NMR legal

Privacy notice

Transparent product draft · 20 August 2026

Counsel and Information Officer review required. This draft maps the current product; it is not the final POPIA notice until NMR’s legal entity, providers, retention periods, cross-border transfers and contact details are confirmed.

What NMR collects

Account and contact details; legal creator identity and artist personas; works, recordings, credits, splits and identifiers; agreements and payment evidence you upload; society workflow references; subscription records; and security/audit events.

Why we use it

To provide creator identity, catalog, agreement, split, registration, publishing-administration, support, security, billing, evidence and reporting functions requested through NMR Rights.

Creator and collaborator data

A customer may add a collaborator's name, role, contact details and proposed share. NMR uses that information to request confirmation, record a split, resolve a dispute, or prepare an authorized rights workflow.

Young creators

NMR uses age-band information to apply safety restrictions. Where required, a parent or guardian must approve before a young creator signs, submits outside notices, or enters another binding workflow.

Service providers

NMR may use contracted infrastructure, storage, transactional email, authentication, payment and support providers. They should receive only the data needed to perform their function under appropriate safeguards.

Rights organizations and platforms

NMR shares registration data with a society, identifier agency, distributor or platform only when an authorized workflow requires it. Their own privacy terms apply once data reaches them.

Storage and security

Private files must be held in access-controlled storage. NMR uses authenticated access, audit records, rate limits, encrypted transport and operational controls, while no online service can promise absolute security.

Retention

Rights, contract, financial and submission evidence may need to remain available for legal, accounting, dispute and audit periods. NMR should define and publish a retention schedule before public launch.

Your choices and rights

Subject to applicable law, you may ask to access, correct, object to, restrict, export or delete personal information. Some evidence cannot be erased immediately where NMR must retain it for legal claims, accounting or fraud prevention.

Contact and regulator

Privacy requests can be submitted through the NMR Contact page. The final notice must identify NMR's legal entity, Information Officer details, service address, and any right to complain to South Africa's Information Regulator.