Last updated: 20 July 2026
Business name: All Humans Cry
Legal form: Eenmanszaak
KVK number: 94632200
VAT number: NL005097773B49
Website: allhumanscry.com
Contact address: G.J.L. Ankersmitlaan 61, Deventer, The Netherlands
Support email: support@allhumanscry.com

This GDPR Data Request Policy explains how All Humans Cry (“All Humans Cry,” “we,” “us,” or “our”) handles requests from individuals who wish to exercise their privacy and data protection rights.

This Policy should be read together with our Privacy Policy, Cookie Policy, Terms of Service, Royalty & Payout Policy, Anti-Fraud Policy, Copyright & Takedown Policy, Refund & Cancellation Policy, and Artist & Label Distribution Agreement.

All Humans Cry is based in the Netherlands and handles privacy requests in accordance with applicable privacy and data protection laws, including the General Data Protection Regulation (“GDPR”) where applicable.

 

1. Scope of this Policy

This Policy applies to GDPR and privacy rights requests from:

• users;
• artists;
• labels;
• managers;
• representatives;
• business users;
• consumers;
• website visitors;
• support contacts;
• copyright reporters;
• fraud reporters;
• rights holders;
• other individuals whose personal data may be processed by All Humans Cry.

 

This Policy applies only to personal data processed by All Humans Cry. Third parties such as DSPs, Stripe, PayPal, banks, Google, Brevo, Hetzner, and other providers may handle certain personal data under their own privacy policies and legal responsibilities.

 

2. How to Submit a GDPR or Data Request

You can submit a GDPR or data request by contacting: support@allhumanscry.com

If you have access to your All Humans Cry account, you may also submit a request through the support ticket system.

If your dashboard access is restricted, suspended, cancelled, or unavailable, you can still contact us by email at support@allhumanscry.com.

All Humans Cry currently handles GDPR requests through email and support tickets. A separate dashboard request form may be introduced in the future.

 

3. Types of Requests You Can Make

Depending on your location, relationship with All Humans Cry, applicable law, and the type of data involved, you may be able to request:

• access to your personal data;
• correction of inaccurate personal data;
• deletion of personal data;
• restriction of processing;
• objection to processing;
• data portability or export;
• withdrawal of consent;
• unsubscribe from marketing emails;
• information about data sharing;
• information about data retention;
• complaint handling.

 

Some rights may not apply in every situation. For example, certain data may need to be retained for tax, royalty, accounting, copyright, fraud prevention, payment, legal, security, or DSP/distribution partner reasons.

 

4. Information to Include in Your Request

To help us handle your request, please include:

• your full name;
• your account email address;
• the type of request you are making;
• a clear description of the data or issue involved;
• your artist name or label name, if relevant;
• your subscription or order ID, if available;
• your recent invoice ID, if available;
• your payout email or PayPal email, if relevant;
• last payout request details, if relevant;
• release or track names, if relevant;
• any other information that helps us identify your account or request.

 

Please do not send unnecessary sensitive information unless we specifically request it.

 

5. Identity Verification

All Humans Cry may verify your identity before processing a GDPR or data request.

Depending on the request, we may ask for information such as:

• account email;
• full name;
• subscription or order ID;
• payout email or PayPal email;
• recent invoice ID;
• last payout request details;
• release or artist name;
• proof of account ownership;
• government ID only if necessary.

 

All Humans Cry will not request more verification data than reasonably necessary.

If government ID verification is required, All Humans Cry intends to use a verified third-party identity verification provider that specializes in identity verification. All Humans Cry does not intend to ask users to send government ID documents directly to All Humans Cry by email, and does not intend to store government ID documents directly on its own systems unless legally required or technically unavoidable.

If a request is suspicious, unclear, fraudulent, abusive, or cannot be linked to the requester, All Humans Cry may refuse, delay, or limit the request until identity or authority is verified.

 

6. Requests Made by Representatives

If a request is made by a manager, representative, label, company, lawyer, agent, or another third party on behalf of an individual, All Humans Cry may request proof that the representative is authorized to act on behalf of that individual.

We may refuse or delay the request until proper authorization has been provided.

 

7. Response Timeline

All Humans Cry will respond to GDPR requests without undue delay and generally within one month after receiving the request.

Where legally allowed, this period may be extended for complex, repeated, unclear, excessive, or large requests. If an extension is needed, All Humans Cry will inform the requester where required by law.

If a request is unclear, All Humans Cry may ask for clarification before processing it.

The response period may begin once we have enough information to identify the requester, understand the request, and verify identity where necessary.

 

8. Access Requests

You may request access to personal data that All Humans Cry processes about you.

Where applicable and legally allowed, an access response may include an overview or copy of:

• account details;
• subscription details;
• release metadata;
• support tickets;
• payout records;
• royalty records;
• tax records;
• analytics or account activity data;
• copyright complaint data;
• fraud-related notes where legally possible;
• other relevant personal data.

 

All Humans Cry may withhold or limit access to certain information where legally allowed, including:

• internal security information;
• fraud detection signals;
• internal investigation notes;
• confidential business information;
• legal advice or legally privileged material;
• information affecting another person’s rights;
• information that would compromise platform security;
• information that would compromise fraud prevention;
• information restricted by law, contract, DSP rules, or distribution partner obligations.

 

9. Correction Requests

You may request correction of inaccurate personal data.

If the correction concerns account details, contact information, payout details, or similar personal data, All Humans Cry will review and correct the information where appropriate.

Some changes to release metadata may be treated as release changes rather than privacy corrections. This may include changes to:

• artist name;
• label name;
• track title;
• release title;
• copyright line;
• publishing line;
• featured artist names;
• songwriter names;
• producer names;
• ISRCs;
• UPCs;
• artwork;
• other release metadata.

 

All Humans Cry may refuse or delay corrections if they would create false metadata, rights issues, fraud risk, copyright risk, duplicate delivery conflicts, platform conflicts, breach of DSP rules, breach of distribution partner rules, or breach of All Humans Cry policies.

 

10. Deletion Requests

You may request deletion of your personal data.

Where possible and legally appropriate, All Humans Cry may delete or anonymize personal data depending on the type of data, legal basis, service status, account status, and retention requirements.

A deletion request may result in account closure, restriction, or loss of access to:

• dashboard access;
• upload tools;
• payout tools;
• support tools;
• distribution services;
• release management tools;
• analytics;
• subscription services;
• monetization services.

 

Account deletion does not automatically remove releases from DSPs or platforms. If you want your releases removed from platforms, you must also request a takedown.

Takedown processing depends on Too Lost, DSPs, distribution partners, technical systems, store processing times, and platform rules.

 

11. Data That May Be Retained After a Deletion Request

All Humans Cry may retain certain data after a deletion request where necessary or legally permitted.

This may include data needed for:

• tax records;
• invoices;
• royalty accounting;
• payout history;
• fraud prevention;
• artificial streaming investigations;
• copyright disputes;
• proof of rights;
• chargebacks;
• payment disputes;
• legal claims;
• security logs;
• abuse prevention;
• DSP obligations;
• distribution partner obligations;
• accounting requirements;
• contractual obligations;
• legal compliance;
• enforcement of All Humans Cry policies.

 

Where possible, data retained after deletion may be restricted, minimized, archived, or separated from active use.

GDPR requests cannot be used to hide fraud, erase evidence, avoid royalty reversals, avoid copyright claims, avoid payment disputes, avoid tax obligations, avoid legal obligations, or bypass All Humans Cry policies.

 

12. Data Export and Portability Requests

You may request a copy or export of personal data that you have provided to All Humans Cry, where the right to portability applies.

Where available and appropriate, All Humans Cry may provide exports in formats such as:

• CSV;
• JSON;
• text document;
• another reasonable electronic format.

 

Exports may exclude:

• data belonging to other people;
• confidential internal notes;
• fraud signals;
• security logs;
• confidential business information;
• legal advice or privileged material;
• third-party confidential information;
• data that cannot legally or reasonably be disclosed;
• data that is not subject to portability rights.

 

13. Restriction of Processing

You may request restriction of processing in certain circumstances.

If processing is restricted, All Humans Cry may continue to store the data but limit active processing where required by law.

However, restricted data may still be processed where necessary for:

• consented processing;
• legal claims;
• protection of another person’s rights;
• important public interest reasons;
• tax, accounting, royalty, fraud, copyright, payment, security, or legal obligations where permitted by law.

 

14. Objection to Processing

You may object to certain processing based on legitimate interests, such as certain analytics, fraud monitoring, account protection, security review, or platform improvement activities.

All Humans Cry may continue processing if we have compelling legitimate grounds, legal obligations, contractual obligations, security reasons, fraud prevention reasons, copyright reasons, payment reasons, royalty reasons, DSP/distribution partner obligations, or legal claims that override the objection.

If you object to processing that is necessary to provide services, your ability to use All Humans Cry may be limited or stopped.

For example, if you object to processing needed for payouts, royalties, fraud prevention, account security, distribution, release delivery, copyright handling, tax compliance, or payment processing, All Humans Cry may be unable to continue providing the relevant services.

 

15. Withdrawal of Consent

You may withdraw consent where processing is based on consent.

This may include:

• marketing emails;
• newsletters;
• certain cookies;
• certain analytics technologies;
• certain optional tracking technologies.

 

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

If you withdraw marketing consent, All Humans Cry may still send transactional, legal, account, security, subscription, payout, release, copyright, fraud, and service-related emails.

 

16. Marketing Unsubscribe Requests

Users may unsubscribe from marketing emails at any time by using the unsubscribe option where available or by contacting All Humans Cry.

Unsubscribing from marketing emails does not cancel your account, subscription, release obligations, payout obligations, copyright obligations, fraud obligations, or service-related communications.

 

17. Copyright, Fraud, Payment, and Legal Exceptions

All Humans Cry may refuse, delay, or limit GDPR requests where necessary or legally permitted to protect:

• legal rights;
• fraud investigations;
• copyright disputes;
• tax records;
• royalty accounting;
• payment disputes;
• chargebacks;
• security;
• other users’ rights;
• rights holders’ rights;
• DSP obligations;
• distribution partner obligations;
• platform integrity;
• abuse prevention;
• legal claims.

 

All Humans Cry may retain fraud, artificial streaming, copyright, takedown, payment dispute, chargeback, enforcement, and complaint records as long as reasonably needed to prevent abuse, handle disputes, comply with law, protect rights, and enforce policies.

 

18. Requests from Non-Account Holders

Copyright reporters, fraud reporters, rights holders, support contacts, and other non-account holders may request access, correction, deletion, or other handling of their own personal data.

All Humans Cry may verify the identity and authority of the requester before handling such requests.

All Humans Cry may retain reporter, complaint, fraud, copyright, takedown, and dispute data where needed for copyright, legal, fraud, dispute, safety, platform integrity, or compliance reasons.

 

19. Third-Party Data and Deletion Limits

All Humans Cry may not be able to delete or modify data that has already been sent to or independently processed by third parties, including:

• DSPs;
• Stripe;
• PayPal;
• banks;
• Google;
• Brevo;
• Hetzner;
• legal or accounting advisors;
• authorities;
• courts;
• regulators;
• law enforcement;
• other service providers.

 

Where a third party acts as an independent controller, you may need to contact that third party directly to exercise your rights under their privacy policy.

Where reasonable and legally required, All Humans Cry may forward, support, or assist with requests involving third-party processors or partners.

 

20. Fees and Abusive Requests

GDPR requests are generally free of charge.

Where legally allowed, All Humans Cry may refuse to act on a request or charge a reasonable fee if the request is manifestly unfounded, excessive, repetitive, abusive, made in bad faith, or intended to interfere with All Humans Cry’s services, investigations, legal rights, fraud prevention, copyright enforcement, or platform security.

 

21. Complaints

If you have a concern about how All Humans Cry handles your personal data or your GDPR request, we encourage you to contact us first at: support@allhumanscry.com

You also have the right to lodge a complaint with a privacy supervisory authority.

In the Netherlands, the relevant supervisory authority is the Autoriteit Persoonsgegevens.

 

22. Changes to this Policy

All Humans Cry may update this GDPR Data Request Policy from time to time for legal, operational, privacy, security, technical, platform, payment, DSP, distribution partner, or business reasons.

If changes are material, All Humans Cry may notify users by website notice, dashboard notice, email, updated publication, or another reasonable method.

The “Last updated” date at the top of this Policy indicates the date of the latest version.

 

23. Contact

For GDPR requests, data access requests, data deletion requests, correction requests, portability requests, objection requests, consent withdrawal requests, or other privacy-related matters, contact:

All Humans Cry
G.J.L. Ankersmitlaan 61
Deventer, The Netherlands
KVK: 94632200
VAT: NL005097773B49
Email: support@allhumanscry.com
Website: allhumanscry.com