Privacy Policy

KidsTalent.Agency (“KTA”, “we”, “us” or “our”) is the data controller for the processing described in this notice.

For young performers: you can ask your parent or guardian to explain this page. You can also ask us what we know about you, correct something that is wrong or tell us if you are worried about how your information is used.

We usually receive information directly from a parent, guardian, young person or production client. We may also receive it from casting platforms, production companies, photographers, local authorities, schools or other people involved in a booking.

No solely automated significant decisions: security tools may automatically identify suspected bot traffic, but we do not use automated profiling to decide whether a child receives representation, a casting or a booking.

Photographs and video are personal information. We use them for assessment, casting profiles and submissions. We publish them on our website or social media only where the parent or guardian has given permission, the production has authorised publication, or another lawful basis clearly applies.

• Casting directors, production companies, photographers and authorised production personnel considering or booking a child.
• Casting and profile services such as Spotlight, where a suitable performer uses that service.
• Local authorities, schools, chaperones and licensing participants where a performance licence or authorised absence is required.
• Mailchimp, which currently helps us administer application details and service communications. We do not add applicants to unrelated promotional marketing without an appropriate lawful basis.
• Email, website-hosting, security, file-storage, accounting and payment providers acting under contract and confidentiality obligations.
• Cloudflare Turnstile, which processes limited technical signals to distinguish people from automated form submissions.
• Insurers, accountants, legal advisers, courts, regulators or law-enforcement bodies where disclosure is necessary or required.

Processing outside the UK

Some technology providers may process information outside the UK. Where this is a restricted transfer, we use an applicable UK adequacy regulation or approved safeguards such as the UK International Data Transfer Agreement or UK Addendum, together with additional checks where required.

Backups are overwritten on a routine cycle. Published completed-work material may remain as an agency record while permission and a lawful basis continue; requests for removal are considered promptly.

We use proportionate technical and organisational measures including restricted staff access, password-protected systems, secure website transport, form validation, anti-bot protection, supplier controls and procedures for responding to suspected data breaches. No internet or storage system can be guaranteed completely secure, so we review risk and improve safeguards where needed.

Email info@kidstalent.agency with “Privacy request” in the subject line. We may ask for proportionate proof of identity and authority to act for a child. Rights requests are normally answered within one calendar month; complex requests may lawfully take longer.

If you have a concern, contact us first so we can investigate. You may also complain to the Information Commissioner’s Office.

If we introduce non-essential cookies or similar tracking, we will provide clear information and obtain consent before using them where required.

This notice is written for the UK GDPR and Data Protection Act 2018 as amended, including by the Data (Use and Access) Act 2025, together with the Privacy and Electronic Communications Regulations where they apply.

• ICO guidance on privacy information
• ICO guidance on children’s personal information
• ICO summary of the Data (Use and Access) Act 2025 changes
• Cloudflare Turnstile privacy information