top of page

Privacy Policy

Last updated: 26 September 2026
Effective date: 26 September 2026
 

1. Who We Are

This Privacy Policy explains how Doublecast Ltd, trading as Doublecast AI Twin Studio, collects, uses, stores and protects personal information.
 

Data Controller: Doublecast Ltd
London–Richmond, United Kingdom
Company number: "it can provide upon your request"
Email: hello@doublecast.ai
Website: www.doublecast.ai
 

For the purposes of applicable UK data protection law, including the UK GDPR and Data Protection Act 2018, Doublecast is generally the data controller for personal information processed for its own business purposes.
 

In certain projects, Doublecast may process personal information on behalf of a client or another organisation. In those circumstances, the parties will determine their respective controller/processor roles in the relevant agreement.
 

2. What Information We Collect

Depending on how you interact with Doublecast, we may collect the following categories of information.
 

Contact information

This may include:

  • name;

  • email address;

  • telephone number;

  • company;

  • job title;

  • correspondence details.
     

Professional information

For performers and industry professionals, this may include:

  • acting and professional credits;

  • professional biography;

  • agency information;

  • portfolio information;

  • availability;

  • professional preferences;

  • commercial categories;

  • licensing preferences;

  • territory preferences.
     

Digital Twin information

Where you voluntarily participate in our Digital Twin programme, we may process information such as:

  • photographs;

  • video recordings;

  • facial imagery;

  • voice recordings;

  • speech characteristics;

  • movement recordings;

  • performance recordings;

  • body or motion-capture information;

  • digital scans;

  • expressions and gestures;

  • approved performance characteristics;

  • Digital Twin model information;

  • consent and approval records.
     

Some of this information may constitute biometric data depending on how it is technically processed and used. Where biometric information is processed for unique identification, additional special-category requirements may apply.
 

Technical information

When you use our Website, we may collect:

  • IP address;

  • browser type;

  • device information;

  • operating system;

  • approximate location derived from IP address;

  • website interaction information;

  • referral information;

  • security logs.
     

Communications

We may retain information contained in emails, enquiries, applications, project communications and other correspondence.
 

Commercial information

For clients, suppliers and partners this may include:

  • company details;

  • billing information;

  • contracts;

  • purchase information;

  • project information;

  • licensing information;

  • payment records;

  • account history.
     

3. How We Use Personal Information

We may use personal information to:

  • operate our Website;

  • respond to enquiries;

  • provide services;

  • manage client relationships;

  • represent performers;

  • create and manage authorised Digital Twins;

  • negotiate and administer licences;

  • manage project approvals;

  • maintain consent records;

  • produce authorised media;

  • process payments;

  • communicate about projects;

  • provide customer support;

  • protect our systems;

  • prevent fraud and misuse;

  • comply with legal obligations;

  • establish or defend legal claims;

  • improve our services;

  • manage business operations; and

  • send marketing communications where permitted.
     

We will not use a performer's Digital Twin for unrelated commercial purposes simply because we hold their underlying information.
 

4. Lawful Bases

Depending on the circumstances, we may rely on one or more lawful bases under applicable data protection law, including:

  • performance of a contract;

  • taking steps at your request before entering into a contract;

  • compliance with a legal obligation;

  • legitimate interests;

  • consent; or

  • another lawful basis permitted by applicable law.
     

Where we process special-category personal data, we will identify an applicable Article 9 condition where required. The appropriate lawful basis depends on the particular processing activity and relationship.
 

5. Digital Twin and Biometric Data

Digital Twin production can involve highly sensitive personal information.

Doublecast will apply additional safeguards appropriate to the nature and risk of the information being processed.
 

Where required, we may:

  • obtain explicit consent;

  • conduct a data protection impact assessment;

  • limit access to authorised personnel;

  • use encryption;

  • segregate Digital Twin assets;

  • maintain access logs;

  • restrict model exports;

  • implement project-specific permissions;

  • retain information only for defined purposes and periods; and

  • securely delete information when appropriate.
     

The ICO states that processing special-category data requires both an Article 6 lawful basis and an Article 9 condition, and that high-risk processing may require a DPIA.
 

6. Performer Consent and Control

Where a performer participates in the Doublecast Digital Twin programme, we will document the scope of the rights and permissions granted.

Depending on the applicable agreement, a performer may have controls concerning:

  • permitted industries;

  • brands;

  • territories;

  • platforms;

  • duration;

  • advertising categories;

  • scripts;

  • languages;

  • physical actions;

  • age modification;

  • voice use;

  • visual likeness;

  • exclusivity;

  • approval requirements.
     

A Digital Twin licence does not automatically authorise every possible use of a performer's identity.

Specific contractual agreements may provide additional rights and controls.
 

7. AI Models and Third-Party Technology

Doublecast may use specialist technology providers to support Digital Twin creation, storage, processing, rendering, voice generation, visual generation, localisation or other production activities.
 

We will seek to use contractual and technical measures appropriate to the sensitivity of the information.

Where personal information is supplied to a third-party technology provider, the provider's role and permitted processing will be governed by the applicable contractual arrangements.

We will not knowingly authorise a third party to use a performer's Digital Twin for unrelated commercial model training where the applicable agreement prohibits such use.
 

8. How We Protect Information

We use appropriate technical and organisational measures designed to protect personal information.

These may include:

  • access controls;

  • authentication;

  • encryption;

  • secure cloud infrastructure;

  • network security;

  • logging and monitoring;

  • employee confidentiality obligations;

  • supplier due diligence;

  • backups;

  • incident-management procedures; and

  • data minimisation.

No internet-based service can guarantee absolute security.
 

9. How Long We Keep Information

We retain information only for as long as reasonably necessary for the purposes for which it was collected, subject to legal, contractual and legitimate business requirements.
 

Retention periods may vary depending on the type of information.

For example:

  • enquiry information may be retained for as long as necessary to respond and maintain appropriate business records;

  • contractual information may be retained for the duration of the relationship and an appropriate period afterwards;

  • financial records may be retained to comply with legal and accounting requirements;

  • Digital Twin assets may be retained for the period specified in the applicable talent agreement or licence;

  • consent and licence records may be retained for an appropriate period to demonstrate the scope of authorised use.

When information is no longer required, we will seek to securely delete, anonymise or otherwise dispose of it where appropriate.
 

10. Sharing Personal Information

We may share personal information with:

  • technology providers;

  • cloud hosting providers;

  • AI and production service providers;

  • professional advisers;

  • lawyers;

  • accountants;

  • insurers;

  • payment providers;

  • production partners;

  • advertising and media partners;

  • clients where authorised and necessary for a project;

  • talent agents or representatives where authorised;

  • regulators, courts or law-enforcement authorities where legally required.

We do not sell personal information as a general commercial data product.
 

11. International Transfers

Some of our service providers or business partners may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take steps required by applicable data protection law.

Depending on the circumstances, this may include:

  • adequacy regulations;

  • appropriate contractual safeguards;

  • international data transfer agreements;

  • UK addenda;

  • supplementary technical measures; or

  • another lawful transfer mechanism.
     

12. Cookies and Similar Technologies

Our Website may use cookies and similar technologies.

These may be used for:

  • essential website functionality;

  • security;

  • analytics;

  • remembering preferences;

  • understanding website usage; and

  • marketing, where applicable and permitted.

Where required, we will request consent before placing non-essential cookies or similar technologies.

You may manage cookies through your browser or any cookie-management tools made available on the Website.
 

13. Marketing

We may send information about Doublecast services, projects, events and opportunities where permitted by law.

Where consent is required, we will obtain it.
 

You may unsubscribe from marketing communications at any time by using the unsubscribe mechanism provided or contacting us at:

hello@doublecast.ai
 

14. Your Data Protection Rights

Subject to applicable law, you may have rights including:

  • the right to be informed;

  • the right of access;

  • the right to rectification;

  • the right to erasure;

  • the right to restrict processing;

  • the right to data portability;

  • the right to object;

  • rights relating to automated decision-making and profiling where applicable; and

  • the right to withdraw consent where processing relies on consent.

These rights are not absolute and certain legal exceptions may apply.
 

15. Withdrawing Consent

Where we rely on consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect processing that took place lawfully before withdrawal.

Where Digital Twin creation or licensing is also governed by a separate contractual agreement, withdrawal of data-processing consent and termination of contractual rights may have different legal consequences. The relevant agreement should therefore be reviewed alongside this Privacy Policy.
 

16. Requests

To exercise your data protection rights or ask questions about our processing, contact:

hello@doublecast.ai

We may need to verify your identity before responding to a request.

We aim to respond within the period required by applicable data protection law.
 

17. Complaints

If you have concerns about our use of personal information, please contact us first at:

hello@doublecast.ai
 

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)

We encourage individuals to contact us first so that we have an opportunity to investigate and resolve the issue.
 

18. Children's Information

Our services are primarily intended for adults and professional talent.

We do not knowingly collect Digital Twin biometric or performance information from children without appropriate parental or legal-authority involvement and a lawful basis for doing so.
 

If you believe a child has provided personal information to us improperly, please contact us at hello@doublecast.ai.
 

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or data-processing practices.
 

The latest version will be published on:

www.doublecast.ai
 

The “Last updated” date at the beginning of this Privacy Policy will indicate when the document was most recently updated.
 

20. Contact Details

Doublecast Ltd, known as [Doublecast AI Twin Studio]
London–Richmond, United Kingdom
Email: hello@doublecast.ai
Website: www.doublecast.ai

bottom of page