Legal and data requests

Every channel on Intersink has a legal request form at its own address, /legal/request, and the business that runs the channel receives it with a due date. For Intersink itself, use the form on our own site or write to [email protected].

Requests about a channel’s customers (for example a copy of your order data) go to that channel’s business, which is the controller. Requests about Intersink accounts, security or the platform as a whole come to us.

• You can ask for a copy of your data, to correct it, to delete it, to restrict or object to its use, and to take it elsewhere.
• Under UK and EU GDPR the answer is due within one month, extendable by two months for complex requests (we tell you within the first month). Under US state laws, within 45 days, extendable once by 45 days.
• We may ask you to confirm your identity first; the deadline starts when we can. Requests are free unless manifestly unfounded or excessive.
• If a request is refused, you get the reason and how to complain to the regulator.

Svayam Incarnation Limited is a UK company. We disclose data only in response to valid legal process from an authority with jurisdiction, limited to what the request lawfully covers. We review every request and push back on requests that are unclear, too broad or lack a legal basis.

• UK: orders and notices under the Investigatory Powers Act 2016, the Police and Criminal Evidence Act 1984, the Crime (Overseas Production Orders) Act 2019 and other UK law.
• United States: legal process under the Stored Communications Act and the CLOUD Act, including through the UK–US Data Access Agreement where it applies; otherwise through a Mutual Legal Assistance request to the UK.
• EU and other countries: through Mutual Legal Assistance or another route recognised by UK law, or directly where an applicable international agreement allows it.

We can preserve data for 90 days (renewable once) on a written request while legal process is obtained.

If there is a good-faith belief that an emergency involves danger of death or serious physical injury, we may disclose limited information without legal process, to the extent needed to deal with it, and record why.

We tell the account or business before disclosing their data, so they can challenge the request, unless the law forbids it, a court orders otherwise, or telling them would create a risk of harm or defeat an emergency. If we were prevented from telling them, we do so when the restriction ends.

Requests to remove content for infringing copyright or trademarks follow the copyright and trademark process. Requests to remove content as illegal are handled under the enforcement policy, with a statement of reasons to the person affected.

Our annual transparency report lists the number of requests by country and type, how many we answered in full or in part, and how many we refused.