Skip to main content

Privacy Policy

At HeyCast, our goal is to provide a safe, secure, and trustworthy platform for talent, casting directors, and agents to manage the casting process efficiently. Whether you’re seeking roles, booking talent, or representing performers, we connect you with the right opportunities based on the information you provide. We take your privacy seriously and are committed to ensuring you can trust HeyCast with how we handle your personal information.

This policy breaks down what information we collect, how we use and protect it and what choices you have about it. We bring diverse people together in our HeyCast community and we take our responsibility to protect your personal data very seriously. We collect and use your personal information to deliver our vision of making casting easier through an online experience you’ll love. We promise to only use your information where we have a proper legal basis for doing so. Because we’re an online company, some of the concepts below are a little technical, but we’ve tried our best to explain things in a simple and clear way. If you have any questions about this policy, please contact us at support@heycast.co.

1.  What does this Policy do?

This policy covers our “Services”, meaning services or products by HeyCast Ltd.

We are committed to your privacy and will comply with applicable privacy laws, including the New Zealand Privacy Act 2020, any applicable Privacy Codes, and other laws when dealing with your information.
We will also comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) for individuals based in Australia.
Where applicable, we also comply with the European Union’s General Data Protection Regulation (GDPR). If you are based in the European Union, you can email us to clarify how we treat your information.

2. What information do we collect?

We collect information so that we can provide you with our Services, and so we can build new features that improve the casting process. We may collect the following information, some of which is personal information: 

2.1 Information you give us, such as:

Account information: When you sign up for our service, we may require your name, email address, password, date of birth, demographic information or other personal information.

Profile Information: HeyCast may require you to complete a profile, which may include personal information such as your address, phone number, and gender.Some of your profile elements (such as your name and professional details) may be publicly visible to some users, such as Casting Directors. Agents may also choose to use some of your data, with your permission, to display certain elements on their website to promote you for more work

Project information: We collect the project content when you create a new project, which may include your project’s name, description of the project, photos, your name and in certain cases your contact details. Project content may include embedded information or other metadata (e.g. EXIF data in photos, such as when and where each photo was taken, and details of the device used to take it).

Authentic information: To help create and maintain a trusted environment, we may collect identification (like a photo of your government-issued ID) or other authentication information. You will be told at the time of collection when this applies.

Payment information: We may collect your financial information (like your bank account or credit card information) when you make payments to us or third parties using our Services, or when you use our Services to submit, track, or manage payment details. This includes situations where a production company or agent collects and processes financial information for payments to talent users.

Communication:When you communicate with us or other Users in relation to a Service, we may collect information about your communication and any other information you provide. This includes when you communicate with us, in which case we may retain your communication for fraud prevention, internal training and quality assurance purposes.

Other Information: You may otherwise provide us information directly (by email or in other formats), such as when you provide feedback, fill in a form, conduct a search, update or add information to our Services, respond to surveys or other research activities, participate in promotions, upload into our Services or use other features of our Services.

2.2 Information we automatically collect, such as:

Usage Information: We collect information about your interactions with our Services, such as the projects or other content you view, searches, bookings you have made, and messages generated through your use of the Services.

Location Information: When you use certain features of our Services, we may collect different types of information about your general location (e.g. your physical or postal address or your device’s IP address) or more specific location information (e.g. precise location from your mobile GPS). Most mobile devices allow you to control or disable the use of location services for applications in the device’s settings menu.

Analytics: We automatically collect analytics data to improve our service when you use our Services, even if you have not created an account or logged in. This may include information such as how you interact with our Services, your IP address, access times, hardware and software details, and device event information (e.g., crashes, browser type). We may use third-party providers to assist with analytics to improve our Services.

Transaction and Financial Information: We may collect information related to your transactions on our Services, including the date and time, amounts charged, and other related transaction details. Depending on your settings and the Services you use, we may collect financial information relating to your use of our Services and your financial history.

Cookies and Similar Technologies: We use cookies, pixels, beacons and other similar technologies to collect and store information when you use our Service, enhance user experience and enable analytics.  You may disable the usage of cookies through your browser settings. 

2.3 Information from third parties or external sources, such as:

We may receive information from third parties (such as agents or production companies) when you engage with their services through our platform. Additionally, we use external service providers such as Google Maps for location-based services (like providing address maps) and Vonage for SMS communications. These third parties may collect and process data in accordance with their own privacy policies.

3. How do we use your information?

We use your personal information to provide you with Services and to maintain your trust in HeyCast and the people who use it. We also use your personal information with information from others so that we can analyse patterns across our data and improve our Services. For example, we can look across our Services to see trends and habits to make sure we invest in product improvements that deliver benefits. We may use your personal information in the following ways:

3.1 To contact you about your account or use.

We may contact you by email, text message, or other means in relation to your account or use. While we rarely send advertising material, you may still:

  • Unsubscribe from emailed newsletters and advertising materials.
  • Change your email preferences for Service related emails, such as alerts and reminders.

3.2 To help provide our Services, for example:

We may use your information to:

  • Enable your use of our Services, including communication with other Users, making payments, booking services, and verifying your identity.
  • Personalize or enhance your experience, such as saving login credentials and improving search results.
  • Manage, protect, develop, and improve our Services through analytics, accounting, and customer support.
  • Conduct research on user demographics, interests, and behaviour.
  • Train and improve our staff who provide or support our Services.

3.3 For trust, safety and assurance, for example to:

Protect the rights, property or safety of Users, third parties or us. We may use your information to keep our Services safe, and to protect the rights and property of Users, third parties or us.

Prevent harm to us or others. We may use your information to detect and prevent fraud, spam, abuse, security incidents, and other harmful activity (e.g. if we believe you have used another person’s payment card or payment details without their permission or knowledge, we may disclose your personal information relating to the transaction to the police or their bank).

Ensure we comply with our obligations. We will use information to ensure we comply with the law, including disclosures authorised under the New Zealand Privacy Act 2020 and, where applicable, the Australian Privacy Act 1988 (Cth).

Resolve disputes. We may use your information to resolve disputes with or between any of our Users. We will seek your permission before disclosing your contact details to a third party involved in a dispute, unless this is permitted under privacy laws (e.g., we may disclose your information where the other party has sworn a statutory declaration regarding the dispute).

Enforce agreements. We may use your information to enforce our agreements with Users or third parties.

Conduct investigations. We may use your information to conduct investigations relating to our Services and make risk assessments.

Allow our business to be audited. We may use your information to allow for auditing of our Services and businesses.

Verify the identity of users or third parties. We may verify your identity or authenticate information provided by you, including information relating to others.

3.4 For advertising and marketing, for example to:

Send you promotional messages, marketing or advertising about our Services, including customised promotions, marketing or advertising. We may send or show you promotional messages, marketing, advertising, and other information about our Services including information that we think may be of interest to you, for example through recommendations and suggestions on our websites or through email. You can set and edit your email preferences to control what you receive

Tailor our advertising and marketing to you once you’ve left our websites. We may send or show you promotional messages, marketing, advertising, and other information that may be of interest to you once you’ve left our websites. We may advertise to you in this way through certain advertising platforms such as Google Marketing Platform or Facebook. If you opt out of tailored remarketing, we won’t use your personal information for remarketing, but you may still see similar ads based on your browsing history, non-personal cookie data or other anonymous information. You can further control what ads of ours you see off-site in various ways, for example through Google’s Ad Settings, through your Facebook Adverts settings, by visiting the websites of the Network Advertising Initiative or Digital Advertising Alliance or through your browser settings. 

Run promotions. We may use your information to administer referral programmes, rewards, surveys, contests, or other promotional activities.

Measure and improve our advertising. We may use your information to measure the effectiveness of our advertising and make improvements.

3.5 To help you publish things on our website, such as:

Your public profile. Parts of your public profile page, such as your user name and your region may be publicly visible to others.

Your project content. We may make project content publicly available on the applicable Service when you publish it (and in such cases, you are solely responsible for such publication). 

Your feedback.  Our Service allows Users to provide feedback. This feedback may be publicly available.

Comments on social media. If you submit content on social media post or other similar feature on our Services, that content will be publicly visible.

3.6 For other things, with your express consent.

We may disclose your information at your direction, or otherwise as you agree with us. Please note that we:

  • Do not have access to your passwords. These are strongly encrypted.
  • Only use your credit card details for purposes related to your transactions and for fraud prevention or law enforcement purposes.

4. Who do we disclose your information to?

We may need to disclose your personal information to provide you with our Services, improve our Services, comply with legal obligations, or enforce our terms. We may disclose your personal information in the following ways:

4.1 To others with your consent, for example when you:

Ask us or authorise us. We’ll share your information when you authorise us to send this to a third party. For example, if you use HeyCast as a Talent User, you authorise us to release your name, email address and other contact details to the Casting Director booking you for a project. Likewise, if you use connect with an Agency,  we’ll disclose your personal information with your Agent to facilitate the Service.  

Authorise third party access. Some of our Services require third-party providers to process your information on our behalf, such as payment processing, data security, and analytics. These third parties operate under contractual obligations consistent with this Privacy Policy and applicable privacy laws.

4.2 To other users in certain cases, for example:

Payments for bookings made through HeyCast.  In order for you to get paid for a job booked on HeyCast we share information necessary for an Agency or Production to make that payment, such as your profile information, contact information, and other information about the transaction with the agency or production. We share this information because it’s necessary to make a payment. The agencies and productions treat this information in the same way as if written a check to you directly, which means that their privacy policies and marketing policies apply to the information we share with them. 

Dispute information (subject to a statutory declaration): In rare circumstances we may disclose contact details of one User to another User (e.g. see cause 4.5 below).

4.3 To our service providers, to provide and manage our Services.

In order to provide and manage our Services, we may need to disclose some of your personal information to our third party service providers. These providers have limited access to your personal information to perform tasks on our behalf, and are contractually obliged to use your personal information consistently with this Privacy Policy. These disclosures will be consistent with the Service-specific terms and the rest of this privacy policy.

4.4 To other third parties, such as:

Developers who use our API to build applications. If you use HeyCast, we provide application programming interfaces (APIs) that allow developers to build new applications that include our data. Some applications may deliver services to you that ask you to log in to connect to HeyCast (via the application). These applications will not be able to retrieve your HeyCast password, but will be able to access your current content and other personal information to the extent you have authorised access. For example, an Agency can view your profile, display information on their website, or share your profile with a Casting Director by using a HeyCast API. 

4.5 To authorities or other entities to uphold the law or our terms, for example:

For legal compliance or law enforcement purposes. We may disclose your personal information to courts, law enforcement or government agencies, or third parties, to the extent we believe that disclosure is appropriate or permitted by the Privacy Act. We only share information if we believe that disclosure is reasonably necessary to comply with a law, regulation or legal request; to protect the safety, rights, or property of the public, any person, or HeyCast; or to detect, prevent, or otherwise address fraud, security or technical issues.

To facilitate legal processes. If you wish to take Disputes Tribunal (or other) proceedings against another User, you can contact us for a statutory declaration form which must be completed before we will consider releasing anyone else’s information to you. You may only request contact details for the sole purpose of making a claim.

To enforce or apply our terms and conditions or policies. Despite anything else in this clause 4.5, if you are involved in a dispute to which our Terms and Conditions apply, you authorise us to (at our discretion) provide the other party with any correspondence or evidence relevant to the dispute which you’ve provided to us. In limited circumstances, we may also provide your contact details to the other party to help resolve the dispute (but will always seek your permission first).

To protect the rights, property or safety of us, our Users or others. This includes collecting money you owe us and making such disclosures as are necessary for the purpose of trust, safety and assurance in accordance with clause 3.3 above.

4.6 To others where necessary to reorganise or sell our business.

If we undertake or are involved in any merger, acquisition, reorganisation, sale of assets, bankruptcy, or insolvency event, then we may sell, transfer or share some or all of our assets with a party involved in such a process (for example, a potential purchaser). In this event, we will notify you before your personal information is transferred and becomes subject to a different privacy policy.

4.7 To other third parties, where your identity is anonymised.

We may share non-personally identifiable information (e.g., aggregated information about our Users that we combine together so that it no longer identifies or references an individual User), for industry and market analysis, demographic profiling, marketing and advertising, and other business purposes.

4.8 Also, some interactions with our sites and Services may be subject to additional third party terms. For example

External links. Our Services may contain links to third party websites or services. We don’t own or control those websites or services or endorse them in any way and, if you interact with them, you may be providing information directly to the third party concerned. The third parties will have their own rules about the collection, use, and disclosure of your personal information. We encourage you to review their privacy policies accordingly.

Certain embedded third party services. Some of our Services incorporate third-party services (e.g., Google Maps). Use of these services is subject to their respective privacy policies.

Information indexed by search engines. Information you share publicly on our Services may be indexed through third party search engines. We do not control the practices of third party search engines, and they may use caches containing your outdated information.

5. How do we hold and protect your information?

We’re big on security. We share lots of tips on how to keep your personal information secure. We also work hard to ensure we keep your personal information safe and to avoid any harm to you or your personal information. We would notify you and the Office of the Privacy Commissioner if a potentially harmful data breach of your personal information ever did occur.

By using HeyCast, you consent to the collection, storage, and use of your personal information as described in this Privacy Policy. We collect personal data when you register, interact with our services, or contact us. Your consent is provided at the time of registration and throughout your use of the service. You can withdraw your consent at any time by contacting us or deactivating your account.

We delete personal information after it is no longer reasonably necessary for us to use it. In particular:

5.1 We use industry recognised security practices and measures.

We are committed to keeping your personal information as safe and secure as possible and follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it.

We continuously implement and update our administrative, technical, and physical security measures to help protect your personal information against unauthorised access, loss, destruction, or alteration. However, despite all of our measures we can’t 100% guarantee the security of the transmission or storage of your personal information.

5.2 We store your information in New Zealand, Australia, or overseas subject to standards that will comply with our privacy obligations

You authorise us to transfer, store, and process your personal information in New Zealand, Australia and possibly other countries. Where personal data is transferred outside of New Zealand or Australia, we will ensure that appropriate safeguards are in place to protect your data, such as contractual agreements or ensuring the recipient country has equivalent privacy protections.

5.3 We retain your information as long as reasonably required, unless we are legally required to hold it longer.

We will keep your personal information for as long as is reasonably required for us to use it in accordance with this policy, unless we are required by law to hold it longer. In particular, we may retain:
• Copies of your emails for a period of up to two years (and sometimes longer, where necessary for business purposes, to help prevent fraud or facilitate legal processes).
• All project content after projects have been made inactive. We do this for various reasons, including in case of disputes, to help prevent fraud and facilitate legal processes, to comply with financial record-keeping and to help personalise or recommend products in future. Project content may also persist elsewhere when third parties access and cache listings while they are live. For example, Google do this when they index the web for searching and so old listings may show in Google searches for a period of time.

Personal data that has been deleted will be removed from backups within 30 days unless retention is required for legal or regulatory compliance.

Upon your request or when your data is no longer required, we will securely delete or de-identify your personal information, in accordance with the applicable privacy laws of New Zealand and Australia.

5.4 Credit card Information is held subject to stringent payments industry standards.

We do not store credit or debit card information. Payments made via HeyCast (for example, when purchasing SMS credits) are processed by third-party payment providers that comply with stringent security standards, including the Payment Card Industry Data Security Standards (“PCI standards”). These providers implement a variety of security measures to help protect your credit and debit card information from unauthorised access, use, and disclosure.

6. How can I manage my information?

We know your circumstances, details and preferences will change. So, we’ve built a number of tools for you to manage your personal information. You can:

6.1 Update your information by:

Managing your profile.  HeyCast allows you to build a customised profile. You may review and update the account information we hold about you (such as your email address, password and phone numbers) by logging into HeyCast and updating the information in your account. 

Managing your projects. HeyCast enables you to change the details that can be seen on your projects if you are the Casting Director user who created the project.

Managing your privacy options. You can manage your information options on your Profile Settings page (e.g. opt out of certain uses of personal information) or by unsubscribing from any advertising email. 

6.2 Ask us to update, provide or delete your information

You have the right to access, correct, or delete your personal information in accordance with the New Zealand Privacy Act 2020 and the Australian Privacy Act 1988. To make a request, please contact us at support@heycast.co. We will respond promptly, within 10 working days. Deletion requests will be considered in line with our legal and contractual obligations. If we are unable to delete your personal information due to legal or contractual obligations, we will inform you of the reason and how you may appeal the decision.

If you want to cancel your account, please use the “Deactivate” button in your profile settings, or contact us for assistance.

7. How do we amend this policy?

We may change this policy from time to time and if we do, we’ll post any changes on this page. If you continue to use HeyCast after those changes are in effect, you agree to the new policy. If we make significant changes to this policy, we will notify you via email or an in-app notice before the changes take effect. As we update this policy occasionally, we encourage you to periodically review this page for the latest information on our privacy practices.

8. Our policy on children’s information

Children under the age of 18 are not permitted to use HeyCast without consent from a parent or guardian. You may only use HeyCast if you are over the age at which you can provide consent to data processing under the laws of your country or if verifiable parental consent for your use of HeyCast has been provided to us. If you are a parent and you learn that your child is using HeyCast and you don’t want them to, please contact us at support@heycast.co.

If we collect personal information from a minor under 18, we will take reasonable steps to verify parental consent before processing their data. This may include requiring an email confirmation from a parent or guardian or ensuring the child’s profile is linked to a parent or guardian’s main account, which they will manage.

If we become aware that we have collected personal information from a child without verified parental consent, we will take steps to delete such information promptly.

9. Handling of Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your use of our services. These technologies help us improve our services, personalize your experience, and provide relevant advertisements. By using HeyCast, you consent to the use of cookies. You can manage your cookie preferences through your browser settings or via our cookie management tool.

10. Privacy Complaints Procedure

If you believe that we have breached your privacy rights, you can lodge a complaint by contacting support@heycast.co. We take all such matters seriously and will aim to resolve your complaint promptly. If you are not satisfied with our response, you can escalate your complaint to the Office of the Privacy Commissioner (OPC) in New Zealand (www.privacy.org.nz) or the Office of the Australian Information Commissioner (OAIC) (www.oaic.gov.au).

Contact Us

If you have questions about this policy, you can contact us as at support@heycast.co.