media@miraq.app

media@miraq.app

MIRAQ – PRIVACY POLICY

Last updated: August 11, 2026

Miraq Media (“Miraq”, “we”, “us”, or “our”) respects your privacy and is committed to processing personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.

This Privacy Policy explains how Miraq processes personal data in connection with the Miraq website, digital products, music licensing, customer communications, and related services.

1. Data Controller

The data controller responsible for personal data processed by Miraq is:

Miraq Media
Business ID (Finland): 1810848-2
Espoo, Finland
Email: media@miraq.app

2. Personal Data We Process

Depending on how you interact with Miraq, we may process:

  • Your name and email address.
  • Billing or country information where necessary for transactions, taxation, or legal compliance.
  • Purchase and transaction information, including products purchased, license type, purchase date, price, and order or transaction references.
  • Information necessary to provide access to purchased digital products, downloads, licenses, or related services.
  • Communications you send to Miraq, including customer-support requests and licensing enquiries.
  • Information necessary to administer and verify licenses and protect Miraq's digital products against unauthorized use or redistribution.

Technical information, such as IP addresses, browser information, device information, cookies, and access data, may also be processed by third-party services used to operate the website and store, including Payhip.

Miraq does not intentionally collect special categories of personal data through its ordinary services.

3. How Personal Data Is Collected

Personal data may be collected:

  • directly from you when you purchase a product or contact Miraq;
  • through Payhip when you complete a purchase or access a digital product;
  • through payment service providers in connection with payment processing and transaction confirmation; and
  • through technical systems used to operate the website, online store, and related services.

Certain information is necessary to complete a purchase, deliver digital products, provide customer support, administer licenses, or comply with legal obligations.

4. Purposes and Legal Bases for Processing

Miraq processes personal data only where there is a lawful basis under the GDPR.

4.1 Contract and Order Fulfilment

Personal data may be processed where necessary to:

  • process and confirm purchases;
  • deliver digital music and other purchased products;
  • provide access to licensed content;
  • provide customer support relating to purchases;
  • administer licensing information; and
  • communicate with customers regarding their transactions.

Legal basis: Article 6(1)(b) GDPR – performance of a contract.

4.2 Legal and Tax Obligations

Miraq may retain and process transaction, accounting, and other required information where necessary to comply with applicable accounting, taxation, consumer-protection, and other legal obligations.

Legal basis: Article 6(1)(c) GDPR – compliance with a legal obligation.

4.3 Security, Fraud Prevention and Platform Protection

Miraq may process information where necessary to:

  • prevent fraud and unauthorized transactions;
  • detect misuse of the Miraq platform;
  • protect digital products and licensing systems;
  • investigate unauthorized access or redistribution; and
  • maintain the security and reliability of its services.

Legal basis: Article 6(1)(f) GDPR – legitimate interests.

Miraq's legitimate interests include protecting its business, customers, digital assets, licensing system, and platform infrastructure.

4.4 Customer Communications

Personal data may be processed when you contact Miraq regarding purchases, licensing, technical support, privacy matters, or other enquiries.

Legal basis: Article 6(1)(b) or Article 6(1)(f) GDPR, depending on the nature of the communication.

4.5 Marketing

A purchase from Miraq does not by itself constitute consent to receive unrelated marketing communications.

If Miraq introduces marketing communications requiring consent, such communications will be sent only where a lawful basis exists under applicable law.

You may withdraw consent or unsubscribe from marketing communications at any time where processing is based on consent.

5. Payhip and Payment Processing

Miraq uses Payhip as its e-commerce, checkout, and digital-product delivery platform.

Payhip processes personal data in connection with its own services, including information relating to purchases and digital-product delivery. Payhip may process information such as name, email address, IP address, billing information, and technical or usage information.

Payhip's own processing is governed by its Privacy and Cookies Policy:

Payhip Privacy & Cookies Policy

Payments for Miraq products may be processed through Stripe or PayPal, depending on the payment method selected during checkout.

Miraq does not store or have direct access to full payment-card numbers, CVV codes, or equivalent payment credentials. Payment information is handled by the relevant payment service provider.

Stripe and PayPal process personal data according to their own privacy policies and applicable data-protection requirements.

6. Service Providers and Data Recipients

Miraq may use third-party service providers where necessary to operate its services and fulfil transactions.

These include:

  • Payhip – e-commerce, checkout, order management, and digital-product delivery.
  • Stripe – payment processing.
  • PayPal – payment processing.

Miraq may also disclose personal data to authorities, accountants, legal advisers, or other professional advisers where required by law or reasonably necessary to protect Miraq's legal rights, property, security, or customers.

Miraq does not sell personal data.

Miraq does not provide customer personal data to third parties for their own unrelated direct-marketing purposes.

7. International Data Transfers

Some service providers used by Miraq may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, the relevant service provider is responsible for applying an appropriate legal transfer mechanism under applicable data-protection law, such as an adequacy decision, Standard Contractual Clauses, or another legally recognized safeguard where required.

Because Payhip, Stripe, and PayPal operate international services, personal data may be processed in multiple jurisdictions in accordance with their respective privacy and data-protection arrangements.

8. Cookies and Technical Data

The Miraq website and Payhip storefront may use cookies or similar technologies necessary for website functionality, security, checkout, authentication, preferences, or analytics.

Payhip's own use of cookies and similar technologies is governed by its Privacy and Cookies Policy.

Where applicable law requires consent for non-essential cookies or similar technologies, an appropriate consent mechanism will be provided.

You can also control or delete cookies through your browser settings. Disabling certain cookies may affect website or checkout functionality.

9. Data Retention

Miraq retains personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by applicable law.

In particular:

  • Transaction and accounting information is retained for the periods required by applicable Finnish accounting and tax legislation.
  • Purchase and licensing information may be retained for as long as reasonably necessary to administer previously granted licenses and to establish, exercise, or defend legal claims.
  • Customer-support and other correspondence may be retained for as long as reasonably necessary to handle the matter and maintain appropriate business records.
  • Security-related information may be retained for an appropriate period based on the purpose for which it was collected.

Third-party service providers may retain personal data for their own legally permitted periods in accordance with their respective privacy policies.

For example, Payhip states that it retains certain EU transaction information for ten years for EU VAT purposes. Such retention is part of Payhip's own processing and does not mean that Miraq independently determines Payhip's retention periods.

10. Your Rights Under the GDPR

Depending on the circumstances and applicable legal conditions, you have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete personal data;
  • request erasure of your personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • receive certain personal data in a portable format;
  • withdraw consent where processing is based on consent; and
  • lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, contact:

media@miraq.app

Miraq may need to verify your identity before fulfilling certain requests in order to protect personal data from unauthorized disclosure.

Some rights are subject to limitations under applicable law. For example, Miraq may be required to retain certain transaction, accounting, or licensing information even if you request its deletion.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that your personal data has been processed unlawfully.

For Miraq, the relevant supervisory authority in Finland is:

Office of the Data Protection Ombudsman
Finland

Further information about the authority and how to submit a complaint is available from the official Finnish data protection authority.

12. Data Security

Miraq takes reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Miraq's payment processing is handled through established third-party payment providers, and Miraq does not store full payment-card credentials.

13. Children's Privacy

Miraq's products and services are not specifically directed at children.

Miraq does not intentionally collect personal data from children for purposes unrelated to providing its services.

If you believe that a child has provided personal data to Miraq without appropriate authorization, please contact us at media@miraq.app so that the matter can be assessed and, where legally appropriate, the information deleted.

14. Changes to This Privacy Policy

Miraq may update this Privacy Policy from time to time to reflect changes in its services, service providers, applicable legislation, or data-processing practices.

The current version will be published on the Miraq website together with its effective date.

If a change materially affects your rights or the way Miraq processes your personal data, Miraq will take any additional notification measures required by applicable law.

15. Contact

For privacy questions, GDPR requests, or other matters concerning the processing of personal data, please contact:

Miraq Media
Business ID (Finland): 1810848-2
Espoo, Finland
Email: media@miraq.app

Last updated: August 11, 2026