Z3NA Beats Ltd, a company incorporated in the Federal Republic of Nigeria ("Z3NA Beats Ltd", "we", "us" or "our").
1.2Questions, requests and complaints about this Policy or our handling of personal data may be sent to support@z3nastore.com.
2.Personal data we collect
2.1When you place an order: your legal name; your artist or professional name, if provided; your email address; your postal address, where required for an exclusive License Agreement; your social media handle or link, if you provide it; and the details of your order, including the Beat, license type, price, currency, receipt number, license number and the country from which payment was made.
2.2Payment data: payments are processed by our payment provider. We receive confirmation of payment, a payment reference and the amount and currency, but we do not receive or store your full card or bank account details.
2.3When you contact us: your name, email address and the content of any message, beat request, offer or booking request you submit.
2.4When you browse: pseudonymised usage data about pages visited and previews played, together with an approximate city and country derived from your connection by our hosting provider. To count unique listeners without identifying you, your IP address and browser information are converted into a one-way code that changes every day. We do not store your IP address in our analytics.
2.5We do not knowingly collect special categories of personal data, and we do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
3.Purposes and lawful bases
3.1We process personal data only where we have a lawful basis to do so, as follows:
(a)Performance of a contract: to process your order, issue and deliver your License Agreement, files and receipt, issue replacement download links, process upgrades, and provide support.
(b)Legal obligation: to keep accounting and tax records, and to comply with lawful requests from authorities.
(c)Legitimate interests: to maintain a permanent record of every License Agreement so that its validity can be verified by you and by third parties such as distributors, labels and platforms; to provide License Agreements to co-producers so that they can register the composition; to get to know the artists who license our Beats, using any social media handle or link you provide; to prevent fraud and enforce our rights; to measure use of the Store in pseudonymised form; to send one reminder about an unfinished checkout; and to include a one-time discount offer with a purchase confirmation.
(d)Consent: where we ask for it, which you may withdraw at any time without affecting processing carried out before withdrawal.
4.License verification
4.1License Agreements are publicly verifiable. Any person who enters a valid license number on the verification page can see the license status, the Beat, the license type, the issue date and the name of the licensee (your artist name and, where you have not provided one, your legal name). Your email address, postal address and payment details are never displayed.
5.Sharing of personal data
5.1We do not sell, rent or trade personal data. We share it only with:
(a)our payment provider, to process payments, refunds and disputes;
(b)our hosting and infrastructure provider, which hosts the Store and stores our records and files;
(c)our email provider, which delivers transactional emails such as License Agreements and receipts;
(d)any co-producer named in your License Agreement, who receives a copy of it to register the composition with collection societies, as the License Agreement requires;
(e)professional advisers, where reasonably necessary; and
(f)courts, regulators, law enforcement or other authorities, where required by law or to establish, exercise or defend legal claims.
5.2Our service providers act on our instructions and are required to protect personal data appropriately.
6.International transfers
6.1Our service providers may process personal data outside Nigeria. Where personal data is transferred outside Nigeria, we rely on the adequacy of the protection provided in the recipient jurisdiction or on appropriate safeguards, such as contractual commitments, in accordance with the Nigeria Data Protection Act 2023, or on another lawful basis for transfer, including the performance of your contract with us.
7.Retention
7.1We retain personal data only for as long as necessary for the purposes described in this Policy:
(a)License, order and payment records are retained for the life of the License Agreement, which for most license types is perpetual, so that it remains verifiable, and in any event for at least six (6) years for tax and accounting purposes.
(b)Unfinished checkouts are retained for as long as reasonably necessary to follow up on the checkout and to understand how the Store is used.
(c)Messages, offers and booking requests are retained for as long as reasonably necessary to deal with them and any follow-up, and longer where they lead to an order or a dispute.
(d)Usage data is retained in pseudonymised form only and may be kept in aggregated form indefinitely.
8.Cookies and similar technologies
8.1The Store does not use advertising or third-party tracking cookies. It uses:
(a)browser storage on your device to remember your preferences, such as currency, sound settings, saved Beats and any discount code you have applied; and
(b)a single cookie, set only when you arrive from a link carrying a time-limited offer, to apply that offer.
8.2These technologies are necessary to provide the features you request. You may clear them at any time through your browser settings, although some features may then not work as intended.
9.Your rights
9.1Subject to applicable law, you have the right to: be informed about how your personal data is processed; access your personal data and obtain a copy of it; have inaccurate data corrected; have your data erased where it is no longer necessary or there is no lawful basis for keeping it; restrict or object to processing, including processing based on legitimate interests and any direct marketing; withdraw consent; and receive your data in a portable format.
9.2Because License Agreements must remain verifiable, we may be unable to erase a License Agreement record while the license subsists, but we will correct inaccurate information on request.
9.3To exercise any right, email support@z3nastore.com. We may need to verify your identity, and will respond within the period required by law.
9.4If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission or with the data protection authority in your country.
10.Security
10.1We use appropriate technical and organisational measures to protect personal data, including encrypted connections, restricted access to administrative systems and secure download links. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Where a personal data breach is likely to result in a high risk to you, we will notify you and the relevant authority as required by law.
11.Children
11.1The Store is not directed at persons under eighteen (18) years of age. We do not knowingly collect personal data from such persons without the consent of a parent or guardian. If you believe a child has provided personal data to us, please contact us and we will delete it.
12.Changes to this Policy
12.1We may update this Policy from time to time. The revised Policy will be published on this page with a new date, and material changes will take effect from that date.
13.Contact
13.1Z3NA Beats Ltd, Nigeria. Email: support@z3nastore.com.