MAGIC TALENT
Privacy Policy
MAGIC TALENT policy draft for public review.
This draft is not yet a final, effective policy or a certification of legal compliance. Confirmation notes identify unresolved details. Intended safeguards are not statements that those controls are already available.
Business details
M.K. London Holdings Limited · Company number 14436468
6th Floor Amp House, Dingwall Road, Croydon, United Kingdom, CR0 2LXWho is responsible
M.K. London Holdings Limited operates MAGIC TALENT. Send privacy questions and personal information requests to info@magictalent.co.uk, or write to the registered office above. [CONFIRM controller status for each processing activity and whether any joint-controller arrangements or appointed privacy representatives apply.]
Information and purposes
The proposed notice covers information supplied for registration and accounts; profile details, photographs and portfolio work; project descriptions and talent recommendations; inquiries, messages and support requests; membership and billing references; and relevant security and website-use information.
Proposed purposes are providing accounts and memberships, operating talent discovery and connections, handling support and safety concerns, preventing fraud, resolving disputes and meeting legal obligations. [CONFIRM the actual data collected, whether sensitive information is collected or inferred, and the purposes and lawful basis for each category. Do not treat this list as a verified inventory.]
Required processing schedule before publication:
| Activity | Information | Purpose | Lawful basis | Recipients | Retention |
|---|---|---|---|---|---|
| Accounts and authentication | [Confirm] | Provide and secure accounts | [Confirm] | [Confirm] | Active account / deletion exceptions below |
| Profiles and portfolio sharing | [Confirm] | Display and share selected work | [Confirm] | [Confirm audiences and providers] | [Confirm] |
| AI role matching | [Confirm brief/profile fields transmitted] | Recommend relevant published talent | [Confirm] | [Confirm model, gateway and hosting providers] | [Confirm] |
| Booking inquiries and messages | [Confirm] | Facilitate contacts and collaboration | [Confirm] | [Confirm participants/providers] | [Confirm] |
| Membership billing | [Confirm] | Administer subscriptions and accounting | [Confirm] | Stripe and [confirm others] | [Confirm statutory schedule] |
| Support, safety and fraud prevention | [Confirm] | Resolve issues and protect members | [Confirm] | [Confirm] | [Confirm] |
| Analytics and marketing | [Confirm] | Measure performance / authorised marketing | [Confirm] | [Confirm] | [Confirm] |
Service providers and international processing
The owner intends to use Lovable Cloud for account, data and storage services; Stripe for payments; Resend for transactional emails; and Lovable for development and hosting. [CONFIRM each provider's actual use, legal entity, contractual role, processing locations and underlying service providers before final publication.]
AI matching requires separate confirmation of the actual gateway/model recipients and information transmitted. Do not omit AI processing or assume a provider solely from intentions. [CONFIRM whether providers retain information or use it for model training, and the relevant contractual settings.]
[CONFIRM any transfers outside the UK, relevant countries, applicable transfer arrangements and how people can obtain information about safeguards. No encryption, certification, data-residency or contractual-safeguard claim is made by this draft.]
Sharing and privacy choices
The owner's policy is not to make personal contact details public without a member's consent. [CONFIRM the implemented profile fields, publication settings and shared-link visibility before promising particular controls.] Shared links may be viewed by anyone who receives the link; recipients may keep their own copies.
Retention and requests
The intended retention and deletion approach is set out in Document 9. Members may contact the Management Team about access, correction, deletion, restriction, objections and portability where applicable. A request may require proportionate identity verification and may be subject to lawful exceptions. Do not send passwords, full payment card details or identity documents in an initial email.
[CONFIRM the response process and applicable deadlines, including the distinction between responding to a rights request and fulfilling the owner's proposed 30-day deletion commitment.]
People may raise a concern with the Management Team and may complain to the UK Information Commissioner's Office at https://ico.org.uk/make-a-complaint/ or another relevant supervisory authority.
Children and automated processing
Membership is 18+. [CONFIRM how underage accounts and content depicting children are handled; do not imply that age verification is currently guaranteed.] AI recommendations assist discovery and do not guarantee suitability or work. [CONFIRM whether any automated decisions have legal or similarly significant effects, and any review/contest process.]