Law Enforcement and Data Requests

Send requests to contact@artistover.com with the word legal in the subject line, or by post to Artistover Limited, 167-169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom.

A request must come from an official email address or on official letterhead, and must identify the officer or official making it, their organisation, and a way to verify them independently.

We cannot act on a request that does not tell us what is actually needed.

A request for all data on a user, with no date range and no stated purpose, is not proportionate and we will ask for it to be narrowed.

Subscriber and account data is disclosed where there is a valid legal basis, which in the United Kingdom will usually be a request under data protection law for the prevention or detection of crime, or a court order.

Content data, including the contents of messages, requires a court order, a warrant, or an equivalent legal instrument. We do not release message content on an informal request.

Requests from outside the United Kingdom should come through a mutual legal assistance treaty or an equivalent recognised route, unless there is a valid basis for a direct request.

Where there is a risk of death or serious physical harm to a person, we will respond immediately and disclose what is needed to address the emergency, without waiting for a formal order.

Mark the request as an emergency, describe the nature and immediacy of the risk, and give a direct contact. We may verify the request before acting, and we will do that quickly.

Our default is to tell a user before we disclose their data, so they have the chance to object. That is their right, not a courtesy.

We will not tell them where we are legally prohibited from doing so, where a court has ordered otherwise, where there is a clear risk of harm to a person, or where notice would defeat an investigation into a serious crime and the requesting authority has said so in writing.

Where notice is delayed by a prohibition, we tell the user once the prohibition ends.

We will not give bulk access to user data, provide direct access to our systems, run open-ended searches across the platform, or hand over data on a request that does not identify its legal basis.

We will not disclose more than the request covers, and we will push back on a request that is overbroad, vague or disproportionate.

We will not preserve or disclose data on an informal approach where the law requires a formal instrument.

We will preserve specified data for 90 days on a valid preservation request while a formal instrument is obtained, and we will extend that once on request.

Preservation is not disclosure. Preserved data is only released against a valid legal instrument.

We may charge a reasonable fee for the cost of responding to a large or complex request, where the law allows it.

We keep a record of every request we receive, what we disclosed, and the legal basis for it.