This Privacy Policy explains how Point Spoon processes personal data in connection with its website and related communications. It applies to visitors, prospective clients, and other individuals who interact with the site.
Where GDPR applies, we process personal data on a lawful basis such as consent, performance of a contract, compliance with legal obligations, legitimate interests, or another basis permitted by law. The applicable basis depends on the context of the processing and the relationship with the user.
Where GDPR applies, you may have rights to access, rectify, erase, restrict, object, and request portability of your personal data. If processing is based on consent, you may withdraw consent for future processing. Some requests may be limited where retention or disclosure is required by law or necessary to establish, exercise, or defend legal claims.
Subject to applicable law, you may have rights to access your data, correct inaccurate information, request deletion, object to certain processing, or ask for restriction of processing. Where processing is based on legitimate interests, you may object on grounds relating to your situation. These rights are not absolute and may be limited by legal obligations or the rights of others.
To help us process a rights request, please provide enough information to identify the relevant data and confirm your identity where needed. We may ask for additional details before acting on a request. If we cannot comply in full, we will explain the reason to the extent permitted by law.
Retention periods depend on the type of data, the reason for processing, and any legal or contractual obligations. When data is no longer needed, we delete it, anonymize it, or archive it where retention is required. Some records may be kept longer to manage disputes, compliance, or security matters.
When we update this policy, we will post the revised version on the site and adjust the effective date where appropriate. If a change materially affects how we process personal data, we will take reasonable steps to draw attention to it.
We may process identification details, contact details, message content, service-related information, technical identifiers, and usage data. In a legal services context, this may also include information you choose to provide about your business, requests, or matters you want to discuss.
We receive data when you complete forms, send messages, or otherwise interact with the site. We also collect certain technical data automatically, such as device information, browser data, and interaction records. Where relevant, we may derive limited information from your use of the site to maintain security and improve functionality.
The site may use essential cookies to enable basic functions, functional cookies to remember choices, and analytics cookies to understand how the site is used. Cookies may be session-based or persistent, depending on their purpose. We do not rely on cookies for purposes that are not described in this policy.
You may block or delete cookies through your browser settings. If the site provides a cookie preference tool, you can use it to manage non-essential cookies. Limiting cookies may affect some site functions, including form handling or preference storage.
We use personal data to operate and maintain the site, respond to inquiries, manage communications, improve performance, monitor security, prevent misuse, comply with legal obligations, and keep records needed for administration and dispute handling. Where required, we also use data to support the provision of legal services or to assess whether a request can be handled.
We may disclose personal data to hosting, security, analytics, communications, and other operational providers that support the site. These parties act under instructions or contractual arrangements and are expected to use the data only for the services they provide. We may also share information in connection with a business reorganization or similar transaction, subject to applicable safeguards.
We may share personal data with courts, regulators, law enforcement, or other public bodies when disclosure is required by law, necessary to respond to a lawful request, or needed to protect our rights, users, or the security of the site.
