Now, for the Privacy Policy, because you are StageOne Talent handling sensitive “Right to Work” documents and bank details, this page needs to be very specific about GDPR compliance and data security. This builds massive trust with your actors.
Copy and paste this into your new page at https://thecastingportal.com/privacy-policy/:
Privacy Policy & Data Protection Agreement
1. Introduction
This Privacy Policy explains how The Casting Portal, owned and operated by StageOne Talent (“we,” “us,” or “the Agency”), collects, uses, and protects your personal data. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
To operate as a professional talent agency, we collect the following:
- Public Profile Data: Name, stage name, headshots, physical measurements, skills, and credits.
- Sensitive Identity Data: Passport copies, Visas, or Birth Certificates (to verify your Right to Work).
- Financial Data: National Insurance (NI) numbers and Bank Account details for payroll and tax purposes.
- Contact Data: Email address, phone number, and residential address.
3. How We Use Your Data
- Casting: Your public profile data is shared with verified Casting Directors and Production Companies for booking purposes.
- Legal Compliance: Your ID and NI number are used solely to verify your legal right to work and to process payments.
- Communication: To notify you of “Options,” “Pencilled” dates, and “Final Bookings.”
4. Data Security and Storage
- Encryption: Sensitive documents (IDs and Bank Details) are stored on secure, encrypted servers.
- Access Control: Only authorized Agency Administrators of StageOne Talent have access to your private legal and financial information. It is never displayed on your public profile.
- Third Parties: We do not sell your data. We only share sensitive info with Production Companies or HMRC when legally required for a specific contract or payroll.
5. Data Retention
We retain your profile data as long as your account is active. Legally, we must retain financial and contract records (including NI and payment history) for 6 years following the end of a tax year to comply with HMRC audit requirements.
6. Your Rights
Under GDPR, you have the right to:
- Access: Request a copy of the data we hold on you.
- Rectification: Correct any inaccurate information.
- Erasure: Request the deletion of your account (subject to legal retention periods for financial records).
- Withdrawal: Withdraw consent for data processing at any time.
7. Prohibited Content
We maintain a strict No Nudity and No Suggestive Content policy. Any profiles containing such material will be deleted immediately to maintain our professional agency standards.