1. Who we are and what this policy covers
This Privacy Policy explains how CIPHER COLLECTIVE EVENTS L.L.C (“Supersonik”, “we”) collects and uses personal data through the website supersonik.co (the “Website”), the Supersonik music-management platform (the “Platform”), and our consulting, curation and licensing coordination services.
Supersonik serves businesses — hotels, hospitality groups and venues — not consumers. The people whose data we handle are mainly our customers’ staff, prospective customers’ contacts, and Website visitors. We do not collect data about guests in our customers’ venues, and the Platform does not use microphones, cameras or guest tracking.
Our role.
| Situation | Supersonik’s role |
|---|---|
| Website visitors, enquiries, sales and marketing contacts | Controller |
| Customer account, billing and contract records | Controller |
| Platform data entered by customers about their Authorised Users and venues | Processor, acting on the customer’s instructions under its service agreement |
| Security, fraud prevention and service improvement using Platform usage data | Controller |
2. Personal data we collect
| Category | Examples | Source |
|---|---|---|
| Contact and enquiry data | Name, company or property, job title, email, phone, service interest, notes about your spaces | You, when you email us, send us an enquiry brief, or meet us |
| Account data | Name, work email, role, organisation, assigned properties and zones, login and authentication records | You or your organisation’s administrator |
| Venue and configuration data | Property names, addresses, timezones, zones, schedules, Ramadan and special-date settings, automation rules | Your organisation |
| Platform activity and audit data | Actions taken (e.g. playlist changes, manual overrides, role changes), timestamps, IP address, device and browser type, execution logs | Generated automatically when you use the Platform |
| Music Provider data | Account, location, device and playlist identifiers, playback status | Selected Music Provider via its API |
| Billing data | Billing contact, invoices, payment status, tax registration number | Your organisation; payment providers |
| Licensing coordination data | Venue category, room or seat count, music-use details, licence certificates and correspondence | Your organisation; collective management organisations |
| Website usage data | Pages viewed, referrer, approximate location, cookie identifiers | Automatically, see section 5 |
The Website’s enquiry builder runs in your browser and downloads a brief to your device; we receive nothing unless you send it to us.
We do not ask for sensitive personal data (such as health, religious beliefs or biometric data). Prayer-time and Ramadan settings relate to venue operations, not to any individual’s beliefs. We never store payment card numbers on our systems.
3. How we use personal data and why
| Purpose | Legal basis |
|---|---|
| Respond to enquiries, prepare proposals, run discovery and audits | Steps at your request before a contract; our legitimate business interest |
| Create and manage accounts, roles and access to properties and zones | Performance of the customer contract |
| Connect to the Music Provider, run schedules and automation, show playback status | Performance of the customer contract |
| Curate playlists and deliver sonic branding services | Performance of the customer contract |
| Coordinate music licensing and track renewals | Performance of the customer contract; compliance with legal obligations |
| Invoice, collect payment and keep financial records | Performance of the contract; legal and tax obligations |
| Keep audit logs, secure the Platform, detect misuse and keep tenants separated | Legitimate interest in a secure service; legal obligations |
| Provide support and service notices | Performance of the contract |
| Improve the Platform using aggregated or de-identified usage data | Legitimate interest |
| Send marketing about our services to business contacts | Consent where required; you can opt out at any time |
We do not sell personal data and do not use it for automated decisions that have legal or similarly significant effects on individuals.
6. Your rights and how to contact us
Your rights. Depending on applicable law, you can ask to access, correct, delete or restrict processing of your personal data, object to processing, withdraw consent, and receive your data in a portable format. Contact hello@supersonik.co. We reply within 30 days and may need to verify your identity.
If your data is in the Platform because your employer is our customer, we may refer your request to that customer, as they control that data. You can also complain to the UAE Data Office or the regulator that applies to you.
Children. Our services are for businesses and are not directed at anyone under 18. We do not knowingly collect their personal data.
Changes. We will post updates here with a new effective date and notify customer administrators of material changes.
Contact. CIPHER COLLECTIVE EVENTS L.L.C, hello@supersonik.co.
Effective date: 5 November 2026