Privacy Policy

1. Executive Privacy Framework & Regulatory Alignment

At MP Production ("Company", "we", "us", or "our"), safeguarding your personal data, physical specifications, and creative media assets is an uncompromised organizational commitment. This Privacy Policy details our operational practices regarding the collection, processing, storage, sharing, and security of personal information.

Our privacy framework operates in full compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act India), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, the General Data Protection Regulation (GDPR) for European/UK subjects, and international data protection standards.

2. Categories of Information We Collect

We collect personal information depending on your relationship with MP Production (as a Talent Roster Applicant, Commercial Client, or Site Visitor).

3. Methods & Channels of Data Collection

We gather data through transparent interaction channels:

• Direct Submissions: Form inputs submitted during talent registration, profile setup, contact inquiries, or project booking requests.
• Automated Platform Telemetry: Cookies, local storage, security middleware tokens, and web analytics headers.
• Auditions & Submissions: Video tapes, call-back recordings, and headshot updates submitted during active casting calls.

4. Purposes & Legal Bases for Processing Data

We process your personal information strictly under established legal bases:

5. Data Sharing, Disclosures & Infrastructure Partners

MP Production strictly does NOT sell, rent, or monetize your personal data or talent portfolios to third-party data brokers or marketing agencies.

We disclose personal information only to essential infrastructure partners and commercial clients under strict confidentiality agreements:

• Verified Casting Clients: Approved talent profiles, physical measurements, and showreels are shared with verified commercial directors, brand producers, and casting agents for booking decisions.
• Encrypted Database Infrastructure: Database records are hosted on Supabase (PostgreSQL with AES-256 encryption at rest) and cached via Redis.
• Media CDN Delivery: High-resolution portfolio photographs and showreel video clips are processed and served securely through Cloudinary CDN.
• Banking & Financial Gateways: Payment details are processed through PCI-DSS compliant banking gateways for invoice settlements.

6. Biometric Data Protection & AI Model Disclaimer

MP Production maintains a strict ethics policy regarding talent media:

7. Technical Safeguards & Infrastructure Security

We implement multi-layered technical, administrative, and physical security measures to safeguard your data against loss, unauthorized access, or disclosure:

• TLS 1.3 Encryption: All platform traffic is encrypted in transit using industry-standard TLS 1.3 HTTPS protocols.
• Role-Based Access Control (RBAC): Internal access to private talent contact data (phone numbers, full address) is strictly gated by NextAuth roles (`SUPER_ADMIN`, `ADMIN`).
• Zero Secrets Policy: Database credentials, JWT auth secrets, and API keys are stored in secure environment vaults and never written to source code repositories.

8. Data Retention, Archiving & Account Deletion Policy

Talent profile information and media files are retained for the duration of your active representation account.

Account Deletion & Data Purge: If you request account deletion, your profile, contact data, physical measurements, and media assets are permanently purged from active databases within thirty (30) calendar days. Transactional invoices and signed commercial deal memos are retained for seven (7) years to comply with statutory taxation requirements under the Indian Income Tax Act.

9. Your Rights as a Data Principal / Subject

Under applicable privacy statutes (DPDP Act, GDPR), you possess the following enforceable data rights:

10. International Data Transfers & Cross-Border Compliance

As a global production house, talent profiles may be viewed by international brand clients located in the UK, USA, UAE, Europe, and APAC regions. When transferring data across borders, we ensure adequate safeguards through Standard Contractual Clauses (SCCs) and encrypted transport mechanisms.

11. Children's & Minor Talent Privacy Policy

Talent under the age of eighteen (18) may register on MP Production only with the explicit consent and supervision of a parent or legal guardian. Parental co-management of accounts is required for all minor casting bookings.