Legal
Last updated: August 2026
This policy explains how Eland Technologies("Esset", "we", "us", or "our") reviews and responds to requests from government agencies, law enforcement, regulators, courts, or other public authorities for the personal data or personal information of our users, customers, and their end customers that we process. It applies to all such requests, regardless of the channel or jurisdiction from which they originate, including any personal data we receive through third-party platforms such as the WhatsApp Business Platform (Meta). It should be read together with our Privacy Policy and Terms & Conditions.
This policy covers formal and informal requests from any public authority — including police, security or intelligence agencies, regulators, tax authorities, and courts — seeking access to personal data that we hold as a data controller or process on behalf of our customers as a data processor. It does not change the rights described in our Privacy Policy; it explains the safeguards we apply whenever such a request is received.
Where a request concerns personal data that we process on behalf of a customer (for example, tenant or resident data that a customer has entered into the Platform), that customer is the data controller. Unless we are legally compelled to respond directly and prohibited from notifying them, we refer the authority to the relevant customer and/or notify that customer so that they can respond as the controller.
We review every request for legal validity before responding. We confirm that it originates from a competent authority, cites a proper legal basis, and is served through valid legal process. We do not disclose personal data in response to a request that is not legally valid, and we require requests to be made in writing wherever the circumstances allow.
Where disclosure is legally required, we disclose only the minimum personal data necessary to satisfy the specific, lawful scope of the request. We do not provide bulk data, and we do not disclose information that falls outside the scope of the request.
Where a request appears unlawful, overbroad, vague, or lacking proper legal authority, we may seek clarification, ask that its scope be narrowed, or challenge or reject it through appropriate legal channels before any disclosure is made.
We document each request and our handling of it — including the requesting authority, the legal basis cited, the data requested, our response, the legal reasoning applied, and the personnel involved — and we retain these records.
Where permitted by law, and where not prohibited by the request or a valid legal order, we endeavour to notify affected users of a request for their personal data so that they may seek to protect their rights.
All public-authority data requests must be escalated immediately to Esset's designated data-protection contact (reachable at [email protected]), who is responsible for reviewing and responding to them under this policy. No employee or contractor may disclose personal data to a public authority outside this process.
In genuine emergencies involving an imminent risk to life or safety, we may expedite our review while still applying the legality and data-minimisation principles above to the extent practicable. We document the basis for any expedited handling.
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the date of the most recent revision.
For any question about this policy, or to serve a request, contact us at [email protected] or message us on WhatsApp at +92 339 9990959.
Eland Technologies — Registered in Pakistan. This policy was last reviewed and updated in August 2026. The current version is always available at esset.io/government-data-requests.