Privacy policy
Version 1.0, effective 31 October 2026.
This policy explains how Talent Stage ("we", "us") uses personal information when you visit https://talentstage.co.uk or create a profile. We’ve written it to match how the platform actually works. If anything here is unclear, contact us at privacy@talentstage.co.uk.
Who we are
Talent Stage is operated by Rivvar Limited, Rivvar Limited 41 High Street, Leicester, United Kingdom, LE8 0HS. We are the data controller for the personal information described here. Our contact for privacy questions is privacy@talentstage.co.uk.
What Talent Stage is
Talent Stage lets creative talent (actors, models, extras, presenters, voice artists and others) build a professional profile and share it with a single link. You decide whether your profile is public, unlisted or private, and which details appear on it.
The information we collect
| Information | Why we use it | Lawful basis | Required? | How long we keep it | Who can see it | Shared with |
|---|---|---|---|---|---|---|
| Account details Name, email address, password (stored scrambled), confirmation that you’re 18 or over, account status | To create and secure your account and sign you in | Contract | Yes | While your account exists; erased 14 days after you delete it | You; administrators | Our hosting provider (stores data on our behalf) |
| Profile Professional name, headline, biography, location, categories, skills, accents, languages, availability | To build the profile you choose to share | Contract | No | While your account exists | You; anyone you allow to see your profile; administrators | Our hosting provider (stores data on our behalf) |
| Optional appearance details Playing age, height, eye and hair colour | Commonly requested by casting professionals; shown only if you choose | Contract | No | While your account exists | You; visitors only if you show them; administrators | Our hosting provider (stores data on our behalf) |
| Experience and training Credits, roles, companies, training and qualifications you add | To show your experience on your profile and CV | Contract | No | While your account exists | You; anyone you allow to see your profile; administrators | Our hosting provider (stores data on our behalf) |
| Photos and links Photos (re-saved without hidden metadata such as GPS), photo descriptions, showreel and portfolio links | To display your portfolio | Contract | No | Until you delete them or your account | You; anyone you allow to see your profile; administrators | Our hosting provider (stores data on our behalf) |
| Contact and representation Agency name and website, your website, optional public contact email | So people can reach you or your agent, if you choose | Contract | No | While your account exists | You; visitors only if you show them; administrators | Our hosting provider (stores data on our behalf) |
| Privacy choices Profile visibility settings, marketing email preference, policy versions you accepted, cookie choices made while signed in | To respect and evidence your choices | Legal obligation; consent (marketing) | Yes | While your account exists; cookie choices up to 12 months after expiry | You; administrators | Our hosting provider (stores data on our behalf) |
| Security records Sign-in times, IP addresses, device type, security changes, two-factor settings (secret encrypted) | To protect your account and detect misuse | Legitimate interests | Yes | Up to 12 months | You; administrators | Our hosting provider (stores data on our behalf) |
| Administrator audit trail Actions taken by administrators, including on your account | Accountability and security | Legitimate interests | Yes | As long as needed for security and accountability | Super administrators | Our hosting provider (stores data on our behalf) |
| Cookie consent (visitors) A random consent ID, your choices, when you made them. No IP address or device details | To remember your cookie choices | Legal obligation | Yes | Until it expires plus 12 months | Administrators | Our hosting provider (stores data on our behalf) |
| Messages to us Emails you send us and our replies | To answer your questions and requests | Legitimate interests | No | Up to 2 years | Administrators | Our email provider |
We do not ask for, and you should not add, information about your health, ethnicity, religion, sexual orientation, political views or other special categories of data. Profile fields such as height and playing age are optional. Some details, such as height and your public contact email, are hidden from your profile until you choose to show them.
You must be 18 or over to create an account. We record that you confirmed this, not your date of birth.
How profiles and visibility work
- Public: anyone can view your profile. It is only shown in search engines such as Google if you turn on search indexing.
- Unlisted: only people with your link can view it. We tell search engines not to index it.
- Private: only you can see it, while signed in.
Your name, headline, biography and photos appear whenever your profile is visible. You control the other details individually. Making your profile private also stops your photo links working straight away. Your sign-in email address is never shown on your profile.
Photos and other media
When you upload a photo we create new copies at standard sizes and discard the original file. This process removes hidden information embedded in the file, including camera details and GPS location. Photos are stored privately and only shown according to your profile’s visibility. Only upload photos you have the right to use.
Showreels from YouTube or Vimeo use their privacy-enhanced players and load only when a visitor presses play. From that point YouTube or Vimeo handle the viewing under their own privacy policies.
Our lawful bases
- Contract: to provide your account and profile, which you ask us to do when you sign up.
- Legitimate interests: to keep the platform secure (for example sign-in records and preventing abuse), to keep an audit trail of administrator actions, and to answer your messages. We balance these against your rights and keep them proportionate.
- Consent: for optional cookies and marketing emails. You can withdraw consent at any time without affecting anything else.
- Legal obligation: where we must keep or disclose information by law.
Account security
Passwords are stored only in a scrambled form that can’t be reversed. Administrator accounts must use two-factor authentication. We record sign-ins and security changes on your account (with the IP address and device type) so you can review them under Security and so we can detect misuse.
Cookies and similar technologies
We use strictly necessary cookies to keep you signed in, protect forms against forgery and remember your cookie choices. We only use optional cookies if you agree. You can change your choices at any time from Cookie settings at the bottom of every page.
| Name | Type | Purpose | Provider | Lasts |
|---|---|---|---|---|
app_session | Strictly necessary | Keeps you signed in and remembers form state between pages. | This website | 2 hours |
cookie_consent | Strictly necessary | Stores your cookie choices so we don’t ask again. | This website | 6 months |
remember_web_ | Strictly necessary | Keeps you signed in if you choose “Keep me signed in”. | This website | 30 days |
XSRF-TOKEN | Strictly necessary | Protects forms against cross-site request forgery. | This website | 2 hours |
Who we share information with
We do not sell your information or share it with advertisers. Your profile is shared with whoever you allow to see it. Our hosting provider stores the platform’s data on our behalf under a contract that requires them to protect it. We may disclose information if the law requires it, or to protect people from harm.
How long we keep information
We keep your account and profile while your account exists. If you delete your account, your profile is hidden immediately and everything is permanently erased after 14 days, unless you sign in and cancel. Sign-in activity is kept for up to 12 months. Records of administrator actions and of deletion requests are kept for as long as needed for security and accountability, and contain no profile content.
Your rights
Under UK data protection law you have the right to:
- see the information we hold about you and receive a copy (you can download it yourself under Privacy and data);
- correct it (most of it you can edit directly);
- have it erased (you can delete your account under Privacy and data);
- restrict or object to how we use it;
- move it to another service (your download is in a standard, machine-readable format);
- withdraw consent you’ve given, at any time.
To use any of these rights, use the tools in your account or contact privacy@talentstage.co.uk. We will respond within one month.
International transfers
We aim to store data in the UK or the European Economic Area. If any provider processes data elsewhere, we will make sure appropriate safeguards are in place, such as the UK International Data Transfer Agreement.
Complaints
If you’re unhappy with how we’ve handled your information, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk, 0303 123 1113.
Changes to this policy
When we make an important change we will tell you, and may ask you to review the new version next time you sign in. Previous versions are listed below.