1) Overview & Scope
HemeKar (we, us, our), operated by MIM Company, provides a workforce management platform connecting professionals with employers across Iraq. This policy applies to all websites, mobile applications, and services we operate (the Platform). By using the Platform, you agree to this Privacy Policy.
Key Principles:- Transparency in how we collect and use your data
- User control over personal information
- Data security and protection
Territory: IraqLanguages: EN / العربية / کوردیSupport: 24/7
2) Information We Collect
We collect information you provide directly, automatically through your use of our Platform, and from third-party sources when necessary for verification or enhanced services.
Account & Profile Information
- Full name and preferred name
- Contact details (email, phone, address)
- Identity documents (national ID, passport, residency card)
- Professional profile pictures and portfolio images
- CVs, resumes, and portfolio links
Professional Information
- Educational background and qualifications
- Professional licenses and certifications
- Union and association memberships
- Work experience and employment history
- Skills, specializations, and expertise areas
Technical & Usage Data
- Device information (type, OS, browser, version)
- IP address and approximate location
- GPS location (when explicitly enabled)
- Log files and server data
- Analytics and performance metrics
Interaction & Communication Data
- Search queries and preferences
- Viewed profiles and job postings
- Messages, chats, and communications
- Platform interactions and engagement metrics
Verification & Compliance Data
- Regulatory identifiers and license numbers
- Blockchain-based verification records (immutable proofs)
- Status updates from regulatory bodies and unions
- Background verification and criminal record checks
Employer & Company Information
- Company name, registration, and business license
- Authorized representative contact information
- Industry sector and business classification
- Company size, workforce requirements, and job postings
3) How We Use Information
We use your information to provide, improve, and personalize our workforce management services while ensuring security, compliance, and trust across our platform.
Core Platform OperationsAccount management, profile creation, service delivery
Matching & RecommendationsAI-powered job matching, skill-based recommendations
Security & SafetyFraud prevention, identity verification, platform security
Primary Uses
- Create and maintain your professional profile
- Match professionals with relevant job opportunities
- Facilitate communication between employers and workers
- Process subscription fees and payments
- Verify credentials, licenses, and professional qualifications
- Maintain compliance with Iraqi labor laws and regulations
Secondary Uses
- Analyze platform usage to improve features and performance
- Send service updates, notifications, and support communications
- Conduct research for Iraqi workforce insights and trends
- Prevent fraud, abuse, and unauthorized access
- Resolve disputes and provide customer support
- Comply with legal obligations and regulatory requirements
Important:We do not sell your personal data to third parties. We may share aggregated, anonymized statistics about Iraq's workforce for research purposes only.
4) Legal Basis for Processing
We process your personal information based on several legal grounds that ensure our operations are lawful, transparent, and in your best interest.
Contract PerformanceTo provide the workforce management services you signed up for
Legitimate InterestsTo improve our platform, prevent fraud, and enhance security
Your ConsentFor optional features like GPS location, marketing communications
Legal ObligationsTo comply with Iraqi labor laws, tax requirements, and government requests
Detailed Legal Basis by Data Type
Contract-Based Processing:- Profile creation and maintenance
- Job matching and recommendations
- Communication between users
- Payment processing
Consent-Based Processing:- GPS location tracking
- Marketing and promotional emails
- Optional analytics and research participation
- Advanced AI matching features
You can withdraw your consent at any time for consent-based processing. This will not affect the lawfulness of processing based on consent before its withdrawal.
5) Payments & Financial Information
We support multiple secure payment options tailored for Iraq's banking system and digital payment preferences.
FIB BankTraditional banking transfers and debit cards
FASTPAYMobile payment solutions and digital wallets
QICARDPrepaid card solutions and top-up services
Cash PaymentsThrough authorized agents and partner locations
Payment Security:- All financial data is encrypted and processed by certified payment partners
- We store only minimal payment metadata necessary for accounting and support
- Transaction disputes are handled according to Iraqi banking regulations
6) Verification & Compliance
HemeKar integrates advanced credential verification systems, including blockchain-backed proofs, to ensure trust and authenticity across Iraq's workforce. We work with regulatory bodies, unions, and educational institutions to maintain accurate professional records.
Identity VerificationNational ID, passport, and residency verification
Professional LicensesEngineering, medical, legal, and technical certifications
Union MembershipsIraqi trade unions and professional associations
Blockchain RecordsImmutable verification proofs and timestamps
Verification Process
- Document submission and review (1-3 business days)
- Third-party verification with issuing authorities
- Blockchain recording of verification status
- Continuous monitoring for status changes
Data Sources & Partners
- Iraqi Ministry of Education and Higher Education
- Professional regulatory bodies and licensing authorities
- Iraqi Federation of Trade Unions (IFTU)
- Kurdistan Region professional syndicates
Blockchain Technology:Where used, hashes or references to your verified credentials may be written to an immutable ledger to enhance trust and anti-tamper assurance. Underlying documents remain stored off-chain with appropriate security measures.
7) Cookies & Similar Technologies
We use cookies, web beacons, and similar technologies to enhance your experience, provide personalized services, analyze usage patterns, and maintain platform security. You have control over most of these technologies through your browser settings.
Essential CookiesRequired for platform functionality
Analytics CookiesHelp us understand platform usage
Preference CookiesRemember your settings and choices
Marketing CookiesEnable personalized content and ads
Detailed Cookie Information
Essential Cookies (Always Active):- Authentication and session management
- Security features and fraud prevention
- Load balancing and server optimization
- CSRF protection and request validation
Optional Cookies (Your Choice):- Language and interface preferences
- Search filters and saved queries
- Usage analytics and performance metrics
- Personalized job recommendations
Your Cookie Controls:- Browser settings: Block or delete cookies through your browser preferences
- Platform settings: Manage optional cookies in your account preferences
- Opt-out tools: Use industry-standard tools to limit tracking cookies
8) Information Sharing & International Transfers
We share your information only when necessary to provide our services, comply with legal obligations, or protect legitimate interests. When data is transferred outside Iraq, we implement appropriate safeguards to ensure your information remains protected.
When We Share Information
- Service providers: Cloud hosting, analytics, communications
- Payment partners: FIB Bank, FASTPAY, QICARD processors
- Verification partners: Educational institutions, regulatory bodies
- Legal compliance: Government agencies, law enforcement
- Business transfers: Mergers, acquisitions, asset sales
What We Don't Share
- We never sell your personal information to data brokers
- No sharing for unauthorized marketing or advertising
- Identity documents are never shared with employers
- Private messages remain confidential between parties
- Verification status is shown only with your consent
International Transfers & Safeguards:- Data Processing Agreements (DPAs) with all service providers
- Encryption in transit and at rest for all transferred data
- Regular audits and compliance assessments of data partners
- Contractual obligations for data protection and deletion
9) Data Retention
We retain your personal information only as long as necessary for the purposes described in this policy, to comply with legal obligations, resolve disputes, and enforce our agreements. Different types of information have different retention periods based on their purpose and legal requirements.
Active AccountsData retained while account is active and for service provision
Inactive Accounts24 months after last activity, then automated deletion
Financial Records7 years as required by Iraqi tax and accounting laws
Legal ComplianceAs required by applicable laws or ongoing legal proceedings
Detailed Retention Schedule
Profile & Account Data:- Basic profile information: Duration of account + 12 months
- Professional credentials: Duration of account + 3 years
- Identity verification records: 5 years from verification date
- Messages and communications: 2 years from last message
Technical & Log Data:- Server logs and access records: 12 months
- Security incident logs: 3 years
- Analytics and usage data: 18 months
- Cookies and tracking data: As per cookie settings
Automated Deletion Process:We have implemented automated systems to regularly review and delete data that has exceeded its retention period. You will receive advance notice before any significant data deletion affects your account.
10) Security & Data Protection
We implement comprehensive security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. Our security framework includes technical, administrative, and physical safeguards designed to protect data throughout its lifecycle.
EncryptionAES-256 encryption for data at rest, TLS 1.3 for data in transit
Access ControlsMulti-factor authentication, role-based permissions, principle of least privilege
Monitoring24/7 security monitoring, intrusion detection, automated threat response
Regular AuditsQuarterly security assessments, penetration testing, compliance reviews
Important Security Notice:No system is 100% secure. Please use strong, unique passwords, enable two-factor authentication when available, keep your devices secure, and report any suspicious activity immediately. We will never ask for your password via email or phone.
11) Your Privacy Rights & Controls
You have important rights regarding your personal information. We provide you with tools and options to access, control, and manage your data. You can exercise these rights through your account settings or by contacting us directly.
Data Access & Control Rights
- Access: View and download your personal data
- Correction: Update or fix inaccurate information
- Deletion: Request removal of your data
- Portability: Export data in machine-readable format
Processing Control Rights
- Restriction: Limit how we process your data
- Objection: Object to certain types of processing
- Consent withdrawal: Withdraw consent for optional features
- Automated decisions: Request human review of AI decisions
How to Exercise Your Rights:- Self-service: Use privacy controls in your account settings
- Contact us: Email privacy@hemekar.com for complex requests
- Response time: We respond to privacy requests within 30 days
- Identity verification: We may ask for identity confirmation before fulfilling requests
12) Children's Privacy
HemeKar is designed for individuals who are of legal working age in Iraq. Our platform is intended for professional workforce management and requires users to be at least 18 years old or have reached the minimum working age as defined by Iraqi labor laws, whichever is higher.
Age Restrictions:- Minimum age: 18 years old (in accordance with Iraqi labor laws)
- Professional context: Platform designed for employment and professional services
- Identity verification: All users must provide valid government-issued ID
Protection Measures
- Age verification during registration process
- Immediate account suspension if underage user detected
- Automatic data deletion for underage accounts
- Regular monitoring and compliance reviews
Reporting & Response
- Report suspected underage users: privacy@hemekar.com
- Investigation within 24 hours of report
- Cooperation with Iraqi authorities when required
- Parental notification for data removal requests
If you believe a child under 18 has provided personal information to HemeKar, please contact us immediately at privacy@hemekar.com. We will investigate and take appropriate action to remove the information and prevent future access.
13) Contact Us
For questions about this Privacy Policy, data protection concerns, or to exercise your privacy rights, please contact us through any of the following channels:
Company Information
HemeKar • MIM Company
Registration: Kurdistan Region of Iraq
Address: Wave Avenue A 3 4, Erbil, Iraq
Business Hours & Support:- Regular Hours:Sunday – Thursday, 8:00 AM – 6:00 PM (Iraq Time)
- Emergency Support:Available 24/7 for critical issues
- Response Time:Privacy requests within 30 days, general inquiries within 48 hours
24/7 SupportMultilingualLocal Presence
14) Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make significant changes, we will provide appropriate notice to ensure you remain informed about how we protect your information.
Minor UpdatesPosted on website with updated date
Significant ChangesEmail notification + in-app notice
Material Changes30-day advance notice + explicit consent required
Legal ComplianceImmediate updates when required by law
What Constitutes a Significant Change?
- New types of personal information collected
- Changes in how we use your information
- New third-party sharing arrangements
- Changes to your privacy rights
Your Options When We Update
- Review the updated policy before it takes effect
- Contact us with questions or concerns
- Adjust your privacy settings
- Discontinue service if you disagree with changes
Version History:We maintain a record of all policy versions and their effective dates. You can request access to previous versions by contacting our Privacy Officer.
Current Version: 2.1 | Effective Date: August 20, 2025 | Last Reviewed: August 20, 2025