Privacy policy

Last updated 6 November 2026. Written to follow the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). We may update this policy and will show the date of any change here.

Who we are

Castmira LLC is a talent agency licensed by Sharjah Media City (SHAMS) free zone, licence no. 2649520.01, registered address Sharjah Media City (SHAMS), Sharjah, United Arab Emirates. It is the controller of the personal data described in this policy. Contact us about your data at [email protected].

What we collect

Talent: your name, date of birth, gender, nationality, emirate, visa status, contact details, photos and videos, measurements, skills, languages, social handles, rates, availability, bio, your referral code and who referred you, and bank details once you are booked. Some questions are optional, including your look and whether you wear a hijab; these can reveal ethnic origin or religion, which UAE law treats as sensitive, so we only collect them with your consent and only show them to registered clients who are logged in. Clients: your name, company, contact details, login details, the briefs you send and the talent you shortlist. Everyone: messages you send us and basic technical data needed to run the website securely.

Castmira is for people aged 18 and over. We do not knowingly collect data from anyone under 18.

Why we use it

• To review your profile and decide whether to represent you.
• To show approved talent profiles in our public talent gallery, let registered clients shortlist talent, match talent to client briefs and share shortlists with clients.
• To arrange bookings, send invoices and pay talent.
• To reply to messages and keep records required by law.
• To feature talent on our website and social media, only if you opt in.

We use software, including AI tools, to help match profiles to briefs and draft replies. A person at Castmira is responsible for every booking decision.

Who we share it with

Once we approve your profile, a public version of it appears in the Castmira talent gallery on our website, where anyone can view it and registered clients can shortlist you. The public profile shows only your first name or stage name, photos, videos, playing age, height, hair and eye colour, skills, languages, availability, rates, follower range and your short bio. It never shows your surname, date of birth, email, phone number, social media handles, visa status, nationality or body measurements and sizes (chest, waist, hips, clothing and shoe size). Your optional answers about your look and hijab are shown only to registered clients who are logged in. Those stay private to Castmira, and we share sizes with a client only for a confirmed booking that needs wardrobe. You can update or remove your photos and details at any time by logging in to My profile, or ask us to delete your profile. We also use the service providers listed below. We do not sell personal data.

Where it is stored

Some of your data is stored and processed outside the UAE by these providers, with your consent and under their security and contractual safeguards:

• Supabase (database, logins and uploaded photos and videos): stored in India (Mumbai).
• Cloudflare (website hosting and security): global network, United States company.
• Resend (account and login emails): United States.
• Google Workspace (our email): United States and European Union.
• Stripe (invoices and payments): United States and European Union.
• Anthropic (AI tools that help us match talent to briefs and draft replies): United States.
• Apollo.io (business email outreach to clients): United States.

Cookies and browser storage

We do not use advertising or tracking cookies. The website uses your browser's own storage only to keep you logged in, save your sign-up form as a draft, remember your shortlist basket and remember a referral code. You can clear this at any time in your browser settings.

How long we keep it

Talent profiles are kept while you are with us and deleted 12 months after your last activity or as soon as you ask. Client accounts and briefs are deleted 24 months after the last activity on the account, or sooner if you ask. Booking and invoice records are kept for the period UAE law requires.

Your rights

Under UAE law you have the right to:

• access the personal data we hold about you and get a copy;
• correct data that is wrong or out of date (most of it you can change yourself in My profile);
• have your data deleted;
• restrict how we use it, or object to us using it;
• receive your data in a portable format, or have it sent to another provider;
• object to decisions made only by automated means (every booking decision at Castmira involves a person);
• withdraw your consent at any time, including for optional details and social media features, without affecting what we did before;
• complain to the UAE Data Office if you are unhappy with how we handle your data.

To use any of these rights, email [email protected] from the email address on your account. We reply within 30 days.