Mirat Privacy Policy

Effective Date: 01 August 2025
Last Updated: 01 August 2025

Mirat respects your privacy and is committed to protecting your personal information. As a cross-border royalty collection society from Kurdistan, we are committed to transparency, legality, and responsible data management in accordance with applicable laws in the Kurdistan Region in Iraq.

1. Who We Are

Mirat is a royalty collection society headquartered in the Kurdistan Region of Iraq. We provide rights management and royalty distribution services to Kurdish music creators and rights holders.

Data Controller:
Mirat Royalty Collection Society
Email: privacy@mirat.krd

2. What Personal Data We Collect

We collect and process data needed for royalty collection and rights management, including:

  • Identification Data: Full name, artist names, nationality, date of birth, and ID/passport copy
  • Contact Data: Phone number, email, physical address
  • Professional Data: Role (e.g. composer, songwriter, publisher), works metadata, agreements
  • Financial Data: Bank details for royalty payments
  • Digital Data: Website usage, and cookies (see Cookie Policy)

3. How We Collect Your Data

Your data is collected:

  • When you register as a member or submit works
  • Through our secure online platform
  • Via international partner societies or service providers
  • From public databases or music usage reports

4. Why We Process Your Data

Mirat processes your data to fulfil our role as a rights management organisation. By applicable international copyright laws and in the Kurdistan Region and Iraq, we require certain information to register your rights, collect royalties from digital platforms, we ensure fair distribution of those royalties (We work in the future to collect also from public performance, broadcasting, mechanical reproduction.) Processing your data is essential to identify you as the rightful copyright holder, ensure accurate work matching, manage your royalty entitlements, and maintain secure records of your rights. We also use your data to communicate with you, resolve rights disputes, improve our services, and comply with legal and administrative obligations under regional and international copyright frameworks.

5. Sharing Your Data

Mirat shares your data only when necessary and with trusted entities under secure agreements.

  • We work with leading third-party royalty software providers that are internationally recognised and GDPR-compliant to store and process royalty data securely.
  • We share rights information with partner collection societies, archive partners and digital service providers to track usage and ensure accurate payments.
  • We may share your financial information with banks or payment processors to facilitate royalty transfers.
  • In cases of legal requirements, we may disclose necessary information to government authorities.

Tax Responsibility: The responsibility for reporting and paying taxes on royalty income lies with the copyright holder. Mirat does not handle personal or corporate tax filings. Tax requirements may vary depending on your country of residence, and it is your responsibility to ensure compliance with local tax regulations.

We do not sell or rent your data to any third party.

6. International Data Transfers

Mirat may transfer your data to countries outside of the Kurdistan region in Iraq when working with partner societies and digital services. We ensure such transfers are conducted securely and in accordance with international standards and data protection agreements.

7. Data Retention

Your data is retained as long as necessary to fulfil our obligations:

  • Membership and work data: duration of your membership until terminated by either party. 
  • Financial records: 5 years in compliance with accounting regulations
  • Website data and analytics: 2 years

8. Your Rights

You have the right to:

  • Access your data
  • Request corrections
  • Request deletion (where legally possible)
  • Withdraw your consent (where applicable)

To exercise your rights, email privacy@mirat.krd. You may also contact a local data protection authority.

9. Security

We apply strong security measures to protect your data, including:

  • Use of internationally certified royalty management software
  • Encrypted communication and secure data storage
  • Access controls and regular audits
  • Confidentiality training for staff

10. Cookies

We use cookies to support website functionality, user experience, and analytics. Please review our [Cookie Policy] for full details.

11. Contact Us

For privacy questions, rights requests, or complaints: Email: privacy@mirat.krd