Government and law enforcement requests for user data
FASCAVE IT SOLUTIONS PRIVATE LIMITED holds data belonging to the businesses that use our platform and to the customers who message them. We treat every request from a public authority for that data as an exception, not a routine, and we handle it as set out below.
1. Requests must be in writing
We act only on a request received in writing, on the official letterhead of the authority, signed by an identified officer, and stating the legal provision relied on. We do not act on a request made by telephone, in person or by unverified email. Urgent requests may be received by email, but we verify them directly with the issuing office before we respond.
2. We review whether the request is lawful
Every request is reviewed by a director of FASCAVE IT SOLUTIONS PRIVATE LIMITED before any data is disclosed. We check that the authority has jurisdiction over us, that the provision relied on actually authorises the demand, that the request is specific about the accounts and the period concerned, and that it has been issued by an officer competent to issue it. Where the request concerns data we hold on behalf of a business customer, we treat that customer as the data controller.
3. We challenge requests that are unlawful or too broad
If a request is not legally valid, is wider than the law permits, or asks for data unrelated to the matter stated, we refuse it in writing and set out our reasons. Where the law allows, we seek clarification or a narrowed request first. If the authority maintains an overbroad demand, we take legal advice and, where appropriate, challenge it before the competent court. We do not disclose data merely because an authority has asked.
4. We disclose the minimum necessary
We disclose only the specific fields required to answer the request, for the specific accounts and the specific period named in it. We do not provide bulk exports, full database extracts, or message content where identifying account details would be sufficient. Where the request can be answered with subscriber details alone, we do not disclose message content.
5. We tell the affected business where we can
Unless we are prohibited by law or a court order from doing so, we notify the business whose data is requested, so that they may seek their own legal advice. Where we are prohibited from notifying them immediately, we do so as soon as the prohibition ends.
6. We document every request
We maintain a register of every request received from a public authority. For each one we record the date received, the authority and officer, the legal provision relied on, the accounts and period concerned, the review carried out and by whom, whether the request was complied with, refused or challenged, the reasoning for that decision, and exactly what data was disclosed and when. The register is retained for a minimum of five years.
7. Contact
Requests from public authorities should be addressed in writing to FASCAVE IT SOLUTIONS PRIVATE LIMITED at contact@fascave.com, marked "Law enforcement request". This page does not constitute a waiver of any objection, and nothing in it obliges us to disclose data that the law does not require us to disclose.