1. Scope
This policy applies to requests from courts, law-enforcement bodies, regulators, intelligence or national-security authorities, government departments, and other public authorities for personal data processed through Varada Nexus websites, EMS, Nexus Social, connected platforms, and business services.
2. Legality review
Before disclosure, we verify the requester's identity and authority, the authenticity and legal basis of the request, jurisdiction, binding effect, required approvals and procedure, scope, affected accounts, data categories, time period, and any confidentiality restriction. Informal, voluntary, ambiguous, defective, or unsupported requests do not result in disclosure.
3. Challenging unlawful requests
Where legally available, we seek clarification, request narrowing, object to, or challenge requests that lack valid authority, are procedurally defective, exceed jurisdiction, are disproportionate, conflict with privacy or confidentiality duties, or seek data outside the stated lawful purpose. We may escalate a request to management or qualified external legal counsel and pursue available administrative or judicial remedies.
4. Data minimisation
When disclosure is legally required, we provide only the minimum responsive data covered by the valid request. We narrow the relevant account, person, field, event, and date range; exclude or redact unrelated information; protect credentials and privileged material; verify the recipient; and use secure transmission.
5. Documentation and accountability
We maintain a restricted record of each request, including the requesting authority, jurisdiction, legal basis, affected data, review outcome, challenges, approvals, minimisation steps, final decision, exact data disclosed, recipient, delivery method, notification restrictions, and closure. Access is limited to authorised management, privacy, legal, security, and audit personnel.
6. Emergency and national-security requests
An asserted emergency does not bypass verification. We document the claimed imminent risk, legal basis, requester's identity, necessity, and minimum responsive data. National-security requests are subject to the same legality, challenge, minimisation, and documentation controls, subject to binding applicable law.
7. Notice and confidentiality
We notify affected persons before disclosure when legally permitted and operationally safe. Any binding non-disclosure restriction and its duration are documented and reviewed. Notice may be given when the restriction expires unless law continues to prohibit it.
8. Transparency statement
As confirmed by management on 29 July 2026, Varada Nexus Private Limited did not provide Meta user personal data to public authorities for national-security purposes during the preceding 12 months.
9. Contact
Public authorities and privacy enquiries may contact the Varada Nexus Privacy and Legal Function at varadanexus@gmail.com. Requests must identify the requesting body, responsible official, legal authority, affected account or identifier, data sought, and relevant period.