Last updated: 25th of August, 2026
I’m Maggie, and this is the plain-English version of what happens to your information when you visit this website, join my email list, or get in touch. I’ve tried to write it the way I’d explain it to you in person rather than the way a legal template would. Where I’ve had to be precise, it’s because the law requires it.
1. Who we are and how to reach us
This website and the products and services offered through it are operated byLiving to Roam Pty Ltd, ABN 72660200671, of 33 Judd St, Richmond, VIC, Australia. Under privacy law, that makes us the “data controller” for the information described in this policy.
For anything to do with your privacy, including asking what information we hold about you, correcting it, or asking us to delete it, email hello@maggiestara.com. We’ll respond within 30 days.
Businesses of our size are generally exempt from the Australian Privacy Act 1988 (Cth), but we have chosen to handle personal information in line with the Australian Privacy Principles anyway. Where you’re in the European Union or the United Kingdom, we also comply with the GDPR and UK GDPR, and this policy is written to meet those requirements.
2. What information we collect
Information you give us directly:
- Your name and email address when you subscribe to our email list or download a freebie.
- The answers you give in our free Personalised Marketing Plan tool.
- Your name, email address and message when you use our contact form.
- Your name and email address if you book a mentoring session, along with any details you share about your business.
- Your name and email address if you leave a comment on a blog post.
Information collected automatically when you visit:
- Your IP address, browser type and version, operating system, device type, screen size and language settings.
- Which pages you view, how long you spend on them, what you click, and which website or link sent you here.
- The date and time of your visit.
We do not collect sensitive information such as health data, financial account details or government identifiers, and we do not ask for them.
3. Cookies and tracking
A cookie is a small file a website stores in your browser so it can recognise you on your next visit or measure how the site is being used.
When you first arrive, you’ll see a consent banner that lets you accept or reject cookies by category. Only cookies that are strictly necessary for the website to work are set before you choose. Analytics and marketing cookies do not load unless you consent to them.
You can change your mind at any time. Use the cookie settings link at the bottom of every page to update or withdraw your consent, and no more than a click or two is needed to reject everything.
The categories we use are:
- Necessary. Required for the site to function, such as remembering your consent choice. These cannot be switched off.
- Preferences. Remember choices you’ve made so the site behaves the way you expect.
- Statistics. Help us understand which content is useful and where people get stuck.
- Marketing. Used to measure and target advertising.
A full, automatically updated list of every cookie this website sets, what it does and how long it lasts, appears below.
If you’d rather not rely on our banner, you can also set your browser to refuse cookies entirely, though some parts of the site may not work properly if you do.
4. Why we use your information, and our legal basis for it
Under the GDPR we have to tell you not just what we do with your information but what entitles us to do it. Here’s the honest breakdown:
- To send you our newsletter and marketing emails. Legal basis: your consent, which you give by actively subscribing and can withdraw at any time.
- To deliver something you asked for, such as a freebie, a marketing plan, or a mentoring session you’ve booked. Legal basis: performance of a contract with you, or steps taken at your request before entering one.
- To reply to your enquiry when you use the contact form. Legal basis: our legitimate interest in responding to people who contact us.
- To understand how the website is used so we can improve it. Legal basis: your consent, through the statistics category in our cookie banner.
- To measure and improve our advertising. Legal basis: your consent, through the marketing category in our cookie banner.
- To keep the website secure and prevent spam and fraud. Legal basis: our legitimate interest in protecting the site and the people who use it.
- To meet our legal and tax obligations. Legal basis: compliance with a legal obligation.
If we ever want to use your information for a purpose that isn’t described here, we’ll update this policy first, and where the law requires it, we’ll ask your permission before we do.
5. Our email list
We use Flodesk to manage our email list and send our newsletter. You’ll only ever be added because you asked to be. We don’t buy lists, and consent boxes are never pre-ticked.
When you subscribe, Flodesk stores your email address, your name if you gave it, which form or page you subscribed from, and your IP address and approximate location at the time you signed up.
Our emails include tracking that tells us whether an email was opened and which links were clicked. We use this to work out which topics are actually useful and to stop emailing people who’ve clearly lost interest. It isn’t used to build a profile of you for advertising.
Every email has an unsubscribe link at the bottom. One click stops all marketing email, and the only thing you’ll receive afterwards is a confirmation that it worked.
Flodesk stores this information on servers in the United States. See section 9 for how that transfer is protected.
6. Advertising and social media tracking
We use the Meta Pixel, which covers Facebook and Instagram, and Google Ads conversion tracking and remarketing tags on this website.
These tools set cookies and collect information including your IP address, your browser and device details, the pages you view, and actions you take such as signing up for a freebie. This happens whether or not you are logged in to a Facebook, Instagram or Google account, and we’ve said so plainly here because it’s a point a lot of privacy policies get wrong.
We use this information to measure whether our advertising is working and to show relevant ads to people who have already visited the site. Because this is advertising rather than an essential website function, these tags only load if you consent to marketing cookies. If you reject them, they don’t run.
We do not upload your email address or any other list of personal information to Meta or Google to build custom audiences.
Meta and Google process the information they collect as independent controllers under their own privacy policies, which you can read at facebook.com/about/privacy and policies.google.com/privacy. You can also control the ads you see directly in your Facebook, Instagram and Google account settings.
We also use Metricool to measure how our social media content performs and how much traffic it sends to this website.
7. Our free Personalised Marketing Plan tool
Our Personalised Marketing Plan is a free tool that asks you a series of questions about your business and generates a marketing plan based on your answers.
Your answers are processed in order to produce your plan, and part of that process uses a third-party AI model to generate the wording. Your answers are not used to train AI models, are not sold, and are not shared with advertisers. If you give us your email address so we can send you the plan, that address is added to our email list under section 5, and you can unsubscribe at any time.
The plan is a starting point for your own thinking. It isn’t professional advice, and nothing it produces affects your legal rights, your access to any service, or anything else that would count as a significant decision about you.
8. Courses and mentoring
Our courses are currently hosted on Skillshare and Udemy. When you enrol in one of them, you are creating a relationship with that platform, not with us. They collect your details, take your payment, and handle your account under their own privacy policies. We only see limited information they choose to share with us, such as your student username and any questions or assignments you post inside the course. We never see your payment details.
9. Who we share your information with
We don’t sell, rent or trade your personal information. We do use a small number of service providers to run the business, and each one only receives what it needs to do its job:
- Our website host and WordPress plugins, which store website and comment data.
- Flodesk, our email marketing platform.
- Google, for Google Analytics, Google Tag Manager and Google Ads.
- Meta, for the Facebook and Instagram advertising pixel.
- Metricool, for social media and website traffic analytics.
- Cookiebot, which runs our consent banner and records your cookie choices.
- Akismet, which filters spam from blog comments.
- YouTube, when a video is embedded in a page you visit.
- Our AI provider, for the Personalised Marketing Plan tool.
We may also disclose information where the law requires it, or where it’s necessary to protect our rights or someone’s safety.
Information leaving Australia. Most of these providers store data in the United States, and some use servers elsewhere. Where information about people in the European Union or United Kingdom is transferred, it is protected by Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. We take reasonable steps to make sure every provider we use handles your information consistently with this policy.
10. How long we keep your information
- Email subscribers: for as long as you’re subscribed, plus 12 months after you unsubscribe so we can make sure your unsubscribe request is honoured.
- Contact form enquiries: 24 months.
- Mentoring clients: for the duration of our work together, plus 7 years, because Australian tax law requires us to keep financial records for that long.
- Website analytics: [14 months], in line with our Google Analytics retention setting.
- Blog comments and their metadata: indefinitely, so conversation threads stay readable. Tell us if you want yours removed and we will.
11. How we keep your information secure
This website runs over HTTPS with an SSL certificate. Accounts are protected with strong, unique passwords and two-factor authentication where the platform offers it. We don’t keep personal information on portable devices or unencrypted drives, and we only give access to people who need it.
No system is perfectly secure. If a data breach happens that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as soon as practicable, in line with the Notifiable Data Breaches scheme. Where the GDPR applies, we will notify the relevant supervisory authority within 72 hours.
12. Your rights
Whatever country you’re in, you can ask us to:
- Tell you what we hold about you and why.
- Correct anything that’s wrong or incomplete.
- Delete your information, where we don’t have a legal reason to keep it.
- Send you a copy in a portable format, or send it to someone else.
- Stop or limit how we use it.
- Object to us using it, including for direct marketing, which you can stop at any time.
- Withdraw your consent at any time, for anything we do on the basis of consent. This doesn’t make anything we did beforehand unlawful.
To exercise any of these, email hello@maggiestara.com. We’ll respond within 30 days and won’t charge you for it.
If you’re unhappy with how we’ve handled things, tell us first and we’ll do our best to sort it out. If you’re still not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au. If you’re in the European Union you can complain to your national data protection authority, and if you’re in the United Kingdom you can complain to the Information Commissioner’s Office at ico.org.uk.
13. For visitors in the United States
We do not sell your personal information for money. However, allowing Meta and Google to collect information through the pixels described in section 6 may count as “sharing” personal information for cross-context behavioural advertising under some US state privacy laws.
You can stop this at any time by rejecting marketing cookies in our consent banner, which you can reopen using the cookie settings link at the bottom of every page. That link is also how you exercise your right to opt out of the sale or sharing of your personal information.
We honour Global Privacy Control signals. If your browser sends one, we treat it as an opt-out of marketing cookies without you needing to do anything else.
Depending on which state you live in, you may also have the right to know what we collect, to delete it, to correct it, to receive a portable copy, and not to be discriminated against for exercising any of those rights. Email hello@maggiestara.com to use them.
14. Children
This website and our products are meant for adults running businesses. We don’t knowingly collect personal information from anyone under 16. If you believe a child has given us their information, email hello@maggiestara.com and we’ll delete it.
15. Automated decision-making
We do not use automated systems or artificial intelligence to make decisions that have a legal or similarly significant effect on you. Our AI tools generate content and suggestions, and nothing they produce determines your access to a service, your price, or any other outcome that materially affects you.
16. Comments
Comments on our blog posts, along with the commenter’s name, email address, IP address and browser details, are stored on our website and checked by the Akismet spam filtering service. Comments identified as spam are not published. Comments and their metadata may be retained indefinitely so that discussion threads remain readable, and you can ask us to delete yours at any time.
17. Other websites
This site links to other websites, including affiliate links which are disclosed separately on our disclosures page. We’re not responsible for how those sites handle your information, so it’s worth reading their own privacy policies before giving them anything.
18. Advertising on this website
This website does not carry banner advertising. If that changes, we’ll update this policy before any advertising appears.
19. Changes to this policy
We’ll update this policy when what we do changes. The date at the top always tells you when it was last revised. If we make a change that materially affects how we use your information, we’ll tell our email subscribers rather than expecting you to spot it.