Define roles and authority
For case evidence, the accepted service agreement must identify the submitting organisation, contracting provider, responsible examiner and the parties’ data-protection roles. A separate processing agreement may be required. A website privacy notice for business enquiries does not replace those arrangements or a legal basis for handling evidence.
Use an approved transfer route
Keep source files, client identifiers, access credentials and confidential case content out of general enquiry messages. Agree the transfer method, authorised recipients and sensitivity restrictions first. Identify originals and derivatives, record acquisition context and source hashes, and retain independent originals and backups.
Document the processing instructions
- Evidence categories, sensitivity and authorised examination purpose.
- Permitted methods, quality checks, references and human review.
- Storage and access locations, service providers and cross-border transfers.
- Access permissions, confidentiality and incident communication.
- Retention, export, deletion, backups and lawful preservation holds.
No universal hosting-region, at-rest encryption, retention period or recovery guarantee is represented by this website. Require specific commitments in the accepted agreement.
Limit reuse and disclosure
Case content must be used only within documented authority and agreed service purposes. General model training, advertising, publication or unrelated reuse requires separate documented permission and a lawful basis. Disclosures to courts, regulators or law enforcement must follow applicable legal process and agreed handling rules, with notice where legally permitted. Confidentiality does not authorise obstruction of a lawful order.
Retention, deletion and incidents
Agree a schedule that accounts for the engagement, applicable evidence rules, client instructions and legal holds. Deletion must not destroy material that must lawfully be retained. Backup treatment, restoration and export conditions belong in the service agreement. Report a suspected handling issue promptly through the agreed contact route without attaching further evidence to the public form.
Limits cannot replace required safeguards
The platform terms allocate contractual risk only to their lawful extent. They do not remove mandatory data-protection duties or a person’s statutory rights. Check the agreed safeguards before deciding whether the service is appropriate for sensitive evidence.