Legal & Privacy
Privacy Policy
This policy explains what personal data we collect, why we use it, how we protect it, and the rights available to users.
Last updated: September 2026
Who We Are and Scope
This policy explains how MLAMH handles personal data when users access the website, accounts, talent profiles, opportunities, managed casting, support, and related services.
MLAMH operates from Saudi Arabia. Privacy and personal-data inquiries may be sent to hello@mlamh.net or through the support center.
Personal Data We Collect
We may collect account data such as name, email address, phone number, sign-in method, and account status.
For talent, this may include professional name, photo, city, nationality, date of birth, gender, professional information, skills, experience, measurements, portfolio, and professional links submitted by the user.
For organizations and publishers, this may include organization name, contact details, professional information, opportunities, and casting briefs they submit.
We may collect technical and operational data such as IP address, device and browser information, sign-in and usage logs, security data, and platform events required to operate and protect the service.
Where paid services are available, we may process transaction-related information such as transaction reference, status, and amount. Sensitive card data is handled by the applicable payment provider, and users should not send card details to support.
Purposes of Processing
We use personal data to create and manage accounts, authenticate access, operate talent and organization profiles, publish opportunities, receive applications, and enable service-related communication and features.
We also use data to review profiles, organizations, and opportunities; operate managed casting; provide support; send operational notices; prevent fraud and misuse; improve security and performance; and comply with applicable legal obligations.
We do not use personal data for a new purpose incompatible with the original collection purpose unless an appropriate legal basis, notice, or consent applies.
Legal Basis and Consent
Processing is based on the appropriate legal basis for the activity, which may include providing the requested service or contractual relationship, user consent where required, compliance with legal obligations, or permitted legitimate interests.
Where processing relies on consent, users may withdraw that consent in accordance with applicable rules without affecting processing that was lawfully completed before withdrawal.
Public and Restricted Talent Data
Some talent-profile data may be visible publicly when the profile is published, such as professional name, photo, city, and basic professional information.
Content and links classified by MLAMH as restricted are not made public and are only available to authorized roles under the platform's access rules, such as the profile owner, admins, or an eligible publisher where applicable.
Users should not place sensitive or confidential information in fields intended for public display.
Sharing and Service Providers
We do not sell users' personal data.
We may share the minimum data needed with a party involved in the service, for example making application information available to the publisher or managing a candidate shortlist for a casting service.
We may use providers for hosting, storage, authentication, email, notifications, analytics, payments, and security, with processing limited to the required purpose and subject to applicable legal and contractual safeguards.
We may disclose data where required by law, court order, or a valid request from a competent authority.
Processing or Transfer Outside Saudi Arabia
Some technology services may use infrastructure or providers outside Saudi Arabia. Where this results in cross-border transfer or processing of personal data, MLAMH handles the transfer in accordance with applicable Saudi cross-border data-transfer requirements.
Retention and Destruction
We retain personal data for as long as necessary to fulfill the collection purpose and operate the account or service, then delete, destroy, or de-identify it when no longer needed unless a legal requirement, rights-protection need, or dispute requires longer retention.
Retention periods vary by data type, account status, record type, and the relevant operational or legal purpose.
Security and Data Accuracy
We use reasonable technical and organizational safeguards to protect personal data against unauthorized access, loss, alteration, or misuse.
We take steps to keep data relevant to its purpose accurate and current and provide account-update tools or correction channels where available.
Users are responsible for protecting their sign-in method and must not share passwords or access codes with others.
Data Subject Rights
Under Saudi Personal Data Protection Law and applicable regulations, data-subject rights may include the right to be informed of the legal basis and purpose of collection, access personal data, request a readable copy, request correction/completion/update, and request destruction when the data is no longer needed, subject to legal rules and exceptions.
Rights requests may be submitted through the support center or hello@mlamh.net. We may verify the requester's identity before acting and process requests within applicable legal requirements and timelines.
Notifications and Direct Marketing
We may send service-essential notices such as verification, security, application, and review-status messages.
Where contact data is used for direct marketing that requires consent or an opt-out, MLAMH handles it under applicable requirements and provides an appropriate unsubscribe mechanism where required.
Cookies and Similar Technologies
We may use cookies and similar technologies to operate sessions, remember preferences, measure performance, and improve security.
Users may control some of these technologies through browser settings. Blocking essential cookies may affect sign-in or other platform functions.
Minors
Where a user's age or legal capacity requires parental or guardian authorization, the required authorization must be obtained before using the service or submitting data under applicable law.
If we learn that a minor's data was collected in a manner not permitted by law, we take appropriate steps to handle or delete it in accordance with applicable requirements.
Policy Updates
We may update this policy as services or operational or legal requirements change. The updated version and date will be published here, with additional notice where legally required or appropriate for material changes.
Privacy and Data Requests
Use the support center for access, correction, deletion, or other personal-data inquiries.
