1. Who We Are
2nd Team Casting ("2nd Team", "we", "us", "our") is a stand-in and picture double casting agency operating in the United Kingdom. Our registered address is Unit 121927, PO Box 6945, London, W1A 6US.
We are the data controller for the personal information we collect through our website and platform at 2ndteam.co.uk.
2. What Information We Collect
We collect and process the following personal data:
- Identity data: Full name, gender, date of birth
- Contact data: Email address, phone number (including WhatsApp), postal address
- Physical data: Height, weight, body measurements (chest, waist, hips, neck, inside leg, shoe size), hair colour, skin tone, ethnicity
- Visual data: Headshot photographs, full body photographs, additional images uploaded to your profile
- Professional data: Previous production experience, actor names stood in for, days worked, experience level, radio phrases proficiency
- Financial data: Preferred day rate, bank details (where provided for payment), invoice records
- Documents: Right-to-work documentation, identification documents you upload
- Technical data: IP address, browser type, login timestamps
- Availability data: Calendar availability, booking dates, call times, wrap times
3. How We Use Your Information
We use your personal data for the following purposes:
- Casting and matching: To match stand-ins to production requests based on physical characteristics, availability, and experience
- Communication: To send availability checks, booking confirmations, and production notifications via email and WhatsApp
- Profile management: To create and maintain your professional comp card / CV for sharing with productions
- Invoicing and payments: To generate invoices, process payments, and maintain financial records
- Account administration: To manage your account, verify your identity, and provide customer support
- Service improvement: To improve our matching algorithms and platform functionality
4. Legal Basis for Processing
We process your personal data on the following legal bases under UK GDPR:
- Contract: Processing is necessary for the performance of our agency agreement with you
- Legitimate interests: To operate our casting agency, match stand-ins to productions, and improve our services
- Consent: Where you have given specific consent, for example when uploading photographs or agreeing to WhatsApp communications
- Legal obligation: Where we are required to process data for tax, employment, or regulatory purposes
5. Who We Share Your Data With
We may share your personal data with:
- Production companies: Limited profile information (first name, physical characteristics, experience, photographs) is shared with Crowd 2nds and productions who request stand-ins. Full contact details are only shared once you are booked.
- Service providers: We use Google (Gmail for email communications, Sheets for data management), Meta/WhatsApp (for messaging), and secure cloud hosting for data storage.
- HMRC and accountants: Invoice and payment data as required for tax compliance.
We do not sell your personal data to third parties.
6. Data Retention
We retain your personal data for as long as your account is active and you are on our roster. If you request account deletion, we will remove your profile data within 30 days, except where we are required to retain records for legal, tax, or contractual obligations (typically 6 years for financial records).
7. Your Rights
Under UK GDPR, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Ask us to correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Ask us to limit how we use your data
- Portability: Receive your data in a machine-readable format
- Object: Object to processing based on legitimate interests
- Withdraw consent: Where processing is based on consent, you can withdraw it at any time
To exercise any of these rights, please contact us at info@2ndteam.co.uk.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including encrypted data transmission (HTTPS/TLS), secure password hashing, rate-limited authentication, and access controls restricting data visibility based on user roles.
9. International Transfers
Your data may be processed by service providers located outside the UK (e.g. Google, Meta). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
10. Cookies
Our platform uses essential cookies and local storage for authentication (JWT tokens) and session management. We do not use third-party tracking or advertising cookies.
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify registered users of any material changes via email or in-app notification.
12. Contact Us
If you have any questions about this privacy policy or our data practices, please contact us:
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data rights have been breached.