Terms and Privacy
Terms version date: 9 October 2026. Privacy notice version date: 9 October 2026.
1. About these terms
1.1 These terms are a contract between you and GET CASTED LTD ("we", "us", "our") for your use of Get Casted, the website and related services we operate (the "service").
1.2 By creating an account, ticking the box to accept these terms, or otherwise using the service, you agree to these terms. If you use the service only to browse, the parts that can apply without an account still apply to you, including the rules on acceptable use and our intellectual property.
1.3 Please read these terms carefully. Some of them limit what we are responsible for, and they explain that work, pay, and meetings arranged through Get Casted are between users, not with us.
1.4 If you are using Get Casted as a consumer (mainly for purposes outside your trade, business, or profession), nothing in these terms takes away rights you have under the Consumer Rights Act 2015 or any other law that we are not allowed to exclude.
1.5 Personal data is covered by our privacy notice, which is separate from these terms. These terms do not replace that notice.
2. Who we are and how to contact us
2.1 We are GET CASTED LTD, a company registered in England and Wales, company number 17455933. Our registered office is 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom.
2.2 You can contact us by:
- (a) email at info@getcasted.co.uk;
- (b) the support form in the app, once you are signed in; or
- (c) post to the registered office above.
2.3 If we need to contact you, we will use the email address on your account, or a notice in the service.
3. What Get Casted is
3.1 Get Casted is a place where people in film, television, theatre, and related work can find each other. Users can browse open listings, publish a profile, post a project or role, apply, save a listing, and message other users.
3.2 We provide the venue for that contact. We are not your agent, manager, employer, hirer, or employment business. We do not represent you. We do not audition, hire, or pay cast or crew. We do not negotiate the terms of any role, and we are not a party to any agreement you make with another user.
3.3 A listing, an application, a message, or a "selected" or similar status on a listing is not a job offer from us and does not create a contract between you and us. Any agreement about a role, a collaboration, pay, credit, expenses, location, or hours is solely between the users involved.
3.4 Once users decide to work together, they normally continue that work outside Get Casted. We do not supervise that work, the place it happens, or how people treat each other once they leave the service.
3.5 We do not promise that you will be cast, that you will find cast or crew, that a listing is genuine, or that another user is who they claim to be.
4. Who can use Get Casted
4.1 You must be 18 or over to create an account or use the service. We ask for your date of birth when you sign up so we can apply that rule. We do not keep that date on your account.
4.2 You must not use Get Casted to look for, contact, cast, or advertise a role for anyone under 18. If a production involves children, you are responsible for child-performance licensing and every other legal duty that applies to that production. Those duties are yours, not ours.
4.3 You must have the legal capacity to enter this contract. If you use Get Casted for an organisation, you confirm that you have authority to bind that organisation, and "you" includes that organisation.
4.4 One person, one account. You must not create an account for someone else, share your login, or keep a second account after we have closed one.
4.5 We may refuse a registration, or close an account, if we reasonably believe you are under 18, you have given false information, or these terms allow us to.
5. Your account
5.1 You can register with an email address and password, or with Google. If you use Google, Google's own terms also apply to that sign-in. We receive the account details Google shares with us so we can create and run your Get Casted account.
5.2 You must give accurate information and keep it up to date. That includes your name, email address, and the professional details you choose to publish.
5.3 You must confirm your email address when we ask you to. An account that is never confirmed may be removed. Unconfirmed accounts are removed after about 24 hours.
5.4 Keep your password confidential. You are responsible for activity on your account unless you have told us that someone else is using it without your permission, or the activity was our fault. Tell us promptly if you think your account has been compromised.
5.5 You choose what your profile contains and, where the service offers a choice, who can see it. Some details are shown only in line with those settings, or only to members with Full access. Do not publish anything you are not willing for the permitted audience to see.
5.6 You can set preferences for email and push notifications in Settings. We may still send messages that are necessary to run your account, such as security, payment, and service notices.
6. Membership and payment
6.1 Browsing open listings does not require a paid membership. Full access is the paid membership. It lets you apply for ads, post your own ads, and message other users.
6.2 The standard price of Full access is £3.29 per month, in pounds sterling. The price you pay is the price shown at checkout, including any promotion applied there. If a promotion is for a limited time, the standard price applies when that time ends, unless checkout says otherwise.
6.3 Payment is taken by Stripe. Stripe's terms apply to the payment processing. We do not store your full card number.
6.4 Full access is a monthly subscription. It starts when checkout succeeds and renews each month until you cancel. You authorise Stripe to take each renewal payment from the payment method you provide.
6.5 You can cancel Full access in the service, or through the Stripe billing portal we link to. Cancellation stops the next renewal. You keep Full access until the end of the period you have already paid for, unless we end it earlier under these terms or you close your account.
6.6 If you close your account, we cancel the subscription and delete the Stripe customer we hold for you, where we can. Access ends when the account is closed. Limited payment, invoice, and transaction records may remain where the law requires it, where we reasonably need them for accounting, fraud prevention, or a dispute, or where Stripe keeps them under its own retention rules. The privacy notice explains that retention. We do not refund the unused part of a month, except where clause 6.8 or the law requires a refund.
6.7 If a payment fails, we may suspend Full access until the payment succeeds. Fees already due remain payable.
6.8 If you are a consumer, you may cancel Full access within 14 days of the day you bought it, under the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013. If you ask us to start Full access during that period, you may have to pay a proportionate amount for the days you used. If the service has been fully performed in that period and you acknowledged that you would lose the right to cancel once it was fully performed, you may lose the right to a full refund. After those 14 days, clause 6.5 applies. Nothing in this clause limits a refund the law requires, including where we have not provided the service with reasonable care and skill.
6.9 A day rate, fee, or "paid" or "unpaid" label on a listing is a statement by the user who posted it. It is not a payment to us, and we do not collect, hold, or pay it. Whether that money is actually paid is between the users.
6.10 We may change the price of Full access. We will tell you before the new price applies to a renewal. You can cancel before the renewal if you do not accept the new price. The change does not apply to a period you have already paid for.
7. Listings, applications, and work between users
7.1 If you post a project or an ad, you are responsible for it. It must be a genuine opportunity or collaboration, and the description of the role, dates, location, pay, and what you are asking people to do must be accurate and not misleading.
7.2 If you apply, you are responsible for the information you send. Applying does not oblige the poster to consider you, reply, or hire you. Choosing an applicant, or closing an ad, does not oblige either user to go ahead, and it does not make us a party to that choice.
7.3 You are responsible for your own tax, right to work, insurance, contracts, location permissions, health and safety, and any other legal duty that applies to work you offer or accept. We do not check those things for you.
7.4 Users often meet in person, share contact details, and work together with a difference in experience or power. That carries a real risk of scams, exploitation, harassment, and physical harm. You decide whether to share contact details, where to meet, and whether to go ahead. We do not attend those meetings. We take reasonable steps to operate the safety features described in these terms, including reports and the rule against paying to be considered. No online service can confirm every user, stop every scam, or guarantee that an offline meeting will be safe. Clause 18 still applies.
8. Do not charge anyone to be considered
8.1 You must not charge, request, or accept money or anything else of value as a condition of applying, auditioning, being seen, being shortlisted, or being cast. This includes "admin fees", training that is really a condition of the role, and any other pay-to-play arrangement.
8.2 Clause 8.1 does not stop a genuine production from paying the people it engages, or from describing an unpaid or expenses-only collaboration honestly on the listing.
8.3 We may remove a listing, suspend an account, or close an account if we reasonably believe this clause has been broken. Users can report a listing that asks anyone to pay to be considered.
9. Your content
9.1 "Your content" means anything you upload, post, or send through the service, including your profile, headshots, portfolio files, links, credits, training, equipment, projects, ads, applications, messages, attachments, reports, and support requests.
9.2 You keep ownership of your content. You give us a non-exclusive licence to host, store, reproduce, adapt (for example to resize an image or change a file format), display, and distribute your content solely so we can operate, secure, and moderate the service, and so we can show it to the people your settings and these terms allow.
9.3 The licence lasts for as long as the content is on the service, and for a short period afterwards where we need it to complete deletion, keep a backup until it rolls off, or comply with the law. It is worldwide and royalty-free. We do not sell your headshots or showreel to third parties for their own advertising.
9.4 Messages are visible to the people in that conversation. A listing you publish is visible to people who can browse it. A profile is visible according to the visibility settings the service provides.
9.5 You confirm that:
- (a) you have the rights you need to submit your content, including in photographs and recordings of other people;
- (b) your content does not infringe anyone else's rights; and
- (c) your content complies with these terms.
9.6 We may remove or refuse content that we reasonably believe breaks these terms, the law, or another person's rights. We do not have to monitor all content, and we do not promise to do so.
10. Messages
10.1 Messaging is part of the service so that users can contact each other here. You must not use messages to harass, scam, or pressure another person, or to dodge clause 8.
10.2 We do not read every message. A message can be reported from the conversation. Clause 13 says what you can report and what happens next. We may also look at a conversation when we need to in order to investigate a report, a security issue, or a legal duty.
10.3 If you close your account, conversations you are in are removed for both people, including attachments the other person sent in that thread.
10.4 Sharing a phone number, email address, or other contact detail is your decision. Do it only when you are comfortable. What happens on another service, or in person, is outside our control, except where clause 18 says we remain responsible.
11. Verification
11.1 Verification is optional. If you choose it, we send your primary headshot to Didit and Didit asks you to complete a live camera check. The check is a match between that headshot and the live image. It is not a check of a passport or other identity document.
11.2 A verified tick means we have received a positive result from Didit for that check. It does not mean we have confirmed your identity documents, your credits, your good character, or that you are safe to meet. Absence of a tick does not mean the opposite.
11.3 We store the verification session reference and the result. We do not store the face images from the check in our database. Your headshot stays on your profile until you remove that photo. Didit runs the check under its own terms, which apply to the part of the process that happens on Didit's side. You can choose not to start the check. Deleting your account asks Didit to delete the sessions. Asking us to remove the tick does not, by itself, delete the images Didit holds. The privacy notice explains how to ask for that.
11.4 We may remove a tick, or refuse verification, if we reasonably believe the result is unreliable or was obtained dishonestly.
12. What you must not do
12.1 You must not use the service, or help anyone else to use it, to do any of the following:
- (a) break the law, including fraud, harassment, threats, stalking, hate crime, or terrorism offences;
- (b) upload, request, or share child sexual abuse material, or any sexual content involving a person under 18. This is an absolute bar. We will remove it and we may report it to the police or another competent authority;
- (c) share, or threaten to share, an intimate image of someone without their consent;
- (d) harass, bully, coerce, or sexually exploit another person, including by using a difference in power between a poster and an applicant;
- (e) impersonate another person, or claim credits, a production, or a qualification you do not have;
- (f) post a listing that is fake, misleading, or a vehicle for a scam;
- (g) break clause 8;
- (h) collect, scrape, or harvest profiles, listings, messages, or contact details, by hand or by automated means, except as the service itself allows;
- (i) send spam, or use another user's details to market to them outside the service without their consent;
- (j) upload malware, or interfere with the service, another user's account, or our providers' systems;
- (k) probe, scan, or test the vulnerability of the service without our prior written permission;
- (l) circumvent access controls, payment, or rate limits; or
- (m) use the service in a way that is reasonably likely to harm another person, the service, or our reputation, other than by fair public comment.
12.2 You must not publish another person's home address, phone number, email address, or similar private contact details without a proper reason and, where the law requires it, their consent.
12.3 You must comply with the Equality Act 2010. You may refer to a protected characteristic in a listing, such as age range, sex, or ethnicity, only where that requirement is a genuine requirement of the role and you can justify it. A justification you enter is for that purpose. It is not legal advice, not our approval, and not confirmation that the requirement is lawful. It is not permission to discriminate where the law forbids it. We may ask you to explain a requirement, and we may remove a listing that appears to discriminate.
12.4 We may suspend or close an account, remove content, and report matters to law enforcement or another authority where we reasonably believe this clause has been broken or the law requires it.
13. Reports and our right to act
13.1 You can report a listing, a profile, or a message that breaks clause 8 or clause 12, including illegal content. Use the Report control on that listing, profile, or conversation. A report should be made in good faith. Do not use reports to harass someone.
13.2 If you cannot sign in, or you cannot use that control, email info@getcasted.co.uk. Include the web address of the listing or profile, or describe the message, and say what is wrong. You do not need an account to send that email.
13.3 The Report control confirms on screen that we have the report. That confirmation is the acknowledgement. If you email us, we reply by the next working day to say we have seen it. A person then looks at the report. We do not take action automatically. If the report is about child sexual abuse material, an immediate safety threat, or illegal content that is still available, we look at it on the same working day we see it. For any other report, we decide within five working days. If you are in immediate danger, or the report is about child sexual abuse material, contact the police. We may also report that material to the police or another authority, as clause 12.1 describes.
13.4 Within that time we may leave the content up, remove it, restrict features, suspend access, or close an account. We do that ourselves. We do not promise which of those we will choose, or that we will tell you what we decided. Telling you can put someone at risk, or the law can stop us. If you want a report looked at again, email info@getcasted.co.uk and say what you want reconsidered. We decide that request within five working days. We do not promise to change the outcome.
13.5 We may remove content, restrict features, suspend access, or close an account if we reasonably believe you have broken these terms, created a risk to another person, or if we have to do so to comply with the law. We will tell you when we reasonably can. We may act without advance notice where delay would increase the risk.
13.6 We are not obliged to host any particular listing, profile, or message.
13.7 We may keep information, or disclose it to the police or another authority, where the law requires it. We do not promise to share the details of an investigation with you.
14. Closing your account
14.1 You can delete your account in Settings. Deletion is intended to be permanent.
14.2 When an account is deleted we remove the profile, headshots, portfolio files, applications you made, your saves, your notification records, and your verification session. We also remove conversations you were in, as described in clause 10.3, and we cancel the Stripe customer as described in clause 6.6. We ask Didit to delete the verification sessions, and we erase the OneSignal record. Support requests tied to the profile are removed with it.
14.3 A listing that someone else has applied to or saved is kept as a record of that role. We remove your identity from it. If it was still open, it is closed, and applications that were still pending on it are cancelled. A listing that nobody else has applied to or saved is deleted.
14.4 We may keep information where the law requires us to, or for so long as we reasonably need it to deal with a dispute, a report about content that remains, fraud, or the security of the service. The privacy notice explains retention in more detail.
14.5 We may close an account that has been inactive, that was never confirmed, or that we are entitled to close under these terms. Where we close it other than at your request, clauses 14.2 to 14.4 still describe what happens to the material, unless the law requires something else.
15. Privacy
15.1 We use personal data to run the service, including account details, profile and casting information, listings, applications, messages, files, reports, support requests, notification preferences, push subscription data, and payment references.
15.2 Optional verification uses biometric face matching carried out by Didit, as described in clause 11. Ethnicity and similar casting details can be special-category data. Do not put them on your profile or on a listing unless you are willing for them to be used as the privacy notice describes.
15.3 The privacy notice sets out what we collect, why, who we share it with, how long we keep it, and the rights you have, including the right to complain to the Information Commissioner's Office. Please read it. If these terms and the privacy notice both touch the same topic, the privacy notice governs the data-protection position.
15.4 To run the service we use these companies. The privacy notice describes what each receives, why, and how long data is kept:
- (a) Supabase, for accounts, profiles, messages, files, and account emails such as address confirmation and password reset;
- (b) Vercel, which hosts the website and our server functions, and which processes server logs;
- (c) Stripe, which receives the email address used at checkout and takes the card payment. We delete the Stripe customer when we can on account closure. Invoices and transaction records may remain where clause 6.6 says so;
- (d) Didit, if you start the optional face-match check, which receives your headshot and a live image for that check, as described in clause 11;
- (e) OneSignal, if you turn on push notifications, which receives your account id so it can deliver a notification. We erase that record when the account is deleted;
- (f) Resend, which sends emails about unread messages and new applications. Those emails include the recipient's email address and a name or a role title. They do not include the text of a message;
- (g) Google, if you choose Google sign-in, as described in clause 5.1;
- (h) Cloudflare, for a bot check on sign-up, login, and password reset when that check is switched on; and
- (i) GeoNames, to search for a town from the place name you type. We then store the town and coordinates you pick.
15.5 Some of those companies process personal data outside the United Kingdom, including in the United States. The privacy notice explains the safeguard. You can ask us for a copy of it at info@getcasted.co.uk.
15.6 You can ask for a copy of the personal data we hold, a portable copy of data you gave us, a restriction on how we use it, or to object to a use based on legitimate interests, by emailing info@getcasted.co.uk. The privacy notice explains those rights and how to use them.
16. Our intellectual property
16.1 We and our licensors own the service, including its design, software, and branding. We grant you a limited, revocable, non-exclusive licence to use the service for its intended purpose while you comply with these terms.
16.2 You must not copy, resell, or reverse engineer the service except to the extent the law does not allow us to forbid it. You must not use our name or branding in a way that suggests we employ you, represent you, or endorse a production, without our written permission.
16.3 If you give us feedback, we may use it without payment or restriction. You are not obliged to give feedback.
17. The service is provided with reasonable care
17.1 We provide the service with reasonable care and skill. We do not promise that it will be uninterrupted, error-free, or available at all times. We may change, suspend, or withdraw features, including for maintenance, security, or because a provider we rely on has changed.
17.2 We rely on the companies named in clause 15.4 to run parts of the service, including hosting, email, payments, optional verification, place search, bot checks, and push notifications. We are responsible to you for the service we contract to provide. We are not responsible for a failure that is entirely outside our reasonable control, except where clause 18 says we remain responsible.
17.3 Links to sites such as YouTube or Vimeo, and sign-in with Google, take you to services we do not run. Those services have their own terms.
18. Liability
18.1 Nothing in these terms excludes or limits our liability for:
- (a) death or personal injury caused by negligence;
- (b) fraud or fraudulent misrepresentation; or
- (c) any other liability that the law does not allow us to exclude or limit, including a right you have as a consumer that cannot be excluded or limited.
18.2 You, not us, are responsible for:
- (a) a listing, profile, application, or message you submit, and for whether what you say in it is true;
- (b) a role, credit, or other work arrangement you make with another user;
- (c) a payment between you and another user; and
- (d) a meeting you choose to have in person.
18.3 Clause 18.2 does not limit our responsibility for our own acts, our own omissions, or a legal duty we owe you. We remain responsible for providing the service as clause 17 describes, and for dealing with reports and complaints as clause 13 describes. Clause 18.1 overrides anything in this section that would cut across it.
18.4 Subject to clauses 18.1 and 18.3, and only where the law allows the exclusion, we are not liable for the losses listed below. If you are a consumer, we rely on this clause only so far as it is fair and does not create a significant imbalance against you. That sentence does not of itself exclude any of those losses from a consumer claim.
- (a) indirect loss;
- (b) loss that was not reasonably foreseeable to both of us when you accepted these terms; or
- (c) loss of profit, loss of opportunity, or loss of reputation.
18.5 Subject to clause 18.1, and only for a liability the law allows us to cap, our total liability to you for all claims arising out of these terms or the service in any 12-month period is limited to £50. For a consumer, this cap does not stop recovery of the price paid for the service, or of the value of the service, where the law does not allow us to prevent that recovery. If that amount is more than £50, the higher amount applies to that recovery.
18.6 If you use the service mainly for your trade, business, or profession, you will pay us the reasonable losses, costs, and reasonable legal fees we suffer because of your breach of these terms, content you post that is unlawful, or your infringement of another person's rights. This clause 18.6 does not apply if you are a consumer. It does not make you pay for our negligence, our breach of these terms, or our breach of a legal duty.
18.7 If we ask you to pay under clause 18.6, we will tell you promptly about the claim. You will give us the information and help we reasonably need. We will control the defence and any settlement. We will not settle in a way that admits fault on your behalf, or that requires you to pay, unless you agree in writing or the law requires that settlement.
19. If something goes wrong between users
19.1 Disputes about a role, pay, credit, conduct on a set, or a meeting are between the users involved. We are not obliged to mediate them. We will still deal with reports about use of the service under clause 13.
19.2 Please do not arrange to meet a stranger in a private place, and do not pay anyone to audition or be cast. If you are in immediate danger, contact the police.
20. Changes to these terms
20.1 We may change these terms, for example to reflect a change in the service or the law. We will give you reasonable notice of a material change by email or in the service before it applies to you.
20.2 If you do not agree to a material change, you may close your account before it takes effect. If you keep using the service after the change takes effect, you accept the updated terms. A change that the law treats as unfair will not bind you.
20.3 The version date at the top of these terms is the date of this version.
21. Complaints
21.1 You can complain about the service, about content we removed, or about a restriction, suspension, or closed account. Email info@getcasted.co.uk, use the support form once you are signed in, or write to our registered office. Say what happened and what you want us to look at. You do not need an account to email or to write.
21.2 A person looks at genuine complaints. We reply to an email by the next working day to say we have seen it. We decide an ordinary complaint within five working days. A complaint about child sexual abuse material, an immediate safety threat, or illegal content that is still available is looked at on the same working day we see it. We do not promise a particular outcome. If you want a complaint looked at again, we decide that request within five working days, and we do not promise to change the outcome. Clause 13.7 applies to information we may need to keep or disclose. We do not promise to tell you the details of an investigation.
21.3 These terms do not stop you from taking a claim to court, or from raising a data-protection concern with the Information Commissioner's Office.
22. Other terms
22.1 If a court decides that part of these terms is unlawful, the rest still applies.
22.2 If we do not enforce a right straight away, we may still enforce it later.
22.3 You may not transfer this contract, or your account, to anyone else. We may transfer this contract to another organisation, including a buyer of the business. We will tell you if that happens. The transfer will not reduce the rights you have as a consumer.
22.4 Nobody except you and us may enforce these terms, under the Contracts (Rights of Third Parties) Act 1999 or otherwise.
22.5 These terms are the whole contract between you and us for the service, together with the privacy notice and any specific terms shown to you at checkout before you pay. They do not affect statements that the law does not allow us to exclude, including a statement you relied on as a consumer.
23. Law and courts
23.1 These terms are governed by the law of England and Wales. You and we both accept the courts of England and Wales.
23.2 If you are a consumer living in Scotland or Northern Ireland, you may also bring a claim in the courts of the place where you live, and you keep any mandatory protection of the law of that place.
Privacy
This notice tells you what personal data we collect, why, who receives it, how long we keep it, and the rights you have. It sits alongside our Terms and Conditions. If both touch the same topic, this notice governs the data-protection position.
1. Who we are
1.1 We are GET CASTED LTD, a company registered in England and Wales, company number 17455933. Our registered office is 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom. We are the controller of the personal data described in this notice.
1.2 You can contact us about your data by email at info@getcasted.co.uk, by the support form once you are signed in, or by post to the registered office. We have not appointed a data protection officer. The email address above is the contact for privacy requests.
1.3 This notice applies to Get Casted, the website and related services we operate. It applies if you browse, create an account, publish a profile or a listing, apply, message someone, or pay for Full access.
2. What we collect
2.1 To create an account we collect:
- (a) your first and last name;
- (b) your email address;
- (c) a password, if you sign up with email. Our authentication provider stores it in hashed form. We do not store the plain-text password;
- (d) if you choose Google sign-in, the name and email address on that Google account; and
- (e) your date of birth, used on your device to check that you are 18 or over. We do not store your date of birth on your account.
2.2 If you use Google sign-in, we keep your name, date of birth, and the fact that you accepted the terms in storage on your device until Google returns you to the sign-up form. That copy is there so the form can be finished. It is not your account record.
2.3 For a profile we collect the details you choose to enter:
- (a) the name you show, the town you pick, and the coordinates of that town;
- (b) a professional summary, the kinds of work you do, languages, skills, credits, training, equipment, and links;
- (c) headshots, portfolio files, and the address of any video you choose to embed; and
- (d) for an actor profile: gender, playing-age range, and, if you enter them, hair colour, hair length, and eye colour.
2.4 We ask actors for a height during sign-up. We do not save height on the profile.
2.5 Ethnicity is optional and is covered in section 4. We do not store it unless you select it and confirm that it may be shown.
2.6 When you use the service we also collect:
- (a) listings you post, including a role requirement such as an age range, sex, or ethnicity, and any justification you enter;
- (b) applications and saves;
- (c) messages and files you send in the service;
- (d) reports you make, and reports made about you; and
- (e) support requests, including the browser type sent with the request.
2.7 If you pay for Full access, you pay on Stripe's page. Stripe collects the card payment. We receive a customer reference, the email used at checkout, and the status of the subscription. We do not store your full card number.
2.8 If you choose the optional verified tick, we send your primary headshot to Didit and Didit asks you to complete a live camera check. We store the session reference and the result. We do not store the face images from the check in our database. Section 5 explains this.
2.9 We store your notification choices. Email reminders about messages, applications, and roles are on until you turn them off. Push notifications are off until you turn them on. If you turn push on, OneSignal receives your account id so it can deliver the notification to your device.
2.10 Our hosting, authentication, and security providers may process your IP address and browser type to deliver the service, apply rate limits, and investigate abuse. When the bot check is switched on, Cloudflare Turnstile runs on sign-up, login, and password reset.
3. Why we use it
3.1 We use account, profile, listing, application, message, and file data to provide the service you signed up for. The lawful basis is that this use is necessary for the contract between you and us (UK GDPR Article 6(1)(b)).
3.2 We use ethnic origin, if you give it, and the optional face-match check, only with your explicit consent (UK GDPR Article 6(1)(a) and Article 9(2)(a)). Sections 4 and 5 explain how that consent works and how you withdraw it.
3.3 We use personal data to keep the service secure, to limit abuse and fraud, to investigate reports, to fix faults, and to keep what we need for a dispute. The lawful basis is our legitimate interests in running a safe service (UK GDPR Article 6(1)(f)). You can object to this use, as section 10 explains.
3.4 We use payment records where the law requires us to keep them, and we may disclose information where a law requires us to, including a report of illegal content. The lawful basis is a legal obligation (UK GDPR Article 6(1)(c)).
3.5 You do not have to give optional profile details, an ethnicity, or the verified tick. We cannot open an account without a name, an email address, a way to sign in, a check that you are 18 or over, and your acceptance of the terms. Email reminders are part of the service until you switch them off in Settings. They are not a separate marketing list.
4. Ethnicity
4.1 Ethnic origin is optional. If you leave ethnicity blank, we do not store it.
4.2 If you add an ethnicity, we store it and show it to signed-in members who can see your profile. Logged-out visitors do not see it. There is no way to keep an ethnicity on your account and hide it. Clear the field and we delete it. Clearing the field is how you withdraw this consent. You can do that without closing your account.
4.3 The separate tick box at sign-up, and the same box when you edit your physical details, is the consent. It is not the general terms tick box. Refusing it does not stop you creating an account.
4.4 A listing may state an ethnicity requirement for a role, with a justification. That describes the role. It is not your ethnic origin, and it is shown with the listing, including to logged-out visitors.
4.5 Questions about ethnicity go to info@getcasted.co.uk.
5. Verification and biometrics
5.1 The verified tick is optional. If you start it, we tell you before the camera check begins. Didit matches a live image to the headshot on your profile. The check is not a check of a passport or other identity document.
5.2 Face images used to identify you are biometric data. We rely on your explicit consent for that check. You can cancel before it starts. Closing the window early does not add the tick.
5.3 We keep the session reference and the result. We do not keep the face images from the check in our database. Your headshot stays on your profile as a profile photo until you remove that photo. Didit holds the images used for the check. We ask Didit to delete those sessions when you delete your account. Emailing us to remove the tick takes the badge off. It does not, by itself, delete the images Didit holds. Say in that email if you want those sessions deleted as well.
5.4 A tick means we received a positive result from Didit. It does not confirm your identity documents, your credits, or that you are safe to meet. We may remove a tick if we reasonably believe the result is unreliable or was obtained dishonestly.
5.5 We do not make a decision about you based solely on automated processing that produces a legal effect, or a similarly significant effect. The tick is a badge we show after that check. It does not by itself decide whether you can use Get Casted.
6. Who else sees it
6.1 You choose whether your profile is visible to everyone, or only in connection with an application. The default is everyone, until you change it in Settings.
6.2 Logged-out visitors can see the public details of a profile set to everyone. They do not see your ethnicity. Some details, including a full display name and headshots, are shown to members with Full access rather than to every visitor.
6.3 Signed-in members can see a profile they are already allowed to see. If you have added an ethnicity, they can see that too.
6.4 A listing you publish is visible as a listing, including any role requirement on it. Applications are visible to you and to the member who posted the listing.
6.5 A message is visible to the people in that conversation. We can also access messages, reports, and account records where we need to investigate a report, keep the service secure, or comply with the law.
6.6 The town coordinates on a profile are available to signed-in members who can see that profile. Logged-out visitors are not given those coordinates.
7. Who we share it with
7.1 We do not sell your personal data.
7.2 We use these providers to run the service. They process personal data on our instructions, or, where they are a separate controller for their own step, under their own terms:
- (a) Supabase, for the database, file storage, accounts, and account emails such as address confirmation and password reset;
- (b) Vercel, which hosts the website and our server functions;
- (c) Stripe, for payments and the billing page;
- (d) Didit, if you start the optional face-match check;
- (e) OneSignal, if you turn on push notifications;
- (f) Resend, for emails about unread messages and new applications. Those emails name the other person or the role title. They do not include the text of a message;
- (g) Google, if you choose Google sign-in;
- (h) Cloudflare, for the bot check when that check is switched on; and
- (i) GeoNames, to search for a town. We then store the town and coordinates you pick.
7.3 Other users see what section 6 describes.
7.4 We may disclose personal data to the police, the Information Commissioner's Office, or another authority where the law requires it, or where we reasonably need to report illegal content.
8. Transfers outside the UK
8.1 Some of the providers in section 7 process personal data outside the United Kingdom, including in the United States.
8.2 Where UK GDPR requires a transfer tool, we rely on the UK adequacy regulations or on the provider's International Data Transfer Agreement or UK Addendum to the EU standard contractual clauses. You can ask us for a copy of the relevant safeguard by emailing info@getcasted.co.uk.
9. How long we keep it
9.1 We keep account and profile data for as long as the account is open.
9.2 If you sign up with email and do not confirm the address, we delete that unconfirmed account after 24 hours.
9.3 You can delete your account in Settings. Deletion is intended to be permanent. We then remove the profile, headshots, portfolio files, applications you made, your saves, your notification records, and your verification session. We remove conversations you were in, cancel the Stripe customer where we can, ask Didit to delete the verification sessions, and erase the OneSignal record. Support requests tied to the profile are removed with it.
9.4 A listing that someone else has applied to or saved is kept as a record of that role. We remove your identity from it. If it was still open, it is closed. A listing that nobody else has applied to or saved is deleted.
9.5 We may keep limited payment, invoice, and transaction records where the law requires it, including for accounting. Stripe may also keep records under its own rules.
9.6 We may keep information for as long as we reasonably need it to deal with a dispute, a report about content that remains, fraud, or the security of the service. We do not keep it longer than that need lasts.
10. Your rights
10.1 Under UK GDPR you can ask us to:
- (a) tell you whether we hold personal data about you, and for a copy of it;
- (b) correct data that is wrong;
- (c) delete data, in the cases the law allows;
- (d) restrict how we use it, in the cases the law allows;
- (e) provide data you gave us, in a portable form, where the law requires that; and
- (f) object to use based on legitimate interests.
10.2 You can withdraw consent at any time. Withdrawal does not affect use that was lawful before you withdrew it. Clear the ethnicity field to withdraw consent for ethnic origin. Do not start the camera check to avoid the face match. To withdraw after a result exists, email info@getcasted.co.uk and ask us to remove the tick. Say if you also want the Didit sessions deleted. Deleting your account asks Didit to delete them.
10.3 You can correct most profile details yourself, switch email reminders and push off in Settings, and delete the account in Settings. For an access request, a portable copy, a restriction, or an objection, or for anything else you cannot do yourself, email info@getcasted.co.uk. We may need to confirm it is you. We respond within one month, or we tell you if we need longer where the law allows that.
10.4 You can complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, at ico.org.uk. We would like the chance to put a problem right first.
11. Cookies and storage on your device
11.1 We use a cookie to keep you signed in. It is strictly necessary for the account to work. We do not use it for advertising, and we do not use advertising cookies.
11.2 We store your theme choice on your device. During Google sign-up we also store the temporary copy described in clause 2.2. You can clear both in your browser. Clearing the sign-in cookie signs you out.
12. Children
12.1 You must be 18 or over to create an account. We do not intend to hold personal data about anyone under 18. If we learn that an account belongs to someone under 18, we will close it.
13. Changes to this notice
13.1 We will post any change on this page and update the version date. If a change materially affects you, we will tell you by email or in the service before we rely on it.
14. Contact
14.1 Privacy requests and questions go to info@getcasted.co.uk, or by post to GET CASTED LTD, 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom.
14.2 The terms that apply to the service are at the Terms and Conditions page.