Information for law enforcement
How to serve legal process on Mizan, and — more usefully for most requests — what data exists here at all.
Serving process
Send valid legal process to the registered address on the contact page, and a copy to the contact address so it is not delayed by post. Please identify the account by member code or email address, state the legal basis, and give a point of contact. We respond to properly issued process from a jurisdiction that has authority over us; we do not disclose member data on an informal request.
What we do not have
This section is usually the most useful one. Mizan holds no identity documents and no verification photographs — there is no field anywhere in the system that could store them, and the third-party verification provider holds them instead. We hold no raw analysis prompts. We hold no payment card numbers; the payment provider does. A request for any of these has to go to the provider concerned, not to us.
What we do have
Account records, the profile and preference information a member entered, assessment answers, records of introductions and their outcomes, and an append-only log of privileged and administrative actions. The privacy page states how long each category is kept. Data past its retention period is deleted by a scheduled process and cannot be recovered for a later request.
Preservation requests
When we receive a formal written preservation request from a law-enforcement agency, we preserve the records we hold for the identified account for a standard period of 90 days, and for a further 90 days if the request is renewed in writing before the first period ends. Preserved records are protected from scheduled deletion and from deletion of the account, only the people handling the request can access them, and we disclose them only on valid legal process. Preserving records is not disclosing them, so a preservation request on its own does not trigger notice to the member. We can preserve only what still exists when the request arrives.
Accounts that have been deleted
When a member deletes their account the data is removed rather than hidden, and what remains is a minimal record that the deletion happened and when — with no name, no address, and no reference back to the person. We cannot produce the contents of a deleted account, and preservation requests can only be honoured if they reach us before the deletion.
Telling the member
Our practice is to notify a member when their data is requested, so they can seek their own advice, unless we are legally prohibited from doing so or there is a credible risk to someone's safety. If you need notice delayed, say so and give the legal basis.
Child sexual abuse and exploitation
We have zero tolerance for child sexual abuse material (CSAM) and for the sexual exploitation of children. When we become aware of either on Mizan, we do not wait to be asked: we report it to the National Center for Missing & Exploited Children (NCMEC) through its CyberTipline, as US law requires, and to the local police or child-safeguarding authority where a child may be at risk. We suspend the account immediately and preserve the evidence — the account, the material and our report — for at least one year after the report, as federal law requires. Only the people handling the report can access it, and we never copy or forward the material, including internally. When requesting that evidence, please cite the CyberTipline report number.
Emergencies
Where there is a risk of death or serious physical harm, mark the request urgent in the subject line and send it to both addresses on the contact page. We will act on a good-faith emergency request without waiting for formal process.