Privacy policy

Who we are

Title Studios (“we”) is the data controller for personal data processed through this platform. For any privacy query, contact privacy@titlestudios.com.

What we collect

• Account details (name, email, password hash, role, marketing consent choice).
• Profile information you choose to add (bio, photos, links, skills, casting attributes, travel areas).
• Applications, messages and conversation threads, saved opportunities, notifications, reviews you write and receive, space enquiries, and reports you submit.
• Payment records for listing fees and memberships (payments are processed by our payment provider Stripe; we store payment records but never card numbers).
• Phone number if you choose to verify it, plus verification requests. One-time codes are stored only as hashes, expire after 10 minutes, and SMS messages are sent through our provider (Twilio).

Sensitive information

Some casting attributes are optional and may be considered sensitive. These fields are always optional, securely stored, and only shown where appropriate. You choose whether your contact details are public or shared only after you apply or accept a request.

How we use your data

• To provide the platform: profiles, applications, messaging, reviews and notifications.
• To keep the platform safe: moderation, scam detection, enforcement and the reports system.
• To process listing and membership payments.
• With your consent, to send marketing and opportunity alerts (you can opt out any time in settings).

Cookies

We use one essential cookie to keep you signed in (titlestudios_session). We don't currently run analytics or marketing cookies, and we don't track you across sites. If we ever add them, nothing non-essential will load until you explicitly accept it via the banner on your first visit. Your consent choice is stored in your browser, and you can review or change it at any time in settings under “Manage cookie preferences”.

Your rights

Under UK GDPR you can access, correct, export or delete your personal data, and object to or restrict certain processing. You can:

• Export your data: download a copy from your settings. The export includes your profile, applications, messages, reviews, reports, space enquiries, notifications, payments and verification requests. Password hashes and one-time-code hashes are never included.
• Delete your account: request deletion from settings. Deletion takes effect after a 30-day grace period so you can change your mind — you can cancel it any time before then, either in settings or by emailing privacy@titlestudios.com.
• Manage marketing consent: toggle it in settings at any time.

To exercise any right, use your settings or email privacy@titlestudios.com. You also have the right to complain to the ICO.

Retention & security

We keep personal data only as long as needed to provide the service and meet legal obligations. Scheduled account deletions are carried out permanently 30 days after your request, and account data is removed with it. We use appropriate technical and organisational measures to protect your data, including encrypted passwords, hashed verification codes, automated backups and access controls.