Privacy Policy

1. Introduction

Larkpoint ("we", "us", "our") is committed to handling personal data with care and in accordance with applicable Malaysian law. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it.

This policy applies to all individuals who interact with Larkpoint through our website, contact forms, or in the course of legal engagements. For questions, contact us at privacy@larkpoint.

2. Personal Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, telephone number
• Matter information: description of your insurance matter or legal question
• Correspondence: emails, letters, and communications with us
• Website usage data: pages visited, browser type, device type, IP address (via cookies)
• Payment information: billing details for professional services (processed securely)

We collect this data when you submit our contact form, contact us directly by email or phone, or engage our services formally. We collect website usage data automatically when you visit our site.

3. Legal Basis for Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), we process your personal data on the following grounds:

• Consent: When you submit a contact form or agree to our cookie policy
• Contract: Where we are engaged to provide legal services to you
• Legitimate interests: For operating our website and communicating with enquirers
• Legal obligation: Where required by Malaysian law, including legal professional obligations

4. How We Use Personal Data

We use personal data for the following purposes:

• Responding to enquiries and initial consultation requests
• Delivering legal advisory and representation services
• Managing billing and engagement administration
• Complying with legal professional obligations, including file retention requirements
• Improving the functionality and content of our website
• Communicating updates relevant to your matter

5. Data Sharing

We do not sell personal data. We may share data in the following circumstances:

• With barristers, experts, or other professionals engaged in connection with your matter — with your knowledge
• With courts, tribunals, or regulatory bodies where required by law or for proceedings
• With our website hosting and IT service providers, who process data on our behalf under appropriate agreements
• With analytics providers (such as Google Analytics) in pseudonymised form

6. Data Retention

We retain personal data for the following periods:

• Enquiry data (no engagement follows): up to 12 months from last contact
• Client matter files: 7 years from the conclusion of the matter, in line with Malaysian legal professional requirements
• Website analytics data: up to 26 months in pseudonymised form

7. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data, including:

• Secure, password-protected file systems for client matter documents
• Encrypted email where sensitive matter information is communicated
• Access to client data limited to personnel directly involved in the matter
• Regular review of data handling procedures

8. Cookies

Our website uses cookies to support functionality and analyse usage. You can manage your cookie preferences via our Cookie Policy page. Essential cookies are necessary for the website to function and cannot be disabled.

9. Your Rights

Under the Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete personal data
• Withdraw consent to processing based on consent (this does not affect prior processing)
• Request that we cease processing your data for direct marketing purposes
• Request information about how your data is used

To exercise any of these rights, please contact us at privacy@larkpoint. We will respond within 21 days.

10. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of those sites and recommend you review their policies independently.

11. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, please contact us so we can remove it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted on this page with a revised "Last Updated" date. Continued use of our website or services after any change constitutes acceptance of the updated policy.

13. Contact

Data Controller: Larkpoint

Address: 38 Lorong Kuda, 50470 Kuala Lumpur, Malaysia

Privacy enquiries: privacy@larkpoint