Law Enforcement Information Requests

1. Overview

These guidelines explain how [[LEGAL ENTITY NAME]], [[ENTITY TYPE AND PLACE OF REGISTRATION]], responds to requests for user information from law enforcement and government agencies. We disclose information only where we are required to do so by valid legal process, or where UK data protection law permits disclosure and we consider it appropriate in the circumstances.

2. Requests from UK Authorities

UK law enforcement and public authorities should use the legal process available to them under UK law, for example:

• A court order or a production order (for example under the Police and Criminal Evidence Act 1984) for account records and stored content.
• A notice validly issued under the Investigatory Powers Act 2016, where that regime applies.
• A request relying on the crime and taxation exemption in the Data Protection Act 2018. We are not obliged to comply with such voluntary requests and assess them case by case; we will generally limit any voluntary disclosure to basic account information and require a clear explanation of why the information is necessary.

3. Requests from Non-UK Authorities

Authorities outside the United Kingdom should submit requests through a Mutual Legal Assistance Treaty with the United Kingdom or a letter rogatory, unless another lawful route applies. Requests from United States authorities may also be made under the UK-US Data Access Agreement where its conditions are met. We may answer questions about whether an account exists, or preserve data under Section 5 below, while a formal request is in progress.

4. Request Requirements

All requests must include the following information:

• The name of the requesting agency.
• The name and badge or identification number of the requesting officer.
• An official government email address.
• A direct telephone number, including extension.
• A physical mailing address (post-office boxes are not accepted).
• The specific accounts, records, or time periods requested, as narrowly as possible.
• A requested response date that allows reasonable time to respond.

Requests should be sent to legal@shoplink.gg with the subject line "Information Request - Law Enforcement".

5. Data Preservation

On a valid preservation request from a law enforcement agency, Shoplink will preserve available records for 90 days, and will extend the preservation once for an additional 90 days (up to 180 days total) on a renewed request. Preservation does not disclose the preserved records; disclosure requires the legal process described above.

6. User Notice

Shoplink may notify affected users or merchants of a request for their information before disclosure, unless we are prohibited from doing so by law or by the terms of the legal process, or we believe notice would create a risk of harm or would compromise an active investigation into serious wrongdoing such as child exploitation or fraud.

7. Emergency Requests

In emergencies involving a good-faith belief of imminent risk of death or serious physical injury to any person, Shoplink may disclose information on a case-by-case basis, as permitted by UK data protection law. Emergency requests should be sent to legal@shoplink.gg with the subject line "Emergency Disclosure Request" and should explain the nature of the emergency and why the information requested would help address it.

8. Cost Reimbursement

Shoplink may seek reimbursement for the costs of responding to a request to the extent permitted by law.