Last updated 16 October 2026. These protocols describe manual handling of official requests; they do not give agencies direct access to Veya accounts.
1. Who this is for
UK police and other authorised law enforcement agencies requesting information about Veya accounts.
2. How to submit a request
Email lawenforcement@veyadate.com from an official agency email address. Please include:
- The requesting officer's name
- Badge or warrant number
- Agency
- Official contact details, agency postal address, case reference and a callback number
- The account details: email address, display name or profile link
- The exact records requested, date range, purpose, legal basis and requested deadline
- A signed request and complete copy of any warrant, court order or other legal process; include any legally binding non-disclosure requirement
3. What we require
Valid legal process under UK law (for example a court order or production order), or an authorised request under the Data Protection Act 2018. We review every request and only disclose what the law requires.
4. Receipt and verification
Requests are handled manually by Veya Connect Ltd. The reviewer records receipt, the case reference and scope, and acknowledges the request using verified agency contact details. An acknowledgement is not agreement to disclose data.
Before disclosure, the reviewer verifies the officer's identity, agency and authority. We independently check agency contact information and may call the agency through its publicly listed number; an email address or badge number alone is not sufficient. We check signatures, issuing authority, jurisdiction, account identifiers, date ranges and the validity and scope of the legal process. Incomplete or unverifiable requests are returned for clarification; no data is disclosed merely because a request has been received.
5. Assessment and response
We assess the lawful basis, necessity and proportionality of each request and obtain legal advice where needed. A data-protection exemption alone does not compel disclosure. Overbroad, invalid or unsupported requests may be narrowed, challenged or declined. Overseas agencies must provide process recognised under applicable UK law or use the appropriate international legal cooperation procedure.
After authorisation, we identify records actually held, limit the response to the authorised accounts, period and data categories, and document the decision. We agree a secure transfer method with the verified agency rather than sending sensitive records to an unverified address. We record what was disclosed, to whom, when and under what authority. If records are unavailable, or more time or clarification is needed, we inform the agency. We do not guarantee that any particular record exists.
6. Emergency requests
If there is an immediate risk of death or serious harm, mark the email "EMERGENCY". We review these as a priority and may disclose limited information to prevent harm. Include the nature and immediacy of the danger, who is at risk, the relevant account identifiers, the specific data needed, why it is necessary to prevent harm and an officer available for callback. We verify agency identity and assess whether an applicable lawful emergency disclosure basis exists; an emergency label does not automatically authorise disclosure. We document the decision and limit any disclosure to what is necessary. This mailbox is not an emergency service and we cannot guarantee continuous monitoring: call 999 for an immediate UK emergency.
7. What we may hold
Account and profile details, sign-in records, messages, reports and moderation records, kept in line with our Privacy Policy.
8. User notice
We may notify the user about a request unless the law prohibits it or doing so would put someone at risk.
9. Preservation requests
A verified preservation request must identify the accounts, records, date range, case reference and legal basis. We can preserve specified data already held for 90 days while legal process is obtained, subject to applicable law, and confirm the scope and expiry to the agency. Preservation is not disclosure, does not restore deleted data and does not authorise future monitoring. Submit any extension request before expiry; we review it separately. We maintain a record of the preservation decision and release the hold at expiry unless a lawful extension or other retention obligation applies.