Legal
Privacy Policy
Data Collection, Use & Protection — Maze Media Ltd. | June 2025
Maze Media Ltd. (“we,” “us,” or “our”) is committed to protecting the privacy and personal data of everyone who interacts with us — including artists, clients, employees, website visitors, investors, and business partners. This Privacy Policy explains how we collect, use, store, share, and protect personal information, in compliance with the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation 2019 (NDPR), and, where applicable, the California Consumer Privacy Act (CCPA) and other US state privacy laws.
1. Who We Are (Data Controller)
Maze Media Ltd. is the Data Controller for personal information processed in connection with our services. Our Data Protection contact is: info@mazemedia.com.ng | Lagos, Nigeria.
2. What Personal Data We Collect
| Category | Examples |
|---|---|
| Identity Data | Full name, date of birth, nationality, gender, NIN/BVN (where required by law) |
| Contact Data | Email address, phone number, postal address, social media handles |
| Financial Data | Bank account details, payment history, royalty statements (for payroll and fee processing only) |
| Professional Data | Artist portfolio, performance history, streaming metrics, media coverage, contract history |
| Technical Data | IP address, browser type, device ID, cookies (when using Maze Media's digital platforms) |
| Communications | Emails, messages, meeting notes, call recordings (where consent is given) |
| Usage Data | Platform interaction data, feature usage, login times (for SaaS platform users) |
| Sensitive Data | Health data (only for employee welfare purposes, with explicit consent) |
3. How We Collect Your Data
- Directly from you: when you sign contracts, submit enquiries, onboard as an artist or employee;
- From third parties: streaming platforms (Spotify, Apple Music, YouTube), performing rights organisations, social media platforms;
- Automatically: via cookies and analytics tools on our digital platforms.
4. Why We Process Your Data (Legal Basis)
| Purpose | Legal Basis |
|---|---|
| Providing services under a contract | Performance of contract |
| Payroll, tax compliance, statutory filings | Legal obligation |
| Marketing communications (with opt-in) | Consent |
| Business development, analytics, reporting | Legitimate interests |
| Dispute resolution, legal claims | Legal obligation / Legitimate interests |
| Processing sensitive data (e.g., health) | Explicit consent |
5. How We Share Your Data
We do not sell your personal data.
We may share your data with:
- Service providers: accountants, lawyers, IT vendors, cloud storage providers (all bound by data processing agreements);
- Music industry partners: streaming platforms, PROs (COSON, MCSK, PPL, etc.), distributors, TV/radio stations — for the purpose of promoting your music;
- Investors or acquirers: in the context of due diligence (anonymised or under NDA where possible);
- Regulatory authorities: FIRS, CAC, NITDA, law enforcement — where required by law;
- International recipients: where data is transferred outside Nigeria or the US, we ensure adequate safeguards are in place consistent with NDPA requirements.
6. Data Retention
We retain personal data only as long as necessary for the purposes set out in this Policy, or as required by law:
| Data Type | Retention Period |
|---|---|
| Employment records | 7 years after employment ends |
| Artist/client contracts | Duration of contract + 7 years |
| Financial records | 7 years (FIRS compliance) |
| Marketing data | Until consent is withdrawn or 3 years of inactivity |
| Platform usage logs | 12 months |
7. Your Rights
Under the NDPA (and CCPA for US-based individuals), you have the following rights:
- Right to access: request a copy of your personal data we hold;
- Right to rectification: correct inaccurate or incomplete data;
- Right to erasure: request deletion of your data (subject to legal retention obligations);
- Right to restrict processing: limit how we use your data in certain circumstances;
- Right to data portability: receive your data in a structured, machine-readable format;
- Right to object: object to processing based on legitimate interests;
- Right to withdraw consent: at any time, where processing is based on consent;
- Right to lodge a complaint: with the Nigeria Data Protection Commission (NDPC) or your local supervisory authority.
To exercise any of these rights, contact: info@mazemedia.com.ng. We will respond within 30 days.
8. Cookies & Tracking Technologies
Our digital platforms may use cookies, pixels, and similar technologies to enhance functionality and analyse usage. You may control cookie preferences through your browser settings. We do not use cookies to track individuals across third-party websites for advertising purposes.
9. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These include access controls, encryption of sensitive data, regular security assessments, and staff data protection training. In the event of a data breach, we will notify affected parties and the NDPC within 72 hours of becoming aware.
10. Children's Privacy
Our services are not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a minor, we will promptly delete it.
11. Updates to This Policy
We may update this Privacy Policy from time to time. Material updates will be communicated via email or notice on our platforms at least 14 days before taking effect. The current version will always be available at www.mazemedia.com.ng/privacy.
12. Contact & Complaints
Data Protection Contact: info@mazemedia.com.ng | +234 810 293 1307 | Lagos, Nigeria. If you have unresolved concerns, you may contact the Nigeria Data Protection Commission at www.ndpc.gov.ng.
Legal Notice
This document is governed by the Nigeria Data Protection Act 2023 (NDPA), Nigeria Data Protection Regulation 2019 (NDPR), and where applicable, US state privacy laws including CCPA. Maze Media Ltd. recommends review by qualified legal counsel prior to execution of any service agreement.