Serenade – Privacy Policy
Version Aug. 2021

1. Background:

This Privacy Policy explains how Serenade Sound Pty Ltd (referred to in this policy as “Serenade” “we”, “us” or “our”) and/or our subsidiaries, affiliates and related bodies corporate, use, collect, store and disclose information supplied to us in connection with our products or services, as part of the Serenade Platform (“Platform”) or other offerings at https://www.serenade.co and associated online platforms (the “Sites”), or by contacting us in person, by phone, or over email (we will refer to the foregoing collectively as the “Serenade Services”).

Serenade is a music NFT marketplace enabling artists to create digital collectibles (NFTs) for fans who exist within the Serenade community.

We are committed to respecting your privacy. Our Privacy Policy how we comply with the Privacy Act 1988 (Cth) (“Privacy Act”), the Australian Privacy Principles (“APPs”), and, to the extent that it applies, the EU General Data Protection Regulation 2016/679 (“GDPR”), in relation to the collection, storage, use, and disclosure of your information and data.

By providing personal information to us (“Personal Information”), you consent to our collection, use and disclosure of your Personal Information in accordance with this Privacy Policy and any other arrangements that apply between us. We may update this Privacy Policy from time to time at our sole discretion. Any variations become effective on posting the updated Privacy Policy on our Sites, and we shall have no obligation to provide you with individual notice of such changes. Your continued use of the Serenade Services following the publication of any amended Privacy Policy shall signify your acceptance of that amended Privacy Policy, except where we are otherwise obliged by law to seek your direct consent.

Personal Information includes information that can be used to personally identify you such as your name, address, email address, phone number, profile picture, and payment details (including your credit card information). We do not knowingly collect or process the Personal Information of anyone under the age of 13 without the express consent of their parent or guardian.

2. What personal information do we collect:

We may collect the following types of Personal Information:

• name;

• mailing or street address;

• email address;

• telephone number and other contact details;

• age or date of birth;

• credit card or other payment information;

• profile pictures;

• your device ID, device type, geo-location information, computer and connection information, statistics on page views, traffic to and from the sites, ad data, IP address and standard web log information;

• details of the products and services we have provided to you or that you have enquired about, including any additional information necessary to deliver those products and services and respond to your enquiries;

• any additional information relating to you that you provide to us directly through our website or app or indirectly through your use of our website or app or online presence or through other websites or accounts from which you permit us to collect information;

• information you provide to us through customer surveys; or any other personal information that may be required in order to facilitate your dealings with us.

We may collect these types of Personal Information either directly from you, or from third parties. We may collect this information when you:

• register on our Platform or Sites;

• communicate with us through correspondence, chats, email, or when you share information with us from other social applications, services or websites;

• interact with our Platform, Sites, services, content and advertising; or

• invest in our business or enquire as to a potential purchase in our business.

In addition, if you apply for a job or position with us we may collect certain information from you (including your name, contact details, working history and relevant records checks) from any recruitment consultant, your previous employers and others who may be able to provide information to us to assist in our decision on whether or not to make you an offer of employment or engage you under a contract. This Privacy Policy does not apply to acts and practices in relation to employee records of our current and former employees, which are exempt from the Privacy Act.

We may additionally collect Usage Information which means anonymous aggregate data that is automatically collected through your use of the Serenade Services. This includes information that identifies your device, your operating system, your IP address, and dates and times that you access and use the Serenade Services. This information is used to resolve any technical issues that may arise, or for statistical analysis to help us to improve the Serenade Services. The GDPR recognises that Usage Information, whilst for the most part anonymous, can be cumulatively used to directly or indirectly identify you. Usage Information that can be used to identify you in any way shall be included as Personal Information.

3. Why do we collect, use and disclose personal information?

Personal Information may be collected from you when you:

• create a user account on the Platform or Sites;

• post on or otherwise interact with the Platform;

• subscribe to our mailing lists or other direct marketing communications;

• enter a contest or giveaway organised by us;

• complete a survey or questionnaire provided by us;

• contact our support team via our Sites, phone or email; or

• access, browse, use, or otherwise interact with the Sites.

It is your choice to provide Personal Information to us. Wherever it is lawful and practicable, you have the option not to identify yourself when interacting with us. Please be aware that it may be necessary for us to collect your Personal Information to enable us to provide the Serenade Services to you. As such, if you do not wish to provide your Personal Information, this may limit our ability to provide the Serenade Services to you.

We may hold, use and disclose your Personal Information for the following purposes:

• to enable you to access and use our Platform or Sites;

• to operate, protect, improve and optimise our Platform or Sites, our business and our users’ experience, such as to perform analytics, conduct research and for advertising and marketing;

• to send you service, support and administrative messages, reminders, technical notices, updates, security alerts, and information requested by you;

• to send you marketing and promotional messages and other information that may be of interest to you, including information sent by, or on behalf of, our business partners that we think you may find interesting;

• to administer rewards, surveys, contests, or other promotional activities or events sponsored or managed by us or our business partners;

• to comply with our legal obligations, resolve any disputes that we may have with any of our users, and enforce our agreements with third parties; and

• to consider your employment application.

We may also disclose your Personal Information to a trusted third party who also holds other information about you. This third party may combine that information in order to enable it and us to develop anonymised consumer insights so that we can better understand your preferences and interests, personalise your experience and enhance the products and services that you receive.

4. Do we use your personal information for direct marketing?

We may send you direct marketing communications and information about products and services we offer, including software add-ons and in-app purchases. This may take the form of emails, SMS, mail or other forms of communication, in accordance with the Spam Act 2003 (Cth) and the Privacy Act. We recognise your right under the Spam Act 2003 (Cth) and the GDPR to opt out from direct marketing, and as such these consents can be modified at any time by emailing our Privacy Officer (per the details at the end of this Privacy Policy) or clicking unsubscribe on any direct marketing communications,

Please note certain non-marketing related correspondence from us, including messages relating to payment, will be automatically sent to you by virtue of your use of the Serenade Services and you may not have the option to unsubscribe from receiving this correspondence.

5. To whom do we disclose your personal information?

We may disclose Personal Information for the purposes described in this privacy policy to:

• Our directors, officers, employees, consultants, contractors, agents and related bodies corporate;

• third party suppliers and service providers (including providers for the operation of our Platform and Sites and/or our business or in connection with providing our products and services to you);

• artists, management, record labels and music publishers providing services or licensing rights (including copyrights) to Serenade, the Platform or Sites;

• professional advisers, dealers and agents;

• payment systems operators (eg merchants receiving card payments);

• our existing or potential agents, business partners or partners;

• our sponsors or promoters of any competition that we conduct via our services;

• anyone to whom our assets or businesses (or any part of them) are transferred;

• specific third parties authorised by you to receive information held by us; and/or

• other persons, including government agencies, regulatory bodies and law enforcement agencies, or as required, authorised or permitted by law.

We will take reasonable steps to ensure that any third parties that we share your Personal Information agree to be bound by Australian privacy laws.

You can withdraw your consent for us to share your Personal Information with third parties at any time by emailing our Privacy Officer (per the details at the end of this Privacy Policy), but please note that withdrawal of such consents may affect your ability to access and use the Serenade Services.

6. Disclosure of personal information outside Australia

We may, in the course of providing the services to you, disclose Personal Information to cloud providers and other service providers (including Amazon Web Services, Google Cloud Platform and Mailchimp) in overseas countries that are deemed by the EU Commission as having an ‘adequate’ level of Personal Data protection. Where we transfer data to a third party in a country where no adequacy decision has been made, we will take reasonable steps to ensure person or entity handling your data in those countries are bound under contract to meet the requirements of the Privacy Act, APPs, and GDPR (as applicable).

When you provide your Personal Information to us, you consent to the disclosure of your information outside of Australia

7. Using our website and cookies:

We may collect personal information about you when you use and access our Platform and Sites.

While we do not use browsing information to identify you personally, we may collect anonymous Usage Information from the Serenade Services, by utilising cookies, pixel tags and other tracking technologies (collectively “Cookies”). Cookies are small packets of data that are downloaded onto your device when you access a website. Cookies hold specific information that helps a website ‘remember’ your actions and preferences over time. These are the types of Cookies that we may use to operate the Sites:

● Strictly Necessary Cookies – these Cookies are essential to ensure that the Sites work correctly, and record information that allows you to move around the Sites and navigate their features;

● Performance Cookies – these Cookies collect information about how you use the Sites, such as how often you access the Sites and if you encounter any errors;

● Functionality Cookies – these Cookies allow the Sites to remember the choices you make to provide a more personalised experience;

● Targeting/Advertising Cookies – these Cookies deliver targeted advertising to you based on your interests and use of the Sites.

We may also use cookies to enable us to collect data that may include Personal Information. For example, where a cookie is linked to your account, it will be considered Personal Information under the Privacy Act. We will handle any Personal Information collected by cookies in the same way that we handle all other Personal Information as described in this Privacy Policy.

We may also use tracking technology to collect information relating to usage patterns, preferences, location and other data, including Google Analytics and other analytics software (eg Appfigures).

Cookies can stay on your device temporarily (“Session Cookies”) or until you manually delete them (“Persistent Cookies”). You can adjust your browser settings at any time to block Cookies, however please note that doing so may limit our ability to provide the Serenade Services to you in a fully operational form.

To request a full list of the individual Cookies and tracking technologies we use, please email our Privacy Officer (per the details at the end of this Privacy Policy).

8. Security:

We may hold your Personal Information in either electronic or hard copy form. We take reasonable steps to protect your Personal Information from misuse, interference and loss, as well as unauthorised access, modification or disclosure and we use a number of physical, administrative, personnel and technical measures to protect your Personal Information (including use of SSL certificates and other database security mechanisms). No security measures are, however, 100% secure so we cannot guarantee the security of your Personal Information. To the extent permitted by law, we accept no liability for any breach of security, or direct hacking of our security measures, or any unintentional disclosure, loss or misuse of any information or data, or for the actions of any third parties that may obtain any information or data.

Notwithstanding the above, we acknowledge our obligation to report any data breach that is likely to risk the rights and freedoms of natural persons to the Australian Information Commissioner and, where our data breach involves the information of EU subjects, report to the European Data Protection Supervisor. We will also inform you, where possible, if your Personal Information has been breached in the circumstance where it poses a risk of serious harm or your rights and freedoms.

We also train our personnel who may have access to your Personal Information about this Privacy Policy and our obligations under the Privacy Act, APPs, and GDPR. For more information on our internal policies, email the Privacy Officer (per the details at the end of this Privacy Policy).

9. Links:

Our website may contain links to websites operated by third parties. Those links are provided for convenience and may not remain current or be maintained. Unless expressly stated otherwise, we are not responsible for the privacy practices of, or any content on, those linked websites, and have no control over or rights in those linked websites. The privacy policies that apply to those other websites may differ substantially from our Privacy Policy, so we encourage individuals to read them before using those websites.

From time to time, we may offer products and services for purchase through the Apple Store, Google Play or other application platforms authorised by us (“Software Stores”). If you choose to make a purchase, you will be prompted to enter details for your account with your Software Store (“SS Account”), and your SS Account will be charged for the purchase in accordance with the terms disclosed to you at the time of purchase as well as the general terms that apply to your SS Account.

Please note that this Privacy Policy does not cover the privacy practices of Software Stores or any other third party site. We do not have access to, or control over, the technologies that Software Stores or other third party sites may use to collect information about you. We disclaim all liability in connection with the services of any Software Stores, or any third party sites integrated or otherwise linked to the Serenade Services. If you have any concerns about the privacy practices of a Software Store or other third party site, we encourage you to reach out to them directly.

10. Accessing or correcting your personal information:

You have a general right to access any Personal Information that is held about you by us, unless a valid exception applies. You can request the Personal Information we hold about you by contacting our Privacy Officer (per the details at the end of this Privacy Policy). Sometimes, we may not be able to provide you with access to all of your Personal Information and, where this is the case, we will tell you why. We may also need to verify your identity when you request your Personal Information.

Please note that we cannot modify your Personal Information. You can modify your own information at any time by emailing the Privacy Officer (per the details at the end of this Privacy Policy).

You acknowledge that it is your responsibility to maintain the truth, accuracy, and completeness of your Personal Information and your failure to do so may inhibit our ability to provide the Serenade Services to you. You acknowledge and agree that you remain solely responsible for maintaining the truth, accuracy, and completeness of your Personal Information at all times, and we shall have no liability to you or any third party arising from your failure to do the same.

In accordance with the GDPR, we acknowledge the additional rights of EU subjects to:

● have their data erased that is no longer being used for a legitimate purpose;

● request a copy of all Personal Information held about them in a readable format, along with supplementary information to verify that such Personal Information is being processed lawfully; and

● request restricted processing of their Personal Information whilst any complaints or concerns are being resolved.

To erase, request, or restrict processing of your Personal Information, please email the Privacy Officer (per the details at the end of this Privacy Policy).

11. Making a complaint:

If you think we have breached the Privacy Act, or you wish to make a complaint about the way we have handled your Personal Information, you can contact us using the details set out in item 12 below.

Please include your name, email address and/or telephone number and clearly describe your complaint. We will acknowledge your complaint and respond to you regarding your complaint within a reasonable period of time.

If you are not satisfied with our handling of your Personal Information, or have any other concern over our Privacy Policy, then you may lodge a formal complaint with the Office of the Australian Information Commissioner (for more information, please see www.oaic.gov.au) or with the European Data Protection Supervisor (for more information, please see https://edps.europa.eu).

12. Contact Us:

Thank you for taking the time to read our Privacy Policy. For further information about our Privacy Policy or practices, or to access or correct your Personal Information, or make a complaint, please contact our Privacy Officer at the following email address: admin@serenade.co

---

U.S. Privacy Notice for Individuals
Version Aug. 2021

This U.S. Privacy Notice (“U.S. Privacy Notice” or “Notice”) explains how Serenade Sound Pty Ltd (referred to in this policy as “Serenade” “we”, “us” or “our”) and/or our subsidiaries and other affiliates, use, collect, store and disclose information supplied to us in connection with our products or services, as part of the Serenade Platform (“Platform”) or other offerings at https://www.serenade.co and associated online platforms (the “Sites”), or when you contact us in person, by phone, or over email (we will refer to the foregoing collectively as the “Serenade Services”).

This Notice applies only if you are an individual and a resident of the United States. See our [Privacy Policy] if you reside outside of the United States.

This Notice explains how we collect, share, use, and protect your Personal Information (defined below) when you visit or use the Platform, Sites or Serenade Services. By providing your Personal Information to us, you consent to our collection, use and disclosure of your Personal Information in accordance with this Privacy Notice and any other arrangements that apply between us. We may update this Privacy Policy from time to time at our sole discretion. Any variations become effective on posting the updated Privacy Policy on our Sites, and we shall have no obligation to provide you with individual notice of such changes. Your continued use of the Serenade Services following the publication of any amended Privacy Policy shall signify your acceptance of that amended Privacy Policy, except where we are otherwise obliged by law to seek your direct consent.

Our Platform Site is not intended for children under 13 years of age. We do not knowingly collect or process the Personal Information of anyone under the age of 13 without the express consent of their parent or guardian.

Personal Information. “Personal Information” is any information:

• that identifies or can be used to identify you or your household;

• that relates to, describes, is capable of being associated with, or could reasonably be linked (directly or indirectly) with you or your household;

• that can be used to authenticate you or provide access to an account; or

• that relates to you and that might be sensitive (such as personal medical or health information, account number, account value).

Personal Information includes, for example, your name, address, email address, IP address, phone number, profile picture, and payment details (including your credit card information).

I. Personal Information We Collect

For at least the past 12 months, we have collected the following Personal Information:

• name;

• mailing or street address;

• email address;

• telephone number and other contact details;

• age or date of birth;

• credit card or other payment information;

• profile pictures;

• your device ID, device type, geo-location information, computer and connection information, statistics on page views, traffic to and from the sites, ad data, IP address and standard web log information;

• details of the products and services we have provided to you or that you have enquired about, including any additional information necessary to deliver those products and services and respond to your enquiries;

• any additional information relating to you that you provide to us directly through our website or app or indirectly through your use of our website or app or online presence or through other websites or accounts from which you permit us to collect information;

• information you provide to us through customer surveys; or any other personal information that may be required in order to facilitate your dealings with us.

Other Information

We also collect certain “Other Information,” which is information that does not and cannot reveal your identity, such as information that has been de-identified or aggregated. This Other Information is anonymous aggregate data that is automatically collected through your use of the Serenade Services.. This information is used to resolve any technical issues that may arise, or for statistical analysis to help us to improve the Serenade Services.

II. How We Collect Personal Information

We may collect all of the types of Personal Information described above either directly from you, or from third parties. We may collect this information when you:

• register on our Platform or Sites;

• create a user account on the Platform or Sites;

• access, browse, use, or otherwise interact with the Sites;

• enter a contest or giveaway organized by us;

• complete a survey or questionnaire provided by us;

• communicate with us through correspondence, chats, email, or when you share information with us from other social applications, services or websites;

• contact our support team via our Sites, phone or email;

• post on or otherwise interact with our Platform, Sites, Services, content and advertising;

• subscribe to our mailing lists or other direct marketing communications; or

• invest in our business or enquire as to a potential purchase in our business.

Your Choice to Provide Personal Information to Us

It is your choice to provide Personal Information to us. Wherever it is lawful and practicable, you have the option not to identify yourself when interacting with us. Please be aware that it may be necessary for us to collect your Personal Information to enable us to provide the Serenade Services to you. As such, if you do not wish to provide your Personal Information, this may limit our ability to provide the Serenade Services to you.

Personal Information Collected Relating to Employment

In addition to the Personal Information collected as described above, if you apply for a job or position with us we may collect certain information from you (including your name, contact details, working history and relevant records checks) from any recruitment consultant, your previous employers and others who may be able to provide information to us to assist in our decision on whether or not to make you an offer of employment or engage you under a contract. This Privacy Notice does not apply to acts and practices in relation to employee records of our current and former employee.

III. Why do we collect, use and disclose personal information?

We may hold, use and disclose your Personal Information for the following purposes:

• to enable you to access and use our Platform or Sites;

• to operate, protect, improve and optimize our Platform or Sites, our business and our users’ experience, such as to perform analytics, conduct research and for advertising and marketing;

• to send you service, support and administrative messages, reminders, technical notices, updates, security alerts, and information requested by you;

• to send you marketing and promotional messages and other information that may be of interest to you, including information sent by, or on behalf of, our business partners that we think you may find interesting. Please note, when we send you marketing or promotional material on behalf of our business partners, we do not share your Personal Information with them;

• to administer rewards, surveys, contests, or other promotional activities or events sponsored or managed by us or our business partners;

• to comply with our legal obligations, resolve any disputes that we may have with any of our users, and enforce our agreements with third parties; and

• to consider your employment application.

We may also disclose your Personal Information to a trusted third party who also holds other information about you. This third party may combine that information in order to enable it and us to develop anonymized consumer insights so that we can better understand your preferences and interests, personalize your experience and enhance the products and services that you receive.

IV. Do we use your personal information for direct marketing?

We may send you direct marketing communications and information about products and services we offer, including software add-ons and in-app purchases. This may take the form of emails, text messages, mail or other forms of communication. When required by law or if we otherwise choose, we may offer you opportunities to stop us from sending you emails or text messages, or from telephoning you with certain information.

V. To whom do we disclose your personal information?

We will disclose your Personal Information to third parties only as allowed by law or with your consent. We will not disclose your Personal Information to any third parties for their own marketing purposes.

We may disclose your Personal Information for the purposes described in this Privacy Notice to:

• our directors, officers, employees, consultants, contractors, agents and affiliates. We will not provide your Personal Information to our affiliates for their marketing purposes;

• third party suppliers and service providers (including providers for the operation of our Platform and Sites and/or our business or in connection with providing our products and services to you);

• artists, management, record labels and music publishers if those persons are providing services or licensing rights (including copyrights) to Serenade, the Platform or Sites;

• professional advisers, dealers and agents;

• payment systems operators;

• merchants receiving card payments from you;

• our existing or potential agents, business partners or partners;

• our sponsors or promoters of any competition that we conduct via our services;

• anyone to whom our assets or businesses (or any part of them) are transferred;

• specific third parties authorized by you to receive information held by us; and/or

• other persons, including government agencies, regulatory bodies and law enforcement agencies, or as required, authorized or permitted by law.

VI. Using our website and cookies:

We may collect Personal Information about you when you use and access our Platform and Sites. While we do not use browsing information to identify you personally, we may collect anonymous information from the Serenade Services, by utilizing cookies, pixel tags and other tracking technologies (collectively “Cookies”). Cookies are small packets of data that are downloaded onto your device when you access a website. Cookies hold specific information that helps a website ‘remember’ your actions and preferences over time. These are the types of Cookies that we may use to operate the Sites:

• Strictly Necessary Cookies – these Cookies are essential to ensure that the Sites work correctly, and record information that allows you to move around the Sites and navigate their features;

• Performance Cookies – these Cookies collect information about how you use the Sites, such as how often you access the Sites and if you encounter any errors;

• Functionality Cookies – these Cookies allow the Sites to remember the choices you make to provide a more personalized experience;

• Targeting/Advertising Cookies – these Cookies deliver targeted advertising to you based on your interests and use of the Sites.

We may also use cookies to enable us to collect data that may include Personal Information. For example, where a cookie is linked to your account, it may be considered Personal Information under applicable laws in the US. We will handle any Personal Information collected by cookies in the same way that we handle all other Personal Information as described in this Privacy Notice.

We may also use tracking technology to collect information relating to usage patterns, preferences, location and other data, including Google Analytics and other analytics software (for example, Appfigures). This information also may be Personal Information under certain laws in the US, and we will handle it in the same way that we handle all other Personal Information.

Cookies can stay on your device temporarily (“Session Cookies”) or until you manually delete them (“Persistent Cookies”). You can adjust your browser settings at any time to block Cookies, however please note that doing so may limit our ability to provide the Serenade Services to you in a fully operational form.

To request a full list of the individual Cookies and tracking technologies we use, please email our Privacy Officer (per the details at the end of this Privacy Notice).

VI. Security:

We may hold your Personal Information in either electronic or hard copy form. We take reasonable steps to protect your Personal Information from misuse, interference and loss, as well as unauthorised access, modification or disclosure and we use a number of physical, administrative, personnel and technical measures to protect your Personal Information (including use of SSL certificates and other database security mechanisms). No security measures are, however, 100% secure so we cannot guarantee the security of your Personal Information. To the extent permitted by law, we accept no liability for any breach of security, or direct hacking of our security measures, or any unintentional disclosure, loss or misuse of any information or data, or for the actions of any third parties that may obtain any information or data.

Notwithstanding the above, we will inform you if and when required by law if your Personal Information has been breached in the circumstance where it poses a risk of serious harm or your rights and freedoms.

VII. Links:

Our website may contain links to websites operated by third parties. Those links are provided for convenience and may not remain current or be maintained. Unless expressly stated otherwise, we are not responsible for the privacy practices of, or any content on, those linked websites, and have no control over or rights in those linked websites. The privacy policies that apply to those other websites may differ substantially from our Privacy Notice, so we encourage individuals to read them before using those websites.

From time to time, we may offer products and services for purchase through the Apple Store, Google Play or other application platforms authorized by us (“Software Stores”). If you choose to make a purchase, you will be prompted to enter details for your account with your Software Store (“SS Account”), and your SS Account will be charged for the purchase in accordance with the terms disclosed to you at the time of purchase as well as the general terms that apply to your SS Account.

Please note that this Privacy Policy does not cover the privacy practices of Software Stores or any other third party site. We do not have access to, or control over, the technologies that Software Stores or other third party sites may use to collect information about you. We disclaim all liability in connection with the services of any Software Stores, or any third party sites integrated or otherwise linked to the Serenade Services. If you have any concerns about the privacy practices of a Software Store or other third party site, we encourage you to reach out to them directly.

VIII. Contact Us:

Thank you for taking the time to read our Privacy Notice. For further information about our Privacy Policy or practices, or to access or correct your Personal Information, or make a complaint, please contact our Privacy Officer at the following email address: admin@serenade.co

Support your favourite artists by collecting Digital Pressings