Privacy Policy

This Privacy Policy explains how NextGen UGC ("we", "us", "our") collects, uses, and protects your personal data when you use our website, mobile application, and services, or apply to our casting through our Facebook/Instagram lead form or any related channel. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR), the Cyprus Data Protection Law (125(I)/2018), and United States privacy laws including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable state privacy laws.

1. Data Controller

2. What Personal Data We Collect

When you submit a casting application, we collect:

• Full name
• Phone number
• Email address
• Age / date of birth
• City / location
• Any additional information you voluntarily provide in the form (e.g., experience, availability, language)
• Photos or videos you choose to share with us during the casting process

3. Why We Collect Your Data (Purpose)

• To evaluate your suitability for casting and content creation opportunities
• To contact you about castings, projects, and bookings
• To match you with brand clients and creative briefs
• To send you follow-up messages via WhatsApp, phone, SMS, or email
• To comply with our legal and contractual obligations

4. Legal Basis

We process your personal data on the following legal bases under GDPR:

• Consent (Art. 6(1)(a)) – you actively submit your details through the form.
• Pre-contractual / contractual necessity (Art. 6(1)(b)) – to take steps prior to entering a casting or content creation agreement.
• Legitimate interest (Art. 6(1)(f)) – to manage and grow our casting roster and respond to applicants.

5. Who We Share Your Data With

We do NOT sell your personal data. We may share it with:

• Our team members and contractors involved in casting
• Brand clients we match you with (only after you confirm your interest)
• Service providers we use to operate our business (e.g., CRM, WhatsApp Business API provider, email tools, cloud hosting)
• Authorities, where required by law

6. International Transfers

Some of our service providers may be located outside the European Economic Area. Where this is the case, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

7. How Long We Keep Your Data

We retain your application data for up to 24 months from your last interaction with us, after which it is deleted or anonymised, unless a longer retention period is required by law, for tax compliance (IRS records are retained for 7 years), or by an ongoing relationship.

8. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Request erasure of your data ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw your consent at any time
• Lodge a complaint with the Cyprus Office of the Commissioner for Personal Data Protection (www.dataprotection.gov.cy)

To exercise any of these rights, contact us at admin@nextgenugc.com. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is encrypted in transit (SSL/TLS) and at rest. Payment data is processed through PCI-DSS compliant providers (Stripe) and is never stored on our servers. We conduct regular security reviews and access is restricted to authorised personnel only.

10. Children

11. Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You can request the categories and specific pieces of personal information we collect, use, disclose, or sell about you
• Right to Delete: You can request deletion of your personal information (with certain exceptions)
• Right to Correct: You can request correction of inaccurate personal information
• Right to Opt-Out of Sale or Sharing: You can opt out of the "sale" or "sharing" of your personal information. We do not sell your personal data for monetary compensation. However, "sharing" under CPRA includes certain cross-context behavioral advertising and data sharing with service providers, which you may opt out of
• Right to Limit Use of Sensitive Personal Information: You can limit the use of your sensitive personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Authorized Agents: You may designate an authorized agent to submit requests on your behalf

Categories of Personal Information We Collect (per CCPA): Identifiers (name, email, phone), commercial information (job history, payment data), internet activity (usage data, IP address), geolocation data, and audio/visual content (photos, videos you upload).

To exercise any of these rights, submit a request to admin@nextgenugc.com with "California Privacy Request" in the subject line. We will verify your identity and respond within 45 days.

12. Other US State Privacy Rights

If you reside in another US state with privacy laws (such as Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, or others), you may have similar rights to access, correct, delete, or opt out of certain processing of your personal data. Contact us at admin@nextgenugc.com to submit a request.

13. "Do Not Sell or Share My Personal Information"

Under the CCPA/CPRA, California residents have the right to opt out of the sale or sharing of their personal information. We do not sell your personal information for monetary consideration. However, if you wish to opt out of any data sharing practices that may qualify as a "sale" or "share" under California law, click the "Do Not Sell My Info" link in the website footer or email us at admin@nextgenugc.com.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be communicated via email or in-app notification.

15. Contact

Questions about this Privacy Policy or your data?

Email: admin@nextgenugc.com

NextGen UGC, Gladstonos 83, Limassol, Cyprus

www.nextgenugc.com/privacy