Data Disclosure Policy

From Bittylicious
Jump to navigation Jump to search

Bittylicious and Data Disclosure

Bittylicious Ltd is registered with the UK Information Commissioner's Office and is fully committed to handling customer data legally and responsibly. If you are a law enforcement or other UK authority and seek to request information from us, please read the following first to ensure that your request is dealt with as promptly and effectively as possible.

Bittylicious Ltd cooperates with UK authorities, and we are mindful of our legal obligations regarding data under UK law. Requests for information from legally sanctioned UK authorities and which satisfy the Data Protection Act 2018 (DPA) requirements will be dealt with as quickly and fully as possible. However, we will not entertain speculative, incomplete, legally dubious or vague requests for information, as this is in breach of our legal obligations.

Please note that confirming the existence or activites of a customer is in itself a disclosure of customer data. We will not confirm the existence of any account or transaction unless we are also ready to disclose all relevant information pertaining to it.

Making a Successful Request with Bittylicious

So that we can best deal with any formal and legally sound request for information, please consider the following:

  1. Provide as many identifying data points as possible to enable us to identify a customer correctly. This might be a name, phone number, date of birth, postcode, specific account activity, etc.
  2. Blockchain analysis-based information alone is not sufficient for us to reliably identify the correct customer data. Any such information must therefore be accompanied by other types of identifying information. More information on this below.
  3. Only send us sensitive customer information in an encrypted format. We can assist you in setting this up. Never send sensitive information insecurely (e.g. e-mailing a password).
  4. Provide information about the investigation, e.g. the crime, arrests, pending trials, links to a specific enquiry, and an explanation as to why the information is being sought.
  5. Let us know if any of the information will be shared directly or indirectly with law enforcement or government of a foreign state.
  6. Tell us if the customer has explicitly consented to the disclosure of data, as this simplifies the procedure.

Court Orders

If you cannot meet the requirements above, you may need to obtain a judge-signed, UK court order. In some cases, this may be the only way we can discharge our legal responsibilities under the DPA while providing you with the information you require. We are keen to cooperate, and are committed to doing so in a legally compliant way.

Witness Statements

We have provided regular witness statements, signed and sent by post, where needed in the course of an investigation. However, in the unlikely event that anyone from Bittylicious is called to testify as an expert witness, we can only point to exhibits. We do not offer theories or provide expert opinions as a matter of policy.

Blockchain Analysis

When you use blockchain analysis in your investigation, you are relying on a proprietary algorithm by a business to make a best guess. Depending on which company's website you are using, you may get different results. Just because blockseer, walletexplorer or chainalysis claims an address belongs to Bittylicious, it isn't necessarily so. When you follow the path of coins, any unknown address in the chain of transactions may belong to a shared wallet, which means the transaction you see is almost guaranteed to involve two random people not actually connected to the source address in any way. Shared wallets (such as Bittylicious and most other marketplaces and exchanges) have one common bitcoin wallet where funds are pooled and only the operators of these websites know which address belongs to whom. We welcome enquiries and will do our best to help, but please handle any leads from blockchain analysis with caution. Blockchain analysis software is provided by private companies to paying customers, and their claims of reliability should be taken with a pinch of salt.