Cookie Policy

Who this covers

This policy applies to Canada Music Group (“CMG”, “we”, “us”) and covers our website and the Distribution Portal, including pages for CMG Records, CMG Distribution and CMG Publishing. It should be read together with our Privacy Policy, which explains how we handle personal information more generally.

What cookies are

Cookies are small files that a website places on your device. Similar technologies, such as local storage, tracking pixels and scripts, do the same kind of job in different ways. In this policy we call all of them “cookies” unless we need to be specific.

Some cookies are set by us (first-party). Others are set by companies whose tools we use, such as Google, Meta and TikTok (third-party).

What we use

Essential cookies and your display setting

Essential cookies keep the Distribution Portal secure and signed in. You cannot switch them off in our settings, because the portal would stop working. You can still block them in your browser, but sign-in will fail.

Your light or dark mode choice is stored only on your device. Deleting local storage in your browser resets it.

Google Tag Manager

Google Tag Manager is a tool that loads other tags on our pages. It does not collect information for its own sake, but when it loads a tag, that tag works as described in this policy. Google can see your IP address when your browser fetches Tag Manager.

Google Analytics

We use Google Analytics to count visits and to learn which pages, links and devices are used most. It sets cookies or similar identifiers that recognise your browser and record things like the pages you view, how long you stay, the type of device and browser, and your approximate location based on your IP address.

We use this to improve the site. We do not use it to identify you by name. Google processes the data under its own privacy policy.

Meta Pixel and TikTok Pixel

A pixel is a small piece of code that tells Meta (Facebook and Instagram) or TikTok that a visit to our site took place. We use them to measure how well our advertising works, to build groups of visitors we can show relevant ads to, and to find people who may be interested in our music and services.

These tools may link a visit to your account on Meta or TikTok if you are signed in there. That can involve information about the pages you view and actions you take on our site. Meta and TikTok use that information under their own policies, and may also use it for their own purposes.

Because these tools are used for advertising, we ask for your consent before they run where the law requires it.

Embedded YouTube videos

Some pages show videos from our YouTube channel. When such a page loads, or when you play a video, YouTube (owned by Google) can receive your IP address and set its own cookies or similar identifiers. If you are signed in to YouTube, it may link your viewing to your account.

You can avoid this by not playing the videos, or by watching them directly on YouTube under your own settings.

Google Fonts

Some pages load fonts from Google Fonts. To do this, your browser contacts Google’s servers, and Google can see your IP address and basic browser details.

Consent

In places where the law requires it, such as the European Economic Area and the United Kingdom, we ask for your consent before analytics, advertising pixels and similar tools run. Essential cookies do not need consent. In other places, we still give you the controls described below.

You may change your mind at any time. Clearing the cookies in your browser removes your saved choice, so you will be asked again on your next visit. You can also write to us using the contact details below.

How to control cookies

• Browser settings: Chrome, Edge, Firefox and Safari let you see, block or delete cookies and local storage, usually under Privacy or Privacy and Security. Private browsing clears them when you close the window.
• Google Analytics: Google offers a browser add-on that stops your data from being used by Google Analytics.
• Meta and TikTok ads: Each platform has ad settings in your account, where you can limit how information from other websites is used to show you ads.
• YouTube: Manage your history and ad personalisation in your Google account settings.

Blocking essential cookies may stop the Distribution Portal from working properly.

How long cookies last

Some cookies, called session cookies, disappear when you close your browser. Others, called persistent cookies, stay for a set period or until you delete them. The period is set by the company that places the cookie, and it can change. Your browser’s settings show the cookies currently stored on your device.

Other companies and their policies

Google, Meta, TikTok and YouTube act under their own terms and privacy policies. We are not responsible for how they handle your information, and we encourage you to read their policies. Where they receive information through our pages, we choose the settings we can, and we share only what the tool needs to work.

Personal information

Cookies can involve personal information, such as your IP address or an online identifier. How we handle personal information, and the rights you have over it, are explained in our Privacy Policy.

Key terms

Why we use cookies

We use cookies for four reasons. First, to make the website and the Distribution Portal work and stay secure. Second, to remember simple choices, such as light or dark mode. Third, to understand how people use our pages so that we can make them clearer and faster. Fourth, to measure and run our advertising, so that we spend our marketing effort where it helps artists and songwriters find us.

We do not use cookies to read your private messages, to look at your files, or to sell personal information.

What information these tools can see

The tools described in this policy can generally receive some or all of the following when you visit a page:

• Your IP address, which can show your approximate location.
• The page you viewed, the page you came from and the links you clicked.
• The type of device, operating system, browser and screen size you use.
• A cookie or other identifier that lets the tool recognise your browser on a later visit.
• The time and length of your visit.
• If you are signed in to Google, Meta or TikTok in the same browser, that company may be able to link the visit to your account.

We do not place your password, bank details or royalty information in these tools on purpose. If you think a page has done so by mistake, please tell us.

When you are signed in to Google, Meta or TikTok

If you are signed in to one of these services while you browse our site, the company may be able to connect your visit to your account. This is a feature of their tools and depends on your settings with them. You can reduce it by signing out, using a separate browser profile, or changing the privacy and ad settings in your account with each company.

Purposes at a glance

Visitors and account holders

Most cookies described here apply to anyone who opens our public pages. The sign-in and security cookies apply only when you use the Distribution Portal. If you hold an account, the information a tool collects about your browsing is separate from your account records, but it may be matched to your account if you sign in while the tool is running. We explain how we handle account information in our Privacy Policy.

Our reasons under the law

Where privacy law asks us to name a reason for using cookies, we rely on the following:

• Necessity: for essential cookies that the portal needs in order to work and stay secure.
• Consent: for analytics, advertising pixels and other non-essential tools, where the law requires consent. You can withdraw it at any time.
• Legitimate interests: in places where consent is not required, for understanding how our site is used and measuring our marketing, balanced against your rights and expectations.

How to change or withdraw your choice

You can change your mind in three ways. You can clear the cookies for our site in your browser, which removes your saved choice. You can block or delete cookies in your browser settings. Or you can write to us and ask for help. Withdrawing consent does not affect what happened before you withdrew it.

Changes take effect for later visits. Information already collected by Google, Meta or TikTok stays with them until it is removed under their own rules and your settings with them.

Settings in common browsers

• Chrome: open Settings, then Privacy and security, then Third-party cookies or Cookies and other site data.
• Edge: open Settings, then Cookies and site permissions, then Manage and delete cookies and site data.
• Firefox: open Settings, then Privacy & Security, then Cookies and Site Data.
• Safari on Mac: open Settings, then Privacy, then Manage Website Data.
• Safari on iPhone and iPad: open the Settings app, then Safari, then Advanced, then Website Data.
• Android browsers: open the browser menu, then Settings, then Privacy or Site settings.

Menu names change as browsers update. If you cannot find the setting, search the help pages of your browser for “cookies”.

Phones and tablets

On a phone or tablet, our website works the same way as on a computer, and the same cookies apply. Your device may also give you a separate advertising setting, such as limiting ad tracking or resetting your advertising identifier. These settings are controlled by the device maker and are separate from your browser settings.

Shared and public devices

If you use a shared or public computer, use private browsing and sign out of the Distribution Portal when you finish. Cookies saved in a normal window may stay on the device for the next person. Do not let the browser save your password on a device that is not yours.

What happens if you block cookies

If you block analytics and advertising cookies, our public pages still work, and you will not lose access to anything. If you block essential cookies, you may not be able to sign in to the Distribution Portal, or you may be signed out often. If you block local storage, the light and dark mode switch may not remember your choice. If you block YouTube, videos may not play on our pages.

More about our advertising

We advertise our services, and the artists and songwriters we work with, on Meta platforms and TikTok. The pixels help us see which ads lead people to visit our site, so that we can stop spending on ads that do not help. They may also help the platforms show our ads to people who are more likely to be interested.

Seeing an ad for CMG after visiting our site does not mean we know who you are. We work with the platforms’ tools and reports, and we do not receive a list of names from them unless you contact us or give us your details yourself, for example through a form.

More about our analytics

Google Analytics gives us reports about visits, such as the most viewed pages, how visitors arrive, and the countries they come from. We use the reports to decide what to write, fix and improve. We do not use analytics to make decisions about your account, your royalties or your agreements with us.

Where the information goes

Google, Meta and TikTok operate in many countries, so information collected through their tools may be processed outside the country where you live, including outside Indonesia, Canada, the European Economic Area and the United Kingdom. Each company states the protections it applies in its own policies. Our Privacy Policy explains how we approach transfers of personal information more generally.

Selling and sharing

We do not sell personal information in exchange for money. Some privacy laws, such as those of California, treat the use of advertising pixels as “sharing” for cross-context advertising. Because we use Meta and TikTok pixels, you may have rights to opt out of that kind of sharing. To do so, use the controls described in this policy or write to us, and we will help.

Information for specific places

European Economic Area and United Kingdom

We ask for your consent before non-essential cookies run, and you may withdraw it at any time. You also have the rights listed in our Privacy Policy, including the right to complain to your local data protection authority.

California

You may ask us to stop the sharing of your information for cross-context advertising. Write to us and tell us you are making a California opt-out request. We will not treat you differently for doing so.

Canada

We tell you about our use of tracking tools, and you can refuse non-essential cookies in your browser or by writing to us. You may also contact the Office of the Privacy Commissioner of Canada if you have a concern we cannot resolve.

Indonesia

We handle personal information collected through cookies in line with Indonesian personal data protection law. You can ask us about it and exercise your rights using the contact details below.

Browser signals such as Do Not Track

Some browsers send a signal that says you do not want to be tracked. There is no common standard for how websites should respond, so we cannot promise that every tool on our pages will react to such a signal. The browser and consent controls described in this policy are the most reliable ways to limit tracking.

How we keep this policy accurate

We review the tools on our pages from time to time, and when we add or remove a tag. If you see a cookie or tool on our site that this policy does not mention, please tell us. We will check it and update this page if it is correct.

If we add new tools

Before we add a new analytics, advertising or embedded tool that sets cookies, we will update this policy. Where the law requires consent, we will ask for it before the new tool runs.

Common questions

Do you know who I am from cookies?

Not by name. Cookies recognise a browser, not a person. If you are signed in to the Distribution Portal, or you sign in to Google, Meta or TikTok in the same browser, a link to an account may be possible, as explained above.

Can I use the Distribution Portal if I refuse analytics and advertising cookies?

Yes. Only the essential cookies are needed for the portal to work.

Do the YouTube videos track me even if I do not play them?

Loading a page with an embedded video may let YouTube receive your IP address and set identifiers. You can avoid this by blocking YouTube content in your browser.

How do I see which cookies are on my device?

Your browser’s developer tools and privacy settings list cookies by site, with their names and expiry dates.

Who do I ask for help?

Write to us using the details in the contact section. Tell us the page you were on and what you saw.

If you are not happy

Please tell us first, and we will try to put things right. You also have the right to complain to the data protection authority where you live or work. Our Privacy Policy lists the main options.

If you are an artist or songwriter

When you visit our public pages to learn about CMG Records, CMG Distribution or CMG Publishing, the analytics and advertising tools in this policy may run, subject to your consent where the law requires it. When you sign in to the Distribution Portal to upload releases or check statements, only the essential cookies are needed. Information you enter into the portal, such as release details and payment details, is not given to our analytics or advertising tools on purpose.

If you represent a label or a business

The same rules apply to you as to any other visitor. If several people at your company use the same computer or browser, cookies and consent choices are saved per browser, not per person. Each person should use their own browser profile and their own login, and sign out when they finish.

If you are a listener or a fan

If you arrive from a video or an ad to learn about an artist, the cookies in this policy are the ones that may apply. You do not need an account to browse our public pages, and you can refuse non-essential cookies without losing access to them.

If you contact us or apply to work with us

Details you send through a form or an email are handled as described in our Privacy Policy, not as cookie data. Cookies only record that a visit took place and what was viewed, and they do not include the content of your message.

Google Analytics in detail

What it does

It counts visits and records which pages are viewed, how visitors arrive, and what device and browser they use.

What it records

A browser identifier, page views, link clicks, session length, approximate location from the IP address, and technical details about the device.

Who receives it

Google, which provides the service, and us, through reports.

How to refuse it

Decline analytics where we ask for consent, block cookies in your browser, or install Google’s opt-out browser add-on.

Google Tag Manager in detail

What it does

It loads the other tags on our pages when conditions we set are met, such as a page view or a click.

What it records

On its own, it passes technical information to Google when it loads, including your IP address. The tags it loads may record more, as described in their own sections.

How to refuse it

Decline non-essential cookies where we ask, or block Google Tag Manager in your browser or with a content blocker. Blocking it also stops the tags that depend on it.

Meta Pixel in detail

What it does

It tells Meta that a visit to our site took place and what was done there, so we can measure ads on Facebook and Instagram and reach people who may be interested.

What it records

The page viewed, actions on the page, the browser identifier and device details. If you are signed in to Facebook or Instagram, Meta may connect this to your account.

How to refuse it

Decline advertising cookies where we ask, block third-party cookies in your browser, or use the ad preferences in your Facebook or Instagram account to limit information from other websites.

TikTok Pixel in detail

What it does

It tells TikTok that a visit to our site took place, so we can measure our TikTok ads and reach people who may be interested in our services.

What it records

The page viewed, actions on the page, the browser identifier and device details. If you are signed in to TikTok, it may connect this to your account.

How to refuse it

Decline advertising cookies where we ask, block third-party cookies in your browser, or change your ad settings inside the TikTok app.

YouTube embeds in detail

What it does

It shows a video from our YouTube channel inside our page, so you can watch without leaving.

What it records

Your IP address and device details when the video loads, and, if you press play, information about your viewing. If you are signed in to Google, YouTube may connect this to your account.

How to refuse it

Do not play the video, block YouTube content in your browser, or manage your history and ad personalisation in your Google account.

Google Fonts in detail

What it does

It supplies the typefaces we use on some pages.

What it records

Your browser requests the font files from Google, so Google receives your IP address and basic browser details.

How to refuse it

Block Google Fonts in your browser. Our pages then show a default font and still work.

Portal cookies in detail

The Distribution Portal uses cookies to know that you are signed in from one page to the next, and to protect your session against misuse. They are first-party cookies set by us. When you sign out or the session ends, they should stop working. If you notice that you are signed in on a device you no longer use, sign out and change your password.

Local storage in detail

Our light and dark mode switch saves your choice in your browser’s local storage. The value stays on your device. We do not use it to identify you, and clearing your browser data removes it.

Links to other sites

Our pages may link to other websites, such as streaming services, social media pages and the sites of artists. Those sites have their own cookies and policies. This policy does not cover them, and we suggest you read theirs when you arrive.

Keeping cookie information safe

We limit who at CMG can see analytics and advertising reports, and we use the security settings that Google, Meta and TikTok provide for their tools. No system is perfectly secure. If you believe your account has been affected, sign out, change your password and contact us.

How long information is kept

Cookies expire after a period set by their provider, or when you delete them. Reports and data held inside Google Analytics, Meta and TikTok follow the retention settings of those services and the choices we make in them. We review those settings from time to time and keep information no longer than we need it for the purposes in this policy.

Your rights

Depending on where you live, you may have rights over personal information collected through cookies. These can include the right to:

• know what we collect and why;
• ask for a copy of information we hold about you;
• ask us to correct or delete it;
• object to or limit certain uses, including advertising;
• withdraw consent that you gave earlier;
• complain to a data protection authority.

Some information sits with Google, Meta or TikTok rather than with us. In that case, we will point you to the right place. To use any of these rights, write to us using the contact details below.

How we respond to requests

When you write to us about cookies, we may ask for details that help us find the visit or the account you mean, such as the date, the page and the browser. We will not ask for more than we need. We aim to answer within a reasonable time and within any time limit set by the law that applies to you.

Simple ways to protect your privacy online

• Keep your browser and device up to date.
• Use a separate browser profile for work and for personal browsing.
• Sign out of accounts you are not using.
• Review the privacy and ad settings in your Google, Meta and TikTok accounts.
• Use strong, unique passwords, and turn on two-step sign-in where it is offered.
• Be careful with links in messages that ask you to sign in.

Language

This policy is written in English. If we offer a translation, it is for your convenience, and if the two differ, the English version is the one we apply.

Your rights in Indonesia

Under Indonesian personal data protection law, you may ask for access to your personal data, ask us to correct it, ask us to stop processing it or delete it, and withdraw consent you gave. Write to us using the contact details below and tell us which right you want to use.

Your rights in the European Economic Area

You may ask for access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent at any time. You may also complain to the data protection authority in your country.

Your rights in the United Kingdom

You have rights similar to those in the European Economic Area under UK data protection law. You may complain to the Information Commissioner’s Office if you think we have handled your information wrongly.

Your rights in California

You may ask what personal information we collect, ask us to delete or correct it, and opt out of its sale or sharing for cross-context advertising. We will not treat you unfairly for using these rights.

Your rights in Canada

You may ask to see personal information we hold about you, ask us to correct it, and withdraw consent in many cases. If we cannot resolve a concern, you may contact the Office of the Privacy Commissioner of Canada.

Clearing cookies in Chrome

Open the three-dot menu, choose Delete browsing data, tick Cookies and other site data, pick a time range, and confirm. To block cookies for new visits, go to Settings, then Privacy and security, then Third-party cookies.

Clearing cookies in Edge

Open the three-dot menu, choose Settings, then Privacy, search, and services, then Clear browsing data. Tick Cookies and other site data and confirm. Tracking prevention settings are on the same page.

Clearing cookies in Firefox

Open the menu, choose Settings, then Privacy & Security. Under Cookies and Site Data, choose Clear Data. You can also set Enhanced Tracking Protection to Strict to block many trackers.

Clearing cookies in Safari on Mac

Open Safari, choose Settings, then Privacy, then Manage Website Data. Select our site or choose Remove All. Safari also has Prevent cross-site tracking, which you can switch on in the same tab.

Clearing cookies on iPhone and iPad

Open the Settings app, choose Safari, then Clear History and Website Data. To limit tracking, switch on Prevent Cross-Site Tracking in the same menu. Other browsers have their own settings inside the app.

Clearing cookies on Android

Open your browser, tap the menu, choose Settings, then Privacy and security, then Delete browsing data. Pick Cookies and site data and confirm. In Chrome you can also manage third-party cookies in the same place.

Your IP address

An IP address is a number that identifies your connection to the internet. Every website you visit sees it, and so do the tools that load on the page. It can show your approximate city or region, but not your street address.

Device and browser details

Tools may see your browser name and version, operating system, language, screen size and device type. This helps us check that pages work well on the devices people use.

Pages and actions

Analytics and pixels may record which pages you open, how long you stay, and actions such as clicks on buttons or links. This shows us which parts of the site people find useful.

Where you came from

When you arrive from a search engine, an ad, a video or another website, the tools may record that source. This tells us which channels bring visitors to us.

Browser identifiers

A cookie can hold a random code that recognises your browser on a later visit. The code does not contain your name, but companies you are signed in with may be able to connect it to your account.

Approximate location

Tools may work out a country, region or city from your IP address. We use this for reports such as which countries our visitors come from. We do not track your exact position.

If you accept non-essential cookies

Analytics, advertising pixels and embedded content may run. We will see reports about visits, and Google, Meta and TikTok may receive the information described in this policy. You can change your choice later.

If you refuse non-essential cookies

Analytics and advertising pixels should not run where consent is required. Our pages remain available, and the Distribution Portal still works because essential cookies are not affected by your refusal.

Using a VPN

A VPN hides your real IP address from the sites you visit and shows the address of the VPN server instead. It does not stop cookies, so you should still manage cookies in your browser.

Using an ad or tracker blocker

Browser extensions and built-in blockers can stop many analytics and advertising tools from loading. Our public pages should still work. A blocker may also stop embedded videos or some portal features, so turn it off for the portal if you have trouble.

Clearing cookies often

You can clear cookies at any time. Doing so signs you out of the portal, removes your saved consent choice, and resets your display setting. It does not remove information that Google, Meta or TikTok have already received.

Private or incognito windows

Private windows delete cookies when you close them, so each visit starts fresh. The tools still work during the visit, and the companies still see your IP address while the window is open.

Using several devices

Cookies and consent choices belong to one browser on one device. If you use a phone and a computer, you may need to set your choices on each, and each may be counted as a separate visitor.

Signing out of the portal

Use the sign-out option inside the Distribution Portal when you finish, especially on shared devices. Closing the tab may not end your session. Signing out ends it and makes the sign-in cookies stop working.

What expiry means

Every cookie has an expiry. After that time, your browser should delete it. A short expiry limits how long a browser is recognised, and a long expiry lets a tool recognise you across more visits.

Cookies are not your account

Cookies belong to your browser, while your Distribution Portal account belongs to you. Deleting cookies does not delete your account, your releases or your royalties. To close an account, contact us as described in the Privacy Policy.

Forms and messages

When you send us a form or email, we receive what you type. This is not a cookie. We handle it under our Privacy Policy, and tools on the page should not receive the contents of your message.

No automated decisions about you

We do not use cookie information to decide automatically whether you can use our services, how much you are paid, or what terms you receive. Cookie information is used for site improvement and advertising reports.

Collecting only what is needed

We choose tools and settings so that they collect no more than the purpose needs. When we find a setting that collects more than we need, we change it where the tool allows.

Using information only for stated purposes

We use cookie information for the purposes in this policy. If we want to use it for something new, we will update this policy and, where required, ask for consent first.

Children and advertising

We do not aim our advertising at children. If you are a parent and think a child has used our site and been tracked, contact us and we will look into it.

Sensitive information

We do not intend our tools to collect sensitive information such as health, religion or political views. Do not type such information into a page that does not ask for it.

Choosing the companies we use

We use well-known providers and review their terms before adding a tool. Their own policies apply to how they use information, so we encourage you to read them.

Requests from authorities

If a court or authority lawfully requires information, we may have to provide what we hold. We will tell you where the law allows, and we will share only what is required.

If our business changes

If CMG merges, is sold or reorganises, the information described in this policy may pass to the new owner. The new owner would need to follow this policy or tell you of changes.

Accessibility

We want everyone to be able to understand and use this page. If you have difficulty reading or using it, tell us and we will provide the information in another way where we can.

Earlier versions

We keep earlier versions of this policy. If you want to see how it read on a certain date, write to us and we will try to provide it.

How this policy fits with our other documents

This policy works alongside our Privacy Policy and our Terms of Use. If there is a conflict about cookies, this policy applies. For other personal information, the Privacy Policy applies.

Reporting a concern

If you think a cookie or tool on our site is not described here, or is being used wrongly, tell us what you saw and where. We will look into it quickly and update this page if needed.

Feedback

If any part of this policy is unclear, tell us. We would like it to be easy to read, and we will improve the wording where we can.

When this policy takes effect

This policy applies from the date shown at the top of the page. If we make a change that affects your choices, we will show a notice on the site or ask for your consent again where the law requires it.

Children

Our services are not directed at children under 16. We do not knowingly use advertising tools to target them.

Changes to this policy

We may update this policy when we add, remove or change a cookie or tool, or when the law changes. We will change the date at the top of this page, and where the law requires it, ask for your consent again.

Contact us

For questions about cookies, email halo@canadamusicgroup.cc and start your subject line with “Cookie question”. You can also reach us through the contact page. We read every message and reply as soon as possible.