Privacy Policy

Last Updated: March 2026

Introduction

Lacuna ("we," "us," or "our") is committed to protecting your privacy and ensuring you have a positive experience on our website and in our client relationships. This Privacy Policy explains our practices regarding the collection, use, and protection of your information.

1. Information We Collect

We collect information that you provide directly to us:

• Contact Information: When you submit our contact form, we collect your name, email address, phone number, and message content.
• Client Information: For clients engaging our services, we collect information necessary to provide legal advice, including documents, correspondence, and business information relevant to your matter.
• Website Usage: We use cookies and analytics to understand how you interact with our website.

2. How We Use Your Information

We use collected information for the following purposes:

• Responding to your inquiries and providing requested legal services
• Communicating about your engagement with Lacuna
• Maintaining compliance with legal and regulatory obligations
• Improving our website and services
• Analytics and website optimization

3. Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: When you provide information through our contact form
• Contract: When you are a client, processing is necessary to provide legal services
• Legitimate Interests: For website optimization and service improvement
• Legal Obligation: When required by Hong Kong law or regulation

4. Data Retention

We retain personal information for the following periods:

• Inquiry Data: Retained for 12 months after your inquiry
• Client Data: Retained for 7 years after engagement conclusion, as required by Hong Kong professional standards
• Website Analytics: Retained in aggregated form indefinitely

5. Data Protection and Security

We maintain reasonable security measures to protect your information from unauthorized access, alteration, or disclosure. These include:

• Secure server infrastructure and encrypted communications
• Limited access to personal information on a need-to-know basis
• Regular security assessments and updates
• Compliance with Hong Kong's Personal Data Privacy Ordinance (PDPO)

6. Third-Party Services

We may share information with third parties in the following circumstances:

• Service Providers: We may engage third parties to assist with website hosting, email delivery, and analytics
• Legal Requirements: When required by law or regulatory authorities
• Co-Advisers: For client matters, we may share information with other professional advisers (with your consent)

7. Your Rights

Under Hong Kong's Personal Data Privacy Ordinance, you have the following rights:

• Right of Access: You may request access to personal data we hold about you
• Right of Correction: You may request correction of inaccurate data
• Right of Erasure: You may request deletion of your data in certain circumstances
• Right to Object: You may object to processing of your data
• Right to Data Portability: You may request your data in a portable format

To exercise these rights, please contact us at the address below.

8. Cookies

Our website uses cookies to enhance your experience. These include:

• Essential Cookies: Required for website functionality and security
• Analytics Cookies: Help us understand how you use our website
• Marketing Cookies: Used to personalize advertising and content
• Preference Cookies: Remember your settings and preferences

You can manage your cookie preferences through your browser settings or our cookie policy page.

9. Complaints and Escalation

If you believe we have mishandled your personal data or violated your privacy rights, you may lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong. You can also contact us directly to discuss your concerns.

10. Policy Changes

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the "Last Updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

12. Additional Information

Data Controller: Lacuna is the data controller for information collected through our website and services.

Jurisdiction: This Privacy Policy is governed by the laws of Hong Kong, including the Personal Data Privacy Ordinance.

International Data Transfers: Some of our service providers may be located outside Hong Kong. We ensure any such transfers comply with Hong Kong privacy law.