Version: 1.8
Date of Last Update: March 14, 2025
1. PURPOSE
This Public Authority Data Request Policy (the “Policy”) establishes clear guidelines and protocols for EZ Sweeps Inc. (hereinafter, “we,” “us,” or “our”) when responding to official requests from public authorities seeking personal data or personal information pertaining to our users (hereinafter, “you” or “your”). This Policy ensures that all such requests are handled lawfully, ethically, and in line with our dedication to data protection and user privacy, as illustrated in our Terms and Conditions, Privacy Policy, GDPR Consent Notice, and other applicable policies.
2. SCOPE
This Policy binds all employees, contractors, and representatives of EZ Sweeps Inc. who may receive, process, or respond to data inquiries from public authorities. It applies to all personal data collected, stored, and processed by us through our platform, https://www.ezsweeps247.com.
3. DEFINITIONS
Public Authorities: Encompasses government entities, law enforcement agencies, regulatory bodies, courts, or any official institution empowered to demand personal data under the law.
Personal Data: Any information regarding an identified or identifiable individual, as interpreted by applicable data protection laws. This may include name, address, date of birth, email, phone number, or any other data gathered during registration or account administration.
Data Minimization: The principle of limiting data disclosure exclusively to what is strictly necessary to meet a particular request.
4. POLICY STATEMENT
We at EZ Sweeps Inc. are committed to safeguarding our users’ privacy and personal data. Upon receiving a public authority request for personal data, we adhere to:
Legality – We confirm that each request is legally valid under prevailing regulations before proceeding.
Data Minimization – We release only that portion of personal data essential to fulfill the request.
Transparency and Documentation – We record every request comprehensively, along with our response rationale and the identity of the requesting authority.
5. PROCEDURES FOR HANDLING DATA REQUESTS
5.1. Receipt of Request
Authorized Channels: All requests from public authorities must come via formal, secure means (e.g., subpoenas, court orders, or secure electronic transmissions).
Immediate Notification: Once a request is received, the recipient must immediately inform the Data Protection Officer (DPO) or the designated compliance officer.
5.2. Verification of Legality
Assess Validity: The DPO or compliance officer evaluates the legitimacy and legal basis of the request, confirming that it falls under the relevant jurisdiction and authority.
Legal Consultation: If the request’s legitimacy is questionable, we seek legal counsel to ascertain the appropriate course of action.
5.3. Data Minimization
Identify Necessary Data: Determine the minimum required dataset essential to comply. Avoid disclosing any info beyond what is explicitly requested.
Review Data: Conduct a thorough check to ensure only relevant data is released.
5.4. Response to Request
Timely Compliance: We respond within the timeframe imposed by the requesting authority, provided the request is confirmed legal and valid.
Secure Transmission: Transfer the data securely, preventing unauthorized access or breaches.
Confirmation: If applicable, supply confirmation to the requesting authority upon delivery of the data.
6. DOCUMENTATION AND RECORD-KEEPING
6.1. Record of Requests
We maintain detailed records for each request, including:
Date and Time – The moment we received the request,
Requesting Authority – The authority’s name and contact info,
Nature of Request – Precisely which data is sought and the legal foundation,
Response Details – The method and timing of compliance and the data furnished.
6.2. Legal Justification
Documentation of Legality: We record the legal grounds and justifications for complying with (or declining) the request, referencing pertinent statutes and regulations.
Internal Review: All decisions concerning data requests undergo an internal review to preserve accountability and transparency.
6.3. Retention of Records
Duration: Keep records of data requests/responses for at least 7 years or as mandated by law—whichever period is longer.
Secure Storage: Safely archive all documentation to guard against unauthorized access, modification, or destruction.
7. TRAINING AND AWARENESS
Employee Training: We provide routine training to employees and contractors on this Policy, core data protection standards, and proper protocols for handling public authority data requests.
Updates and Refreshers: We offer periodic updates and refreshers so everyone remains informed of evolving regulations or internal processes.
8. COMPLIANCE AND AUDIT
Internal Audits: We conduct regular internal audits to check compliance with this Policy and to pinpoint areas where improvement is needed.
Non-Compliance: Any detected non-compliance is addressed swiftly, and suitable corrective actions are implemented to prevent a recurrence.
9. CONTACT INFORMATION
For questions, concerns, or to report a data request from a public authority, please reach out to our Data Protection Officer:
Data Protection Officer
EZ Sweeps Inc.
500 Shatto Pl, Suite 420
Los Angeles, CA 90020
Email: [email protected]
Phone: (213) 263-9898
10. REVIEW AND AMENDMENTS
Regular Review: This Policy is assessed annually (or as circumstances require) to ensure it remains compliant with all relevant laws and reflects industry-leading practices.
Amendments: Any Policy modifications are relayed to applicable stakeholders and updated on the Platform in a timely manner.
End of Public Authority Data Request Policy.
(© 2025 EZ Sweeps, Inc. All rights reserved.)
