The short version
- Browsing is anonymous. You can browse the public showcase and castings without giving us any personal details.
- "My selection" stays in your browser. It is stored only on your device unless you share it or send it to us.
- Enquiries are used only for that enquiry. When you send us an enquiry or ask for client access, we use your details only to answer and manage that request.
- Special Client Access is logged. If you hold a pass, we record what you search, view and request, to protect the talents in our database.
- No trackers. We use no advertising or analytics trackers.
1. Who we are
ALM Talent is run by [ALM Media LLC (exact registered name to be confirmed)], licensed by Sharjah Media City (Shams) free zone, United Arab Emirates. Trade licence no. [TRADE LICENCE NUMBER], registered address [REGISTERED ADDRESS]. We work from Dubai, UAE. "ALM", "we" and "us" mean that company, the controller of your personal data.
Contact: almano.media/contact · [PRIVACY CONTACT]
2. Who this notice is for
- Visitors to the public showcase, casting pages and source-code page.
- People who use My selection, download comp cards, or send us a selection with "Send to ALM".
- People who request client access (Special Client Access).
- Clients who receive a private shortlist link from our team and leave picks or comments.
- Special Client Access clients with a Day pass or Week pass.
- People who open a tracked casting link, for example from a WhatsApp group or an email.
Talents and casting applicants: please read the talent privacy notice instead.
3. What we collect, and why
| When | What we collect | Why [legal ground to be confirmed by the lawyer] |
|---|---|---|
| Browsing | Standard technical data our server receives: IP address, browser type, the page requested and the time. We use no analytics or advertising trackers and load no third-party fonts | To deliver the website and keep it secure |
| Spam check on forms | Cloudflare Turnstile checks that a person, not a bot, is using our forms. It processes your IP address and browser signals. We store only the pass or fail result | To prevent spam and abuse |
| My selection | The talent numbers you heart. They are saved only in your browser (up to 30) | So you can build a shortlist |
| View-only selection link (if you create one) | The talents in the selection, the creation date and a scrambled (hashed) IP address. The link expires after 30 days and shows only talents who are still public | To make the share link work and to stop abuse |
| Comp-card downloads | No personal data. Downloads are rate-limited by IP address | To stop bulk copying |
| "Send to ALM" | Your name, company, email, mobile (required), WhatsApp (optional), project type, budget range, usage and territory, project dates, project notes, whether you marked it Urgent, and the talents you selected | To answer your enquiry. Our team aims to reply within 24 hours. Urgent requests are answered first |
| Request client access | Company, your name, work email, mobile, WhatsApp (optional), project type, what you are casting, which pass you want | To check your company and project, and to answer your request |
| Private shortlist link | The name you enter, your picks and comments, and when the link was opened | So our team can see your choices. Your picks are shared within ALM only |
| Special Client Access account | See section 4 | To provide the pass and protect talents' data |
| Tracked casting links | We count clicks per link (for example per WhatsApp group). [Build to confirm: no personal data is stored beyond short-term anti-abuse data.] Link previews fetched by WhatsApp or Facebook are not counted | To know which channels bring applicants |
| Emails from us | Your email address, and delivery and bounce events from our email provider. We do not track whether you open emails [build to confirm] | To send you the replies and links you asked for |
We do not use your enquiry details for marketing unless you separately agree.
4. Special Client Access clients
If ALM gives you a pass, we process the following:
- Account details: your name, company, role, work email, phone, country, password (stored in scrambled, hashed form) and optional two-step sign-in settings.
- Pass and payment details:
- pass type, price, start and end time, and how you paid (Stripe payment link, bank transfer, or complimentary);
- Stripe payment references. We never see your full card number.
- invoices.
- Activity records:
- sign-ins, devices, IP addresses and new-device alerts;
- searches (including the filters you used);
- the profiles you viewed, the videos you played and the comp cards you downloaded;
- your private shortlists;
- your contact requests (talent, project, role, shoot dates, budget band) and ALM's decisions.
- Talent contact details that a talent agreed to share with you. For these, you become responsible under data protection law (see the Special Client Access terms).
We use these records to:
- run your pass;
- enforce the time limit and the reveal quota;
- prevent scraping, sharing of logins and misuse;
- show talents which companies received their contact details;
- keep accounts and tax records.
Unusual activity, for example very fast browsing of many profiles, can pause your pass automatically and alert our Admins.
When your pass ends:
- your login is switched off;
- your account is kept, switched off, so ALM can renew it and check past activity;
- contact details a talent shared with you stay in the emails we sent you.
5. Who we share your data with
- The ALM team, according to their role.
- Talents.
- When ALM passes on your contact request, the talent sees your company, the project, the role, the dates and the budget you gave, and decides whether to share their contact details with you. If the talent accepts, the talent knows that your company received their contact details, and for which project.
- A talent can report a client to ALM. Reports are seen only by the ALM team.
- Your picks and comments on a shortlist link are not shown to talents.
- Service providers that run parts of ALM Talent for us, under contract:
- Hostinger (our server, in Malaysia);
- Cloudflare (storage [when switched on] and Turnstile);
- Bunny.net (video and images);
- MailerSend now, Amazon SES later (email);
- Stripe (payments, once card payments are switched on);
- Sentry (error reports, with personal details removed);
- Amazon Web Services (encrypted backups, kept at most 60 days).
Some of these process data outside the UAE.
- Advisers and authorities, where needed or required by law.
We never sell your personal data.
6. How long we keep it
| What | How long |
|---|---|
| Your selection in your browser | Until you clear it |
| View-only selection links | Expire after 30 days |
| Private shortlist links | Expire after 30 days by default. Our team can extend or switch them off. Picks and comments are kept with the casting [period TBD] |
| "Send to ALM" enquiries and access requests | [TBD; proposed 24 months after our last contact] |
| Special Client Access activity records | 12 months |
| Contact-reveal records | 24 months, because they show who received whose contact details [proposed] |
| Client accounts | Deleted [24 months] after your last pass ends [proposed] |
| Payment and invoice records | As long as the law requires [period to be confirmed by ALM's accountant and lawyer] |
| Backups | Roll off within 60 days |
| Web server access logs (IP address, page, time) | 14 days |
The full table is in our data retention schedule [link].
7. Where your data is stored
- Our server is in Malaysia: ALM Talent runs on a virtual server rented from Hostinger in Malaysia, outside the UAE. Your account, enquiries and pass records are stored there.
- Our providers: some process data outside the UAE.
- Safeguards: we use providers that offer contractual data protection commitments.
[Lawyer: confirm the transfer basis under the UAE PDPL and whether Malaysia's PDPA adds anything (, 2026-10-16; see file 01 note L7).]
8. Your rights
You can ask us to:
- give you a copy of your data;
- correct it;
- delete it, unless we must keep it, for example invoices or reveal records;
- stop or restrict certain uses.
[Lawyer to list the rights under the UAE PDPL and any other law that applies.]
How to ask: use almano.media/contact or [PRIVACY CONTACT]. We reply within [30 days] and may need to confirm your identity first.
You can also complain to the UAE Data Office [details when available], or to the authority where you live.
9. Cookies
We use only cookies and browser storage that the site needs to work: sign-in, security and your selection. There are no analytics or advertising cookies. See the cookie notice for details.
10. Security
- Data is encrypted in transit.
- Backups are encrypted.
- Access is limited by role.
- Team members use two-step sign-in.
- Every sensitive action is logged.
- Private photos are served through links that expire after about 10 minutes.
11. Changes
We will post any new version here with its date. Special Client Access clients are asked to accept new client access terms at their next sign-in.
12. Contact
[ALM Media LLC (exact name to be confirmed)],