Privacy
The short version: this site has no scripts, no cookies and no trackers. The only personal information we hold is an email address, and only if you gave us one.
Reading the site
We do not run analytics scripts, advertising tags or tracking pixels. The site loads no third-party resources at all: the fonts are served from our own domain rather than from Google, so no other company receives your IP address because you read something here.
We set no cookies, which is why you have never seen a cookie banner on this site.
Our host, Cloudflare, processes requests to serve pages and keeps standard server logs, which include IP addresses, for security and aggregate traffic counts. We use those only to know roughly how many people visited. See Cloudflare's privacy policy.
Every page is sent with Referrer-Policy: no-referrer. When you click through to a ministry site, a gazette entry or a Hansard record, that site is not told you came from here. Reading about a law should not tell anyone which law you were reading about.
The newsletter
If you subscribe, we collect your email address and nothing else. No name, no location, no demographics. It is used to send you explainers and for nothing else.
The list is held by Buttondown, our email provider, which processes it on our behalf. See Buttondown's privacy policy.
Open and click tracking are switched off. We do not record whether you opened an email or which links you followed. This is a deliberate choice and it matches the no-referrer position above. It means our own numbers are less detailed than they could be, which is a trade we are content with.
Our lawful basis is your consent, given when you enter your address. You can withdraw it at any time using the unsubscribe link at the bottom of every email, which removes you immediately and needs no explanation to us. To have your address deleted outright rather than unsubscribed, or to ask what we hold, write to record@pointofordermy.com.
What we never do
- Sell, rent or share your email address with anyone
- Send you advertising, or anyone else's mail
- Build a profile of you, or attempt to identify individual readers
- Ask for your name, phone number, address or any identity document
Your rights
Under UK GDPR and Malaysia's Personal Data Protection Act 2010 you can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Since the most we hold is an email address, this is usually a short conversation. Write to record@pointofordermy.com and we will reply.
If you are unhappy with how we handled a request, you can complain to the UK Information Commissioner's Office at ico.org.uk.
Changes
If this policy changes materially we will say so here with a date rather than editing it quietly, the same way we handle corrections.
Last updated 10 August 2026.