Privacy Policy

Last updated: 1 October 2026

This Privacy Policy explains how SiDonald Ltd ("SiDonald", "we", "us" or "our") collects and uses personal data when you visit sidonald.com, contact us through the website, submit an application for representation, apply to work with us as an agent, upload materials through our public forms, or choose to join our mailing list.

This policy is for users of our public website and people making enquiries or applications through it. It does not govern the processing of personal data relating to an ongoing artist representation relationship or use of the SiD client portal. If you become a represented client, we will provide separate privacy information for that relationship.

SiDonald Ltd is the controller of the personal data described in this policy.

Company number: 15643741
Registered in: England and Wales
Email: hello@sidonald.com
Website: sidonald.com

1. Personal data we collect

The personal data we collect depends on how you use our website.

Website visits

When you use our website, our hosting, security and technical service providers may process information such as:

  • your IP address;
  • browser and device information;
  • the pages you visit;
  • the date and time of your visit;
  • referral information; and
  • technical and security logs.

We use this information where necessary to operate, maintain and protect the website.

General enquiries

If you contact us through the website, we may collect:

  • your first and last name;
  • your email address;
  • the type of enquiry you are making; and
  • the information you include in your message.

Representation enquiries

If you submit an enquiry about representation, we may also collect information you choose or are asked to provide through the representation form, including:

  • Spotlight first and last name;
  • pronouns;
  • date of birth;
  • right-to-work information;
  • gender searchability;
  • playing age;
  • location;
  • headshot;
  • Spotlight and IMDb links;
  • appearance and ethnicity information; and
  • any additional information included in your message.

Some appearance or ethnicity information may constitute special category personal data under UK data protection law. Where we ask you to provide this information, it is optional and we will ask for your explicit consent to process it for the purpose stated on the form.

If you are under 18 and make a representation enquiry, we may ask for a parent or guardian to be involved in the application and subsequent communications with us.

Agent applications

If you choose "Apply to be an agent" through our contact form, we may collect:

  • your first and last name;
  • your email address;
  • your CV; and
  • the information you include in your message.

We use this information to assess your application, communicate with you about it and, where appropriate, take steps before entering into an employment or other working relationship.

Mailing list

If you choose to join our mailing list, we will process your email address and a record of your marketing preference and consent.

2. How we use your personal data

We may use personal data collected through the website to:

  • operate, maintain and secure the website;
  • respond to enquiries and communicate with you;
  • assess representation enquiries and materials submitted to us;
  • assess applications to work with SiDonald as an agent;
  • take steps at your request before entering into a potential representation, employment or other working relationship;
  • manage and administer enquiries and applications through our internal systems;
  • maintain appropriate business and security records;
  • comply with legal and regulatory obligations;
  • establish, exercise or defend legal claims; and
  • send marketing emails where you have chosen to receive them.

If you become a represented client, personal data subsequently processed as part of that relationship will be covered by separate client privacy information.

3. Our lawful bases

Depending on the circumstances, we rely on one or more of the following lawful bases under UK data protection law.

Legitimate interests

We may process personal data where it is necessary for our legitimate interests in operating our business and website, responding to enquiries, maintaining security, keeping appropriate records and managing prospective business relationships, provided those interests are not overridden by your rights and interests.

Steps before entering into a contract

Where you submit a representation enquiry or an application to work with us, we may process information where necessary to take steps at your request before potentially entering into a representation agreement, employment contract or other working arrangement.

Legal obligations

We may process personal data where necessary to comply with legal or regulatory obligations.

Consent

We rely on consent where required, including:

  • where you explicitly consent to our processing of optional special category information submitted as part of a representation enquiry; and
  • where you opt in to receive marketing emails.

You can withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

4. Special category personal data

Information revealing racial or ethnic origin is special category personal data and receives additional protection under UK data protection law.

Our public representation enquiry form allows applicants to provide optional appearance and ethnicity information. Where this includes special category personal data, we process it only where an appropriate lawful condition applies, including explicit consent where requested through the form.

You do not have to provide optional appearance or ethnicity information.

5. When information is required

Some fields on our forms are marked as required because we need that information to receive, assess or respond to the relevant enquiry or application.

If you do not provide a required field, you may not be able to submit the form or we may not be able to consider or respond properly to your enquiry or application.

Other fields are optional. Where information is optional, you may choose whether to provide it.

6. Who we share personal data with

We may share or allow personal data to be processed by organisations that help us operate the website and manage enquiries, including:

  • website hosting, security and infrastructure providers;
  • Cloudflare, including Cloudflare Turnstile, which is used to help protect our forms from automated or abusive submissions;
  • Google, where our location search uses Google Maps or related location-search services;
  • cloud storage and IT service providers;
  • email and communications providers;
  • form, workflow, CRM or internal business-system providers;
  • professional advisers such as accountants, insurers or legal advisers where necessary; and
  • regulators, law enforcement bodies, courts or other authorities where required by law.

Our service providers may only process personal data for the purposes for which we engage them, subject to the relevant contractual and legal arrangements.

We do not sell your personal data.

Information submitted as a representation enquiry is used to assess and respond to that enquiry. If you later become a represented client, any subsequent use or sharing of your professional information as part of representation will be dealt with under the privacy information applicable to the client relationship.

7. International transfers

Some of our service providers operate internationally and may process personal data outside the United Kingdom.

In particular, Google and Cloudflare are global service providers and information processed through their services may be transferred or accessed outside the UK, including in the United States.

Where a transfer is a restricted transfer under UK data protection law, we will use an appropriate legal mechanism where required, such as UK adequacy regulations, approved contractual safeguards or another permitted transfer mechanism or exception.

8. Cookies and similar technologies

We do not currently use analytics or advertising technologies on the public SiDonald website.

The website may use cookies, local storage or similar technologies that are necessary for website functionality, security or user preferences. Third-party services used on the site, such as Google location search and Cloudflare Turnstile, may also process device or browser information in order to provide their functions.

Where we introduce analytics, advertising or other non-essential technologies that require consent, we will provide appropriate information and obtain consent before using them where required by law.

You can also control cookies through your browser settings. Blocking some technologies may affect how parts of the website function.

9. Marketing

We will only send marketing emails where we have an appropriate legal basis and where the Privacy and Electronic Communications Regulations 2003 ("PECR") allow us to do so.

Where you join our mailing list using the website opt-in, we rely on your consent. You can unsubscribe or withdraw your consent at any time.

We may keep a limited suppression record where necessary to make sure we respect an unsubscribe or objection.

10. Automated decision-making

We do not make decisions about whether to offer representation, employment or another working relationship based solely on automated processing where that decision would have a legal or similarly significant effect on you.

We may use software and internal systems to help organise or administer enquiries and applications, but decisions about representation or agent applications are made with human involvement.

11. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and for any applicable legal, regulatory, accounting or dispute-resolution requirements.

In particular:

  • general enquiry information will be kept for as long as necessary to respond to and manage the enquiry and any reasonable follow-up;
  • unsuccessful representation enquiry information will generally be retained for up to 12 months after the application is concluded, unless there is a specific reason to keep it for longer;
  • unsuccessful agent application information will generally be retained for up to 12 months after the application is concluded, unless there is a specific reason to keep it for longer;
  • mailing-list information will generally be retained until you unsubscribe or withdraw consent, although we may retain a limited suppression record so that we do not contact you again; and
  • technical and security records will be retained for as long as reasonably necessary for website operation, security and investigation purposes.

If a representation enquiry results in an ongoing client relationship, relevant information may become part of the client record and will then be retained in accordance with the privacy information applicable to that relationship.

If an agent application results in an employment or other working relationship, relevant information may become part of the applicable employment or contractor record and will then be retained in accordance with the privacy information applicable to that relationship.

12. Security

We use appropriate technical and organisational measures designed to protect personal data against accidental loss, misuse, unauthorised access, alteration or disclosure.

Access to personal data is limited to people and service providers who need it for legitimate business purposes.

No online service can guarantee absolute security, but we take reasonable measures appropriate to the nature and risk of the information we process.

13. Your data protection rights

Depending on the circumstances, you may have rights to:

  • request access to your personal data;
  • ask us to correct inaccurate or incomplete personal data;
  • ask us to erase personal data;
  • ask us to restrict processing;
  • object to certain processing, including direct marketing;
  • request portability of certain personal data; and
  • withdraw consent where we rely on consent.

These rights are subject to the conditions and exemptions in applicable data protection law.

To exercise a right, contact hello@sidonald.com.

We may need to verify your identity before acting on a request.

14. Data protection complaints

If you are concerned about how we have handled your personal data, you can make a data protection complaint to us at hello@sidonald.com.

We will acknowledge a data protection complaint within 30 days of receiving it, take appropriate steps to investigate it without undue delay, keep you informed where appropriate, and communicate the outcome without undue delay.

You also have the right to complain to the Information Commissioner's Office ("ICO"), the UK's data protection regulator:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Further information is available at ico.org.uk.

15. Third-party websites

Our website contains links to third-party websites and services, including professional casting platforms, social-media services and other external sites.

Those organisations are responsible for their own privacy practices. We recommend reviewing their privacy information when you leave our website or provide information directly to them.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, technology or legal obligations.

The latest version will be published on this page with an updated date.