1. Introduction
This page provides guidance for law enforcement agencies and government authorities seeking information or action from RDPCore in connection with criminal investigations or legal proceedings.
This page is provided for informational purposes only and does not create any contractual or legal obligation on RDPCore to respond to or fulfil any request. All requests are assessed on a case-by-case basis and subject to applicable law.
We respect the privacy of our customers and will only disclose information in response to valid legal process. We also recognise our obligation to cooperate with lawful investigations and to protect public safety. We do not actively monitor customer content or communications except as required to maintain service integrity and security.
2. Jurisdiction
RDPCORE DC LTD is incorporated in England and Wales (Company Number 16328522). We are subject to UK law, including:
- UK Data Protection Act 2018 and UK GDPR;
- Investigatory Powers Act 2016;
- Crime and Courts Act 2013;
- Police and Criminal Evidence Act 1984 (PACE);
- Regulation of Investigatory Powers Act 2000 (RIPA);
- Computer Misuse Act 1990.
For requests from outside the UK, we will consider whether the request can be processed under applicable mutual legal assistance treaties (MLATs), the UK-US Data Access Agreement, or other international cooperation frameworks. We may require requests from non-UK authorities to be channelled through appropriate UK legal mechanisms. We reserve the right to refuse requests from foreign authorities that do not comply with UK legal process requirements.
3. What We Can Provide
Depending on the legal basis and scope of the request, we may be able to provide:
- Subscriber information: Name, email address, billing address, phone number, payment method details (last four digits only), account creation date.
- Service information: Services purchased, IP addresses allocated, service activation and termination dates.
- Traffic data: Connection logs, login timestamps, IP addresses used to access the account (subject to retention periods).
- Content data: Data stored on customer servers (only with a valid warrant or court order issued by a court of competent jurisdiction).
3.1 Data Retention Limitations
Our ability to provide data is limited by our retention policies. Server access logs are typically retained for ninety (90) days. Account and billing records are retained for six (6) years. We do not retain data beyond our standard retention periods for the purpose of law enforcement unless subject to a valid preservation request. We do not guarantee that any specific data will be available at the time of request.
4. Requirements for Requests
4.1 Valid Legal Process
We require valid legal process appropriate to the type of data requested:
- Subscriber and service information: A formal written request on official letterhead from a law enforcement agency, citing the legal authority for the request.
- Traffic data: A court order, production order, or equivalent legal instrument authorising disclosure.
- Content data: A warrant issued by a court of competent jurisdiction, or equivalent legal authority.
4.2 Request Format
All requests should include:
- The identity and authority of the requesting officer or agency;
- The legal basis for the request (statute, court order reference, etc.);
- A clear description of the information sought;
- Identifiers to locate the relevant account (IP address, email, domain, customer ID);
- Relevant dates and timeframes;
- Contact details for the requesting officer.
4.3 Submission
Law enforcement requests should be submitted to:
- Email: legal@rdpcore.com
- Post: RDPCORE DC LTD, Legal Department, 102 Rookery Court, 80 Ruckholt Road, Mainyard Studios, Office C05 G1095, London, E10 5FA, United Kingdom
We do not accept requests via telephone. All requests must be in writing.
5. Preservation Requests
We will honour valid preservation requests from law enforcement agencies. A preservation request asks us to retain specific account data that might otherwise be deleted under our normal retention schedule.
Preservation requests should specify the account(s) to be preserved, the data types, and the duration of preservation (typically ninety days, renewable). We will preserve the data pending receipt of formal legal process.
Preservation does not require us to disclose any data. Disclosure requires separate valid legal process as described in Section 4.
6. Emergency Disclosure
In emergency situations involving imminent risk of death or serious physical injury, we may voluntarily disclose information to law enforcement without a court order, in accordance with the UK Data Protection Act 2018 (Section 34(3)) and equivalent provisions.
Emergency requests must clearly articulate the nature of the emergency and the specific information needed. We will assess each request on its merits and may decline if the emergency is not substantiated. Such disclosures are limited to what is strictly necessary to address the emergency.
7. Customer Notification
Where we are legally permitted to do so, we will notify the affected customer of a law enforcement request before or after complying with it. However, we will not provide notification where:
- We are prohibited from doing so by law, court order, or non-disclosure requirement;
- Notification would endanger the life or safety of any person;
- Notification would prejudice an ongoing investigation;
- The request relates to national security matters.
Where notification is initially prohibited, we will notify the customer when the restriction is lifted, where practicable.
8. Challenging Requests
We will review all requests for legal validity and scope. We may challenge or refuse requests that:
- Are overly broad or lack specificity;
- Do not cite adequate legal authority;
- Appear to be invalid, informal, or not properly authorised;
- Request data we do not hold or cannot reasonably provide;
- Conflict with UK law or our legal obligations (e.g., requests from foreign authorities without proper MLAT process).
Where we challenge a request, we will inform the requesting authority of the basis for our objection and, where possible, suggest how the request may be corrected.
9. Costs
We may charge reasonable costs for processing complex or voluminous requests, including administrative and technical costs, in accordance with applicable law. We will inform the requesting authority of any applicable charges before processing. We do not guarantee response times for law enforcement requests.
10. Transparency
We may publish aggregate statistics on the number and type of law enforcement requests received, where permitted by law. We will not disclose details that could identify specific investigations or customers.
11. Non-Law Enforcement Requests
This page is for law enforcement and government authorities only. If you are a private individual or company seeking information about a customer (e.g., for civil litigation), please consult your legal advisor about obtaining a court order. We do not disclose customer information in response to private requests without valid legal process. We will not respond to informal or non-legal requests for customer data.