Privacy notice.

Last updated 18 August 2026

1.Who we are

The Model Atelier, of Colombo, Sri Lanka, is the data controller for the personal information described in this notice. That means we decide what is collected and why, and we are responsible for looking after it.

2.What we collect

If you send a booking inquiry we collect your name, your company and the brand you represent, your email address, your phone number if you give one, and the details of the project you describe: title, shoot type, dates, location, hours, number of models needed, where the content will run, usage duration, exclusivity, and any models you shortlisted.

If you apply to join the board we collect your first and last name, email address, phone number, date of birth, the board you are applying to, country of residence, height, preferred contact method, your Instagram handle if you give one, and the three photographs you upload.

In both cases we record the IP address the submission came from and the time it arrived, as evidence the submission was genuinely made and to protect the forms from abuse.

We do not collect payment details through this site. We do not buy personal data, and we do not enrich what you give us with data from anywhere else.

3.Why we use it, and on what basis

We use inquiry data to reply to you, prepare a quote, and keep a record of the commercial conversation. Our basis for this is our legitimate interest in running the agency and, once you engage us, the performance of our contract with you.

We use application data solely to assess your application for representation. Our basis for this is the consent you give when you tick the boxes on the application form. You can withdraw that consent whenever you like, and withdrawing it does not make anything we did beforehand unlawful.

We do not use your information for automated decision-making or profiling.

4.How we protect it

The database enforces access rules at the row level, so the public site can only ever read the records that are meant to be public — a visitor cannot reach an inquiry, an application, or an unpublished model profile, whatever they type into the address bar.

Application photographs are held in private storage, not on the public site. When our booking team needs to look at them, access is granted through links that expire after 30 days. Your photographs are never published, sold, or shown to clients unless you are signed to the board and we have agreed that with you.

5.How long we keep it

Booking inquiries are kept for as long as we have a commercial relationship with you, and afterwards for as long as we are required to retain business records.

Applications that do not lead to representation, and the photographs attached to them, are kept only while we are actively considering them and are then deleted. If you would like yours removed sooner, ask us and we will do it.

6.Who else is involved

We use a small number of service providers to run this site. Each acts only on our instructions and holds your data solely to provide their service to us:

• Supabase — our database and file storage. Our data is hosted in Singapore.
• Vercel — serves the website itself.
• Resend — delivers the confirmation email you receive and the notification we receive.
• Sentry — reports technical errors so we can fix them. These reports are diagnostic and are not used to profile you.

Because these providers operate internationally, your information may be processed outside Sri Lanka. We share nothing with anyone else, except where the law requires it or where it is necessary to establish or defend a legal claim. We do not sell your data.

7.Your rights

You can ask us for a copy of what we hold about you, ask us to correct it if it is wrong, ask us to delete it, ask us to limit what we do with it, object to our using it, and ask us to send it to you or to someone else in a portable form. Where we rely on your consent, you can withdraw it at any time.

Write to info@themodelatelier.com and we will act on your request. We do not charge for this, and we will respond within one month.

8.If something goes wrong

If a breach occurs that puts your rights or freedoms at risk, we will tell you and the appropriate authority without undue delay. If you are unhappy with how we have handled your information, tell us first — we would rather fix it — but you are entitled to complain to the data protection authority in your country.

9.Applicants under 18

If you are under 18, a parent or legal guardian must complete the application on your behalf and give consent for us to process your information. If we discover that we have received an application from a minor without that consent, we delete it.

10.Cookies and tracking

This site sets no advertising cookies and runs no third-party analytics or tracking scripts. That is why you are not being asked to dismiss a cookie banner.

When you shortlist models, that shortlist is held in your own browser's session storage so it survives as you move between pages. It is cleared when you close the tab, and it never reaches us unless you actually submit an inquiry. One session cookie is used by staff signing in to the private admin area, which is not part of the public site.

11.Changes to this notice

If we change how we handle your information we will update this page and revise the date at the top of it.

12.Contact

Any question about this notice, or any request under section 7, should go to info@themodelatelier.com. Our terms of use cover the rest of your relationship with this site.