Privacy Policy
Effective Date: August 2026
1. Data Collection and Usage
To administer performance rights and royalties, IMPRA collects Personally Identifiable Information (PII) including, but not limited to, legal names, ID/passport numbers, contact details, company registration numbers, and banking information. This data is collected solely to verify identities, administer accounts, and disburse needletime royalties securely.
2. Data Security and POPIA Compliance
IMPRA employs strict role-based access controls (RBAC) and encrypted data vaults to protect your uploaded documents and financial information in compliance with the Protection of Personal Information Act (POPIA). Only authorized Executive and Staff personnel have restricted access to this information to perform operational duties.
3. Data Retention
IMPRA retains member data for as long as the membership is active or as required by law for auditing and tax purposes. Specifically regarding member grievances, IMPRA maintains a complaints file where all complaint records are retained for a period of three years, in accordance with our retention policy.
4. Data Sharing
IMPRA does not sell your personal data. We may share necessary metadata (such as artist names and track titles) with global collecting societies and broadcasters exclusively for the purpose of identifying your works and collecting royalties on your behalf.
5. Your Rights
Members have the right to request access to, correct, or update their personal information at any time via the digital portal.