Last updated: 2024/10/2
These guidelines (“Guidelines”) are intended for UK law enforcement officials seeking access to user data held by Loong Sails-UK Limited. Loong Sails is committed to cooperating with lawful requests for data while respecting the privacy rights of our customers as outlined in the UK Data Protection Act 2018 and General Data Protection Regulation (GDPR).
Loong Sails’ response to law enforcement requests is governed by applicable legal standards and our commitment to uphold privacy and human rights principles.
1. Basic Requirements
To comply with UK legal processes, all requests must meet the following criteria:
- Proper Addressing: Requests should be sent to the relevant legal department at Loong Sails-UK Limited.
- Official Documentation: Law enforcement requests must be accompanied by appropriate legal documentation, such as a court order or warrant, issued under UK law.
- Clear Scope: The request must clearly specify the scope of data required, the legal basis for the request, and the specific individual or account being investigated.
- Language: All requests must be in English and submitted with supporting legal documents.
2. Types of User Data
The types of user data that may be subject to valid law enforcement requests include:
| Data Type | Examples |
|---|---|
| Customer Information | Name, email address, phone number, and shipping address |
| Transaction Data | Purchase history, payment details, and associated invoices |
| Interaction Data | Website interactions, order history, device information |
Requests for certain types of data, such as content data, may require additional legal justification (e.g., a judicial warrant).
3. Requirements for Making a Request
To ensure the efficient handling of requests, law enforcement must provide:
- Details of the Requesting Authority: Include the full name, location, and contact information of the requesting law enforcement agency or court.
- Identification of Officer: Include the officer’s full name, badge or identification number, and official contact details (including an official government email address).
- Specific User Account Information: Include identifying details such as the customer’s email address, order ID, or other relevant account identifiers.
- Data Requested: The request must clearly outline the specific data sought and its relevance to the investigation. Vague or overly broad requests may be denied.
- Legal Basis: Clearly specify the legal framework under which the request is made, referencing relevant sections of the Investigatory Powers Act 2016, Data Protection Act 2018, or other applicable UK legislation.
- Date Range: Specify the time frame for the data being requested, particularly for transaction and interaction logs.
4. User Notification
As a general rule, Loong Sails-UK Limited will notify customers when their data is requested by law enforcement, unless:
- Notification is prohibited by law.
- It would compromise an ongoing investigation.
- It poses a risk of serious harm to individuals or public safety.
The responsibility for ensuring that user notification is delayed or prohibited must be clearly indicated in the law enforcement request, supported by the relevant legal provisions.
5. Data Preservation Requests
Loong Sails will comply with formal requests to preserve specific user data for up to 90 days, to allow time for law enforcement to obtain the necessary legal documentation. Requests for data preservation must:
- Be on official letterhead and signed by an authorized officer.
- Clearly identify the data to be preserved, including specific account identifiers, the data type, and the relevant time frame.
Law enforcement may request a single extension for an additional 90 days. If no legal request is received by the end of the preservation period, the preserved data may be deleted.
6. Emergency Requests
In cases where there is an immediate threat to life or risk of serious physical harm, Loong Sails will handle emergency requests for data with urgency. Such requests must come from a sworn law enforcement officer and provide:
- Clear details of the nature of the emergency.
- The specific user data required to mitigate the threat.
Emergency requests must be sent through official law enforcement channels. Non-law enforcement personnel aware of an emergency should contact their local authorities.
7. Handling Law Enforcement Requests
Loong Sails reserves the right to request that law enforcement officials pursue requests through the Mutual Legal Assistance Treaty (MLAT) process when necessary. This may apply in cases where international cooperation is required for the exchange of user data.
Each request is handled individually, ensuring compliance with both the Data Protection Act 2018 and international human rights obligations.
8. Costs and Reimbursement
Loong Sails reserves the right to seek reimbursement for costs associated with responding to law enforcement data requests, particularly when significant resources are required to fulfill the request. The amount of reimbursement will depend on the complexity and scope of the data sought.
LOONG SAILS-UK LIMITED 