MXM CASTING PRIVACY POLICY
Our services are provided by MXM Casting (“Maximum casting”). We take your privacy very seriously. Please read this Privacy Policy carefully as it contains important information on how and why we collect, store, use and share your personal data. It also explains your rights in relation to your personal data and how to contact us or supervisory authorities in the event you have a complaint. By using our Services, you consent to the terms of this Privacy Policy, which may be changed from time to time.
KEY TERMS:
Biometric & Synthetic Data: Any physical, physiological, or behavioural characteristics allowing or confirming the unique identification of a natural person. This includes, but is not limited to, 3D volumetric facial scans, phoneme mouth charts, voice prints, and motion-capture data used for creating a Digital Double or synthetic replica.
Candidate: A person who has either been identified by us or has contacted us to request their consideration as a candidate for our Services.
Client: A person, firm, company, or organisation looking to book a Candidate via MXM casting.
Data Controller: The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Data Protection Laws: As applicable and binding on us, the Privacy and Electronic Communications (EC Directive) Regulations 2003, SI 2003/2426, the General Data Protection Regulation (EU) 2016/679 (“EU GDPR”) and the General Data Protection Regulation, Regulation (EU) 2016/679 as it forms part of domestic law in the United Kingdom by virtue of section 3 of the EU (Withdrawal) Act 2018 (including as further amended or modified by the laws of the United Kingdom or a part of the United Kingdom from time to time) (“UK GDPR”) and the Data Protection Act 2018, and all other applicable laws relating to the collection, storage, and use of personal data and privacy, and any applicable codes of practice issued by the ICO or any other applicable regulator.
Engagement: A role made available by a Client for which the Client has instructed us to provide the Services.
Personal Data: Any information about a living individual which identifies them or allows them to be identified in conjunction with other information that is held.
Publicly Available Data: Any information about you that you have published or made available to the general public in any way. This includes any information provided on your social media profiles.
Services: Services provided by MXM that may be made available by us from time to time.
Synthetic Engagement: A role or booking made available by a Client specifically requiring the licensing and generative use of a Candidate's Biometric & Synthetic Data.
We, Us, Our: MXM Casting.
You, Your: You, the person, firm, company, or organisation involved with our Services in any way.
YOU MAY CONTACT US BY:
Email on andy@mxmcasting.com or
Writing to us at 12 thornton ave, london, sw24hq
As an organisation that collects, stores, and uses personal data about its employees, customers, and Candidates, we recognise that having controls around the collection, storage, use, and destruction of personal data is important in order to comply with our obligations under Data Protection Laws, including under Article 5 of the UK GDPR. All of your personal data will be held and used in accordance with the Data Protection Laws.
We have implemented this Privacy Policy to set out the information we collect, what it is used for, and the rights you have in relation to this information. By agreeing to your inclusion in any of our Services, including being considered as a Candidate, you accept the terms of this Privacy Policy.
YOUR PERSONAL DATA
We will collect personal data from you if you communicate it directly to us, or from any publicly available data. We may process your personal data, including any publicly available data. We collect information about you to assess your suitability for any Services we provide to our Clients and, if you agree, to contact you about our Services and any available casting Engagements.
WHAT PERSONAL DATA DO WE COLLECT?
After you confirm your availability and approval to participate in our Services, we may collect further data from you. This data may include:
Further details of your skills, experiences, photos of you, and any other information relevant to our Services that we may require or that you provide to us.
For Candidates opting into Digital Double casting: Biometric & Synthetic Data (such as voice stems and 3D facial scans). This data is strictly opt-in and is never collected without your prior knowledge and explicit consent.
Any other relevant data that does not fall under special category data, such as criminal offence data.
THIS DATA INCLUDES:
Your name and contact details, including email address and telephone number.
Your skills, experiences, photos of you, and any other information relevant to our Services (e.g. your date of birth, gender, location data, and/or your interests).
After you confirm your availability and approval to participate in our Services, we may collect further data from you. This data may include:
Further details of your skills, experiences, photos of you, and any other information relevant to our Services that we may require or that you provide to us.
Any other relevant data that does not fall under special category data, such as criminal offence data.
HOW YOUR PERSONAL DATA IS COLLECTED
We collect most of this personal data directly from you – in person and by telephone, text, or email. However, we may also collect information:
Through social media;
By searching publicly available news articles; and
From organisations who pass your personal data on to us, such as relevant organisations associated with a particular Engagement.
HOW AND WHY WE USE YOUR PERSONAL DATA
Under the Data Protection Laws, we can only use your personal data if we have a proper reason, for example:
Where you have given consent;
To comply with our legal and regulatory obligations;
For the performance of a contract with you or to take steps at your request before entering into a contract; or
For our legitimate interests or those of a third party.
We will use personal data provided by you to provide our Services. This involves processing and storing your personal data and providing it to our Clients. You consent to us using personal data provided by you in each of these ways.
SPECIFIC USES OF YOUR PERSONAL DATA
We will use your personal data to:
Deliver our Services effectively;
Carry out our obligations arising from any contracts entered into between you and us;
Allow you to participate in interactive features of our Services, when you choose to do so;
Notify you about changes to our Services;
Provide you with information, products, or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes;
Enforce our legal rights; and
Comply with applicable legal requirements, industry standards, and our policies.
SPECIAL CATEGORY PERSONAL DATA
Certain personal data we collect is treated as a special category to which additional protections apply under the Data Protection Laws. Personal data we may collect about you that is treated as a special category includes personal data revealing your:
Health and/or any disability-related information;
Racial or ethnic origin;
Political opinions;
Religious beliefs; or
Biometric & Synthetic Data used for the purpose of uniquely identifying or digitally replicating a natural person.
Where we process special category personal data, we will also ensure we are permitted to do so under the Data Protection Laws, for example:
We have your explicit, separate written consent to capture and store your Biometric & Synthetic Data;
We have your explicit consent;
The processing is necessary to protect your (or someone else’s) vital interests where you are physically or legally incapable of giving consent; or
The processing is necessary to establish, exercise, or defend legal claims.
WHO MAY ACCESS YOUR PERSONAL DATA?
Clients may have access to and use your personal data and special category data to cast you for a particular role. We may pass on some or all of your personal data and special category data to our Clients for the purposes of providing our Services and so that our Clients may cast you.
When you consent to being introduced to one of our Clients for the purpose of potentially working with them, we will provide that Client with your name and contact details so that they may communicate with you directly. You are likely to be required to enter into a separate contract of employment with our Clients, and so they will need this information to communicate with you regarding that arrangement.
We will never sell or share any of your details or personal data and special category data with any third-party organisation for marketing purposes.
Client Liability and Biometric Data Transfer: If you explicitly consent to a Synthetic Engagement, we will securely transfer your Biometric & Synthetic Data to the booking Client. At the point of this transfer, the Client becomes an independent Data Controller of that specific data. The Client assumes full legal and regulatory responsibility for processing your Biometric & Synthetic Data in strict compliance with Data Protection Laws, securing necessary usage rights, and ensuring the data is not used to generate content outside of the agreed generative boundaries. MXM Casting acts solely as the introductory broker and data processor prior to the Engagement, and accepts no liability for the Client's subsequent use, storage, or failure to destroy the data once their licensing term expires.
WHERE YOUR PERSONAL DATA IS HELD
Personal data and special category data may be held securely on a password-protected physical hard drive or on the IT equipment that we may provide to our staff and employees from time to time.
HOW LONG YOUR PERSONAL DATA WILL BE KEPT
We will not keep your personal data and special category data for longer than we need it for the purpose for which it is used. Specifically regarding Biometric & Synthetic Data: This data will be retained by MXM Casting only for the duration necessary to facilitate your active Synthetic Engagements, or until you exercise your right to withdraw consent and request erasure, at which point the files will be cryptographically destroyed from our internal servers.
TRANSFERRING YOUR PERSONAL DATA OUT OF THE UK AND EEA
The data protection laws in other countries will differ from the Data Protection Laws in the UK, some of which may provide lower levels of protection of privacy.
We may transfer your personal data to third parties outside the UK and the European Economic Area (“EEA”) if, for example, one of our Clients is registered or has representatives in a country outside the UK and the EEA and we share your personal data with them so that they may consider casting you for an Engagement.
If you would like further information about data transferred outside of the UK and/or the EEA, please contact us at andy@mxmcasting.com
KEEPING YOUR PERSONAL DATA SECURE
We have appropriate security measures to prevent personal data and special category data from being accidentally lost, or used or accessed unlawfully. We limit access to your personal data to those who have a genuine business need to access it. Those processing your personal data and special category data will do so only in an authorised manner and are subject to a duty of confidentiality.
YOUR RIGHTS
You have the following rights, which you can exercise free of charge:
Access: The right to be provided with a copy of your personal data.
Rectification: The right to require us to correct any mistakes in your personal data.
Erasure (also known as the right to be forgotten): The right to require us to delete your personal data in certain situations.
Restriction of processing: The right to require us to restrict processing of your personal data in certain circumstances.
Data portability: The right to receive the personal data you provided to us, in a structured, commonly used, and machine-readable format and/or transmit that data to a third party in certain situations.
To object:
At any time, to your personal data being processed for direct marketing (including profiling);
In certain other situations, to our continued processing of your personal data, e.g., processing carried out for the purpose of our legitimate interests unless there are compelling legitimate grounds for the processing to continue or the processing is required for the establishment, exercise, or defence of legal claims.
Not to be subject to automated individual decision-making: The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.
The right to withdraw consents: If you have provided us with consent to use your personal data, you have a right to withdraw that consent easily at any time.
COMPLAINTS
Please contact us if you have any queries or concerns about our use of your personal data at andy@mxmcasting.com - We hope we will be able to resolve any issues you may have.
You also have the right to lodge a complaint with the Information Commissioner in the UK.
The UK’s Information Commissioner may be contacted using the details at https://ico.org.uk/make-a-complaint or by telephone: 0303 123 1113.
CHANGES TO THIS PRIVACY POLICY
We may change this Privacy Policy at any time. Where we make significant changes, for instance, where we use your personal data for materially different purposes, we will email you to let you know.

