Privacy for invitation applications

Mazufa Records operates the invitation application. The form asks for artist or label path, public name, legal name, email, phone number, country or region, genre or business type, optional biography, optional portfolio URL, message, preferred reply language, rights confirmation, privacy consent, and privacy-notice version. If you select files in the application, the file names are submitted with your application; the file contents are not uploaded. Privacy requests may be sent to contact@mazufa.com.

If present, first-party UTM source, medium, campaign, content, and term values are stored with the application. The server necessarily receives connection data and derives a daily keyed hash of the IP address for rate limiting; the application body and receipt do not store the raw IP address.

Data is used to validate and protect the form, review the invitation request, communicate with the applicant, preserve a limited audit receipt, and investigate delivery or abuse issues. Depending on applicable law, this processing is based on the applicant's request, consent where required, security and operational interests, and legal obligations. The intake code does not create an account or perform cross-site advertising tracking.

The handler writes the application to private storage in an AES-256-GCM encrypted envelope and sends an email notification to contact@mazufa.com through the configured mail service. The application record is scheduled for deletion after 90 days. Security, delivery, infrastructure, and backup records may follow different provider cycles or be retained when reasonably necessary for legal or security purposes; no specific backup-purge date is promised.

Access is limited to authorized Mazufa personnel and providers needed to host, secure, store, and deliver the application. Hosting and configured mail services may process data outside Bahrain. Mazufa applies access controls, encryption, data minimisation, and contractual or other safeguards where required by applicable law.

Submission is optional and the privacy checkbox is required. Applicants may request access, correction, withdrawal, restriction, or deletion at contact@mazufa.com, subject to applicable law and necessary security records. A person under 18 should use the form only through, or with the verifiable consent of, a parent or legal guardian. A person may also complain to the competent data-protection authority where applicable.