Privacy Policy

1. Introduction

Narcissieré ("we", "us", "our") is a model and talent agency based in Malaysia. This Privacy Policy explains how we collect, use, disclose and protect personal data of models and talent, clients and brands, website visitors and other business contacts.

We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia. By using our website or providing your personal data to us, you agree to the practices described in this Privacy Policy.

2. Personal data we collect

We may collect and process the following categories of personal data:

• Identification data: name, date of birth, nationality, passport/ID details (where required for bookings or travel).
• Contact details: email address, phone number, postal address, emergency contact.
• Model / talent profile data: physical details (height, measurements, shoe size, hair/eye colour), digitals, test shoots and portfolio images, showreels, video castings, social media handles, follower statistics and public profile links.
• Professional information: experience, bookings, show history, campaigns, editorial work, agency representation and references.
• Client data: company name, contact person, business email and phone, billing details.
• Technical data (website usage): IP address, device information, browser type, language, pages viewed, time and date of visits, referral URLs, cookies and similar technologies.
• Other data you voluntarily provide when you contact us, submit applications or attend castings.

Where required, certain personal data may be mandatory for us to consider you for representation, process bookings or comply with legal obligations. If you choose not to provide such data, we may not be able to proceed.

3. How we use your personal data

We use personal data for the following purposes:

• Model / talent representation: assessing applications and suitability, creating and maintaining profiles, promoting you to clients and partners.
• Bookings and client services: responding to briefs, sending packages and suggestions, negotiating and administering bookings, arranging travel and logistics where required, invoicing and payments.
• Communications: responding to enquiries, sending information about castings, options and confirmations, notifying about changes to our terms, policies or services.
• Website operation and improvement: operating and securing our website, analysing usage, improving layout, content and performance, preventing abuse or unauthorised access.
• Legal and compliance: complying with applicable laws and regulations (including PDPA), handling disputes, claims or investigations, enforcing our agreements and protecting our legitimate interests.

We process personal data on the basis of your consent, contractual necessity, legal obligations and our legitimate interests, as permitted under Malaysian law.

4. Legal basis for processing

Under the Personal Data Protection Act 2010 (PDPA), we process personal data where:

• you have given your consent;
• processing is necessary to perform a contract with you, or to take steps at your request before entering into a contract;
• processing is necessary to comply with a legal obligation;
• processing is necessary for our legitimate interests (such as promoting our talent, operating and securing the website, and managing our business), provided these are not overridden by your rights and interests.

5. How we share personal data

We may share personal data with the following categories of recipients:

• Clients and partners: brands, production companies, magazines, casting directors and other third parties involved in casting, booking or production processes.
• Service providers: IT hosting and website providers, payment processors, accounting services and professional advisors where necessary.
• Other group or partner agencies: where we collaborate on international placement, scouting or co‑representation.
• Authorities and regulators: where required by law, court order or to protect our rights or the safety of individuals.

6. International transfers

Our clients, partners and service providers may be located outside Malaysia. Where personal data is transferred abroad, we will take reasonable steps to ensure that the receiving parties provide a level of protection comparable to that under the PDPA or that appropriate safeguards are in place.

7. Cookies and tracking technologies

Our website may use cookies and similar technologies to remember your preferences, measure traffic and usage patterns, and improve performance and security.

You can control cookies through your browser settings. If you disable some cookies, certain features of the website may not function optimally. If we use third‑party analytics or embedded content, these providers may set their own cookies in accordance with their privacy policies.

8. How long we keep your data

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including for as long as you are represented by us or in active discussions, for periods required by applicable laws (such as tax and accounting retention), and for a reasonable period after representation or last contact to handle potential queries, disputes or legal claims. When data is no longer needed, we will delete, anonymise or securely store it in accordance with our retention procedures.

9. Your rights (under Malaysian PDPA)

Subject to applicable law, you may have the following rights:

• Right to access: request confirmation whether we hold personal data about you and obtain a copy.
• Right to correction: request that inaccurate or incomplete data be corrected or updated.
• Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time (this will not affect processing prior to withdrawal).
• Right to object / limit: object to certain processing or request that we limit use of your data, where permitted by law.

To exercise your rights, please contact us using the details in the Contact section below. We may need to verify your identity and, in some cases, may be permitted to charge a reasonable fee or refuse requests in accordance with PDPA.

10. Children and minors

We do not knowingly collect personal data from individuals under the age of 18 without the consent and involvement of a parent or legal guardian. Where we represent or consider representing a minor, we require a parent or legal guardian to provide consent and, where appropriate, written verification before any personal data or images are processed. If you believe we have collected data from a minor without proper consent, please contact us so we can take appropriate action.

11. Security

We take reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration or destruction. However, no system is completely secure, and transmission of data over the internet is at your own risk.

12. Complaints

If you have a concern about how we handle your personal data, please contact us first using the details below and we will do our best to resolve it. You also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia (Jabatan Perlindungan Data Peribadi), which oversees compliance with the PDPA.

13. Contact us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Narcissieré Management Sdn. Bhd.

Email: fff822622@gmail.com

Phone: +60 3-XXXX XXXX

Address: Kuala Lumpur, Malaysia

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do so, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically to stay informed about how we handle personal data.