Privacy policy
Your information, and how it moves through this website.
Who this notice covers
This notice describes the current CastU website’s browsing and enquiry features. CastU can be contacted at info@castu.net or at JBC 1 Tower, 41st floor, Cluster G, Jumeirah Lakes Towers, Dubai, UAE.
CastU, Dubai, United Arab Emirates, is responsible for the personal information described in this notice and can be reached at the address above.
Contact and booking enquiries
When you submit a contact or booking request, CastU saves your name, email, optional phone number, project details, selected profiles and chosen contact channel in its private database for staff to review and follow up.
Email notifications are processed through Resend. Choosing WhatsApp prepares your details and a visual shortlist link in WhatsApp; you decide whether to send that message. Shortlist links are unlisted, expire after 30 days, and show only currently published profiles. Anyone with the link can view it until it expires or staff revokes it. Avoid including passports, payment details or other sensitive documents in these forms.
Your saved listing and preferences
The website stores selected profile identifiers and your theme preference in your browser’s local storage. It also uses session storage to remember whether the homepage introduction has already played in the current tab session.
These browser preferences are separate from an enquiry. Clearing your browser’s site data removes saved local preferences and selections. See the Cookie policy for more detail.
Talent applications and public profiles
Applications submitted through Apply Now are saved privately for staff review. Application details are stored in Supabase and uploaded images in private Cloudflare R2 storage. For applicants under 18, we collect a parent or guardian’s name, relationship and contact details. Only the profile details and images approved for publication are made public; private contact and guardian details are not included in public profiles.
Contact hello@castu.net about an application, profile correction or removal request. Children’s applications and related questions should involve a parent or authorised guardian.
Service providers and technical information
Loading a website involves sharing technical information, such as an IP address and browser request details, with its hosting and delivery services. The website is hosted on Vercel, stores records in Supabase, keeps uploaded images in Cloudflare R2, sends email through Resend, and protects its forms with Cloudflare Turnstile, which checks your browser for automated abuse. Email, WhatsApp and map providers receive information when you use their services, under their own privacy practices.
Form submissions are rate-limited using a one-way hash of your network address; the address itself is not stored. Our service providers operate in several regions, so some processing takes place outside the UAE under those providers’ contractual safeguards. Hosting and delivery logs are retained by the providers for a limited period for security and troubleshooting.
How long information is kept
Local preferences remain until cleared by you or your browser; the introduction marker lasts for the browser’s tab session. Unsubmitted form entries are not intentionally saved between visits. Submitted enquiries and staff follow-up records remain in CastU’s private database for as long as they are needed to respond to and manage the request. Your browser or email app may retain its own autofill information or drafts.
Application and booking records are kept while the agency works with you. You can ask for your information to be erased at any time using the contact below, and the agency removes the record, its images and any public profile together.
Privacy questions and requests
Contact info@castu.net to ask about your information or request access, correction, deletion, or a restriction on its use. The agency assesses requests under the law that applies and may need enough information to verify your identity.
Applicable rights and any lawful exceptions will depend on the processing involved. Do not send identity documents unless the agency explains what is needed and provides a suitable channel.
Changes to this notice
This notice is updated whenever the website’s data-handling features change. Last updated: 4 October 2026.