Last updated 7 September 2026

Requests for your data

underway holds a founder’s face, voice and an honest account of their work. Sometimes a police force, a court or a regulator asks a company for data like that. This page says what we do when one asks us, so you know before it happens rather than after.

The short version

  • We disclose only under a valid legal process.
  • We read every request against the law it relies on before we act.
  • We push back on requests that are unlawful, vague or wider than they need to be.
  • We hand over the least that satisfies the request, never a whole archive.
  • We tell you, before disclosure where we can, unless the law forbids it.
  • We record every request and publish the count below.

What we hold, and what we do not

Most footage never reaches us. Recordings stay on your device unless you turn sync on, and sync holds only what you asked it to. What we can hold is described in the privacy policy: your account details, and, with sync on, your sessions, transcripts and renders. If we do not hold what is asked for, we say so, and we do not go looking on your device, because we cannot.

What a request has to be

We act on a written request that comes from an authority with the legal power to make it, states the law or court order it relies on, identifies the account concerned, and says exactly which data it wants and why. In the United Kingdom that means a court order, a warrant, or a statutory request that a named authority is entitled to make. We do not act on a phone call, an email with no legal basis, or a request from a private party who is not a public authority.

An authority outside the United Kingdom does not get data from us directly. It has to come through a UK court or the mutual-legal-assistance route, or through the UK arrangement that applies to it. A foreign order on its own is not enough.

The one exception is an emergency. If we reasonably believe that someone’s life or physical safety is at imminent risk and disclosing a specific piece of data would help prevent it, we may disclose that piece before the paperwork arrives. When we do, we record who asked, what we believed, what we gave and why, and we still expect the formal request to follow.

How we review a request

  1. A director reads it in full and checks that it is from who it says it is, cites a real legal basis, and asks for something we actually hold.
  2. We take legal advice where the basis or the scope is not clear. A request is not answered on a deadline it set itself if that deadline leaves no time to check it.
  3. A request that is unlawful, that we are not obliged to answer, or that asks for more than the stated purpose needs is refused, or answered only to the extent the law requires. If refusing is not open to us, we ask the court or the authority to narrow it, and we challenge it through the proper channel where we believe it is wrong.
  4. What we disclose is the minimum that meets the request: specific records for a named account and period, not exports of everything, and footage only when the order names footage.

Telling you

We tell you that your data has been requested before we disclose it, so that you can object yourself, unless the law or the order prohibits it, or telling you would put someone at risk. Where we are prohibited, we tell you as soon as the prohibition ends. We do not promise silence to anyone.

The record we keep

Every request, however it arrives and whatever we decide, goes in a register: who asked, on what basis, what they wanted, what we decided, who advised, what was disclosed, and when you were told. The register is kept for six years. The totals on this page come from it and are updated whenever it changes.

Received
0
Disclosed
0
Refused or narrowed
0
Accounts affected
0

Counted since 7 September 2026.

Other requests

This page is about public authorities. Someone claiming a recording infringes their rights, or a founder asking for their own data, is handled under the terms and the privacy policy. Our processors, and what each of them can see, are on subprocessors; a request that reaches one of them about our data is referred to us.

Where to send one

Personal Works Ltd (PERSONAL WORKS LTD), company number 14013912, registered in England and Wales. Registered office: 32 Frayne Road, Bristol, England, BS3 1RU. Requests go to rich@personalworks.co or by post to the registered office, marked for the attention of the director. Written by Richard Lovatt.