CASTING SCOTLAND MARKETPLACE
Privacy
Notice.
Effective 8 September 2026 · Casting Scotland Ltd, Company No. SC901780, 21 Groveburn Ave, Thornliebank, Glasgow G46 7DA · castings@castingscotland.co.uk
1. Who we are
Casting Scotland Ltd is the controller of personal information used to operate the Casting Scotland Marketplace. This notice explains how we use information about actors, models, crew members, production users, administrators and people who submit safety reports.
Casting Scotland Platform is a separate service. Marketplace information is not automatically used to create a Platform account or grant representation.
2. Information we collect
We collect account details such as your name, email address, encrypted password, account type, organisation name, verification status and security records. Actor profiles may include date of birth, playing age, location, biography, skills, availability, profile links and up to four photographs. Crew profiles may include date of birth, location, primary specialism, experience, skills and a portfolio or credits link. We also process casting briefs, artwork, applications, application decisions, safety reports, moderation records and messages needed to operate these features.
If you request professional representation, we store the complete agency-agreement version you signed, your typed signature, verified email, signing time, application status, commission terms and hashed network and device audit information. This provides evidence of your request and the terms presented to you.
We receive limited technical information needed for security and service operation, such as session identifiers, request information and cookie choices. With your consent, Google Analytics receives online identifiers and usage information. We do not ask you to place identity documents, bank details or special-category information in your public profile or application.
3. Why we use it and our lawful bases
We use account, profile, casting and application information to provide the Marketplace and take steps you request before entering into our terms with you. We use a signed professional-representation request to assess your application, keep evidence of the terms and, if accepted, administer the agency agreement. This processing is necessary to take steps at your request before a contract and to perform any resulting contract. We use security, moderation, fraud-prevention and safety information for our legitimate interests in operating a safe, reliable service and, where relevant, to comply with legal obligations or protect someone’s vital interests. We send essential account, application and agreement-status emails to provide the service.
We use non-essential analytics only with your consent. You can withdraw analytics consent through Cookie settings. A professional representation request creates a pending record for agency review and does not itself grant Platform access or representation.
4. Who receives information
A production can view an actor’s Marketplace profile and application information only after that actor applies to its casting. Productions then act independently when using applicant information for their casting and must follow the production terms and data-protection law.
We use service providers to host the Marketplace and database, deliver account emails and, with consent, provide analytics. These currently include DigitalOcean, Mailgun and Google Analytics. We may disclose information to professional advisers, regulators, courts, law enforcement or safeguarding authorities where lawfully required or necessary. We do not sell personal information.
5. International transfers
Some providers may process information outside the UK. Where personal information is transferred internationally, we require an appropriate UK transfer mechanism or rely on another lawful safeguard, together with proportionate security measures.
6. How long we keep information
We keep account and profile information while the account is active and remove it when the user completes account deletion, except where limited records must be retained for legal, security, fraud-prevention or safeguarding reasons. Casting and application records are kept only as long as reasonably needed to operate the Marketplace, resolve disputes and meet legal or safety obligations. Expired security tokens and operational records are periodically removed or anonymised.
Signed agency agreements and their audit records are retained while the related account and application or representation remain active. They are deleted with the Marketplace account unless a separate lawful retention process has been applied.
Safety reports may be retained after account deletion where necessary to protect users, investigate a concern or establish, exercise or defend legal claims; the reporter’s account identifiers are anonymised where appropriate.
7. Children and safeguarding
Casting Scotland Marketplace accounts are currently available only to people aged 16 or over. Actor, crew and dual-purpose accounts must provide a date of birth during registration. It is kept private, is not shown to other users and cannot be changed through the profile form.
Users aged 16 or 17 must involve a parent or legal guardian when reviewing opportunities, communications and proposed engagements. Productions must comply with all applicable child-performance, consent, chaperone and safeguarding requirements.
8. Your rights
Depending on the circumstances, you may ask for access to your information, correction, deletion, restriction, portability or an objection to its use. You may withdraw consent at any time without affecting earlier lawful use. You can update profile information or delete your Marketplace account through your account area.
To exercise a right or ask a privacy question, email castings@castingscotland.co.uk. We may need to verify your identity before acting. You can complain to the Information Commissioner’s Office at ico.org.uk, although we would welcome the opportunity to address your concern first.
9. Security and automated decisions
We use access controls, email verification, administrator authenticator security, password hashing and other technical and organisational measures designed to protect personal information. No internet service can guarantee absolute security. We do not make solely automated decisions that have legal or similarly significant effects on users.
10. Changes
We may update this notice as the Marketplace, its providers or legal requirements change. We will show the effective date and provide appropriate notice of material changes.
