Government Data Request Policy

This policy describes how Vetzilla handles requests from public authorities — courts, law enforcement agencies, regulators, and national-security bodies — for personal data processed through the platform. This includes data belonging to veterinary clinics, their staff, their clients, and data received from third-party platforms such as Meta/WhatsApp.

Inside the application (app.vetzilla.net), Vetzilla acts as a data processor on behalf of each clinic, which is the data controller of its own clients' and patients' data. Where legally permitted, we notify the affected clinic and redirect the request to it, since the clinic is best positioned to respond as the data owner.

Every government request is reviewed before any data is disclosed. We verify:

• The authenticity of the request and the identity of the requesting authority.
• The competence of the authority to make the request.
• The legal basis invoked.
• That the request is supported by a valid legal instrument (e.g. a court order or equivalent binding process).
• That the request is specific and targeted — not a bulk or unrestricted request for data.

Requests that lack a valid legal basis are rejected.

Vetzilla will not disclose data in response to a request it considers unlawful, overbroad, or lacking a valid legal basis. Where appropriate, we use the legal remedies available to us to challenge such requests.

When a request is found to be valid, we disclose only the minimum data strictly required to satisfy it. Vetzilla does not grant bulk or unrestricted access to any authority, and it does not build or maintain backdoors into the platform.

Where legally permitted, we notify the affected clinic or user before disclosing their data, so they have the opportunity to seek their own legal remedies.

Every request is logged, recording:

• The requesting authority and the date of the request.
• The data requested.
• The legal basis invoked.
• Our internal assessment of the request.
• The response given and the data disclosed, if any.
• The people involved in handling the request.

These records are kept confidential and retained in accordance with applicable law.

In an emergency, Vetzilla may disclose limited data without prior notice, but only when we have a good-faith belief that doing so is necessary to prevent an imminent risk of death or serious physical harm. Any such disclosure is documented afterward under the process described in Section 6.

As of the last update, Vetzilla has not received any national-security request for personal data.

Public authorities may send requests to [email protected].