Government Requests Policy

When 11291785 Canada Inc. receives a request from a public authority for user personal data, we apply the following process:

1. Legality review. We assess every request against applicable law (Canadian PIPEDA / PIPA, GDPR where applicable) and our terms of service. Requests are not actioned until legality is confirmed, with counsel where appropriate.
2. Right to challenge. Where a request is overbroad, malformed, or unlawful, we challenge it through counsel or the courts before disclosing any data.
3. Data minimization. We disclose only the specific data fields strictly required to comply with a lawful request. Bulk or speculative disclosures are refused.
4. Documentation. Each request and our response are logged, including the requesting authority, legal basis, scope, data disclosed, and personnel involved. Records are retained for 7 years.

Where not legally prohibited, we notify affected users of disclosures.