Privacy Policy

GIA Production ("GIA", "we", "us", or "our") operates giaproduction.com and its related services. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and the choices you have.

By using our website or submitting an application, you agree to the practices described below. If you have any questions or concerns, please contact us.

1. Who We Are

GIA Production is a global creative agency with studios in Dubai (UAE), Manila (Philippines), and Hyderabad (India). We provide talent management, film and video production, and digital marketing services.

2. Information We Collect

2.1 Information you provide directly

• Identity & contact — full legal name, display name, email address, phone number, WhatsApp number.
• Profile information — date of birth, gender, city, country.
• Physical measurements — height, weight, bust, waist, hips, chest, inseam, suit size, shoe size (used for talent matching only).
• Photos — portfolio images you upload during your application.
• Social handles — Instagram, TikTok, Facebook (optional).
• Availability & preferences — shoot categories, content preferences, travel availability.
• Communications — messages you send through our contact form.

2.2 Information collected automatically

• Usage data — pages visited, referring URL, browser type, device type, and IP address, collected via Cloudflare infrastructure.
• Authentication tokens — session identifiers used to keep you signed in.

3. How We Use Your Information

• To create and manage your talent profile on our roster.
• To match talent to client briefs and casting calls (measurements and categories are used for internal matching only and are never shown publicly without your consent).
• To send you sign-in links (magic links) and important account notifications.
• To respond to your enquiries submitted via our contact form.
• To improve our website and services.
• To comply with legal obligations.

We do not sell your personal information to third parties. We do not use your data for automated decision-making that produces legal or similarly significant effects.

4. Legal Basis for Processing (GDPR)

Where applicable, we process your personal data on the following bases:

• Contract performance — processing necessary to manage your talent profile or agency relationship.
• Legitimate interests — improving our services, preventing fraud, and communicating with prospective clients.
• Consent — where you have explicitly opted in (e.g., marketing communications).
• Legal obligation — where required by law.

5. Data Storage & Security

Your data is stored on Cloudflare's infrastructure (D1 database and R2 object storage), which is distributed globally across Cloudflare's edge network. Cloudflare maintains ISO 27001 certification and SOC 2 compliance.

Photos are stored in a private R2 bucket and served only via time-limited signed URLs. We use industry-standard encryption in transit (TLS) and at rest.

Despite these measures, no transmission over the internet is 100% secure. You use our services at your own risk.

6. Data Retention

• Active talent profiles — retained for as long as you are on our roster or until you request deletion.
• Incomplete applications — draft photo uploads are automatically purged after 7 days.
• Contact enquiries — retained for up to 2 years for business continuity.

7. Sharing Your Information

We may share your information with:

• Our team — GIA staff and approved agency partners who manage talent and coordinate productions.
• Clients — only your public profile (display name, location, shoot categories, and portfolio photos you have approved for public display) is shared with prospective clients. Measurements and contact details are only shared when you accept a booking.
• Service providers — Cloudflare (hosting and CDN) and email delivery providers. These processors are bound by data processing agreements.
• Legal authorities — where required by law or valid legal process.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request that inaccurate or incomplete data be corrected.
• Deletion — request erasure of your data ("right to be forgotten"), subject to legal obligations.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us or email hello@giaproduction.com. We will respond within 30 days.

9. Cookies & Tracking

We use strictly necessary cookies to maintain your authenticated session. We do not use third-party advertising cookies or tracking pixels. Cloudflare may set cookies for security and performance purposes.

10. Children's Privacy

Our services are intended for individuals who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, please contact us immediately.

11. International Transfers

GIA Production operates globally. Your data may be processed on Cloudflare's distributed network, which spans multiple countries. Cloudflare complies with applicable data transfer mechanisms including Standard Contractual Clauses for EU data subjects.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the latest revision. For material changes, we will notify active users by email.

13. Contact Us

For any privacy-related questions, requests, or concerns:

• Email: hello@giaproduction.com
• Online: giaproduction.com/contact