Privacy Policy

This Privacy Policy explains how Clara Malzer (“we”, “us”, “our”) collects, uses and protects your personal information when you visit claramalzer.com (the “Website”), sign up to receive emails, download free resources, or contact us.

We are based in Australia and also serve clients in the European Union, therefore this policy reflects Australian privacy requirements as well as the EU General Data Protection Regulation (GDPR) where applicable.

1) Who is responsible for your data

Controller (GDPR): Clara Malzer
Email: hello[at]claramalzer.com
Website: claramalzer.com
ABN: 89981727850
Business location: New South Wales, Australia

2) What personal data we collect

Depending on how you interact with the Website, we may collect:

Contact details (name, email address, and any information you include in a message)
Newsletter and free download details (email address, and preferences you choose to share)
Booking / inquiry details (information you submit via forms, applications, or email)
Website usage data (IP address, browser type, device, pages visited, approximate location, referral source)
Cookie data (see “Cookies & Analytics” below)

We do not intentionally collect sensitive information (e.g., health data). If you choose to share sensitive information in a message or application, you do so voluntarily and we will treat it with care.

3) How we use your information

We use your data to:

respond to inquiries and provide requested information
deliver free resources and email updates (newsletter)
run and improve the Website (performance, analytics, security)
manage bookings, services, and business administration
comply with legal obligations

4) Legal bases for processing (GDPR)

If you are in the EU/EEA/UK, we process your personal data based on:

Consent (e.g., newsletter sign-up, cookies where required)
Contract / pre-contract steps (e.g., responding to requests to work together)
Legitimate interests (e.g., running and securing the Website, improving content, preventing fraud)
Legal obligations (e.g., accounting and compliance)

5) Email marketing (Newsletter) – Flodesk

If you opt in to receive emails or download a free resource, your information is processed via Flodesk (email marketing provider). You can unsubscribe anytime using the link in any email.

We may track basic email engagement (e.g., opens and clicks) to improve what we send. You can opt out by unsubscribing.

6) Cookies & analytics – Squarespace + Google Analytics

Our Website is hosted on Squarespace, which may set cookies necessary for site functionality and security.

We also use Google Analytics to understand general Website usage (e.g., which pages are visited, how long visitors stay). This helps us improve content and performance. Google Analytics may use cookies and may process device identifiers and IP-related data.

You can control cookies via:

our cookie banner (where applicable), and/or
your browser settings (block/delete cookies)

You can also opt out of Google Analytics using Google’s browser add-on.

7) Sharing your information

We do not sell your personal data.

We may share data with trusted service providers (“processors”) only as needed to run our business, including:

Squarespace (website hosting)
Flodesk (email marketing)
Google Analytics / Google (website analytics)

We may also share information if required by law, or to protect rights, safety, and security.

8) International data transfers

Because we use global service providers, your data may be processed outside your country (including the United States or other regions where our providers operate).

Where GDPR applies, we rely on appropriate safeguards for international transfers (such as standard contractual clauses or equivalent protections used by the providers).

9) Data retention

We keep personal data only as long as necessary for the purposes described above, including legal, accounting, or reporting requirements.

Newsletter data is kept until you unsubscribe.
Inquiry data is kept as long as needed to respond and for reasonable business records.

10) Your rights

Depending on your location, you may have rights to:

access the personal data we hold about you
request correction or deletion
withdraw consent (e.g., unsubscribe)
object to certain processing
request restriction or portability (GDPR)
lodge a complaint with a supervisory authority (EU/EEA/UK), or an Australian regulator where applicable

To exercise your rights, email: hello[at]claramalzer.com.