Privacy Policy
Last updated: 4 October 2026
Who we are
This website, biancaa.com, is operated by Mana Kaitiaki Pty Ltd as trustee for the Mana Kaitiaki Trust (ABN 59 353 729 897). In this policy, “we”, “us” and “our” mean Mana Kaitiaki Pty Ltd. “You” means anyone who visits the site, subscribes to our emails, enquires about working with us, or buys a program or product from us.
We are based in Australia and we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If you are in the European Union, the United Kingdom or California, additional rights apply to you and those are set out near the end of this policy.
What we collect
Information you give us
When you enquire or book a call. Your name, email address, phone number, business or website URL, how long you have been in business, revenue range, and whatever you choose to tell us in the free-text fields about what you are working on.
When you buy something. Your name, email address, billing address, and the details of what you purchased. Card numbers are entered directly into our payment provider’s secure checkout. We never see or store your full card number.
When you subscribe to our newsletter or podcast. Your email address, and your name if you give it.
When you join a program. Anything you share with us in coaching sessions, calls, worksheets, community spaces, or direct messages as part of the program you are enrolled in.
When you contact us. Your email address and whatever is in your message.
Information we collect automatically
When you visit the site we collect your IP address, browser type, device type, operating system, the pages you view, how long you spend on them, the site or search that referred you, and the approximate location derived from your IP address. This is collected through cookies and similar technologies. See the cookies section below.
Information from third parties
If you find us through a social platform or an advertising campaign, that platform may pass us limited data about the campaign or referral. If you subscribe through Substack, Substack shares your subscription status with us.
Sensitive information
We do not seek out sensitive information as defined by the Privacy Act, such as health, racial or ethnic origin, religious beliefs, sexual orientation or criminal record. Coaching conversations sometimes touch on personal territory. If you choose to share something of that nature in a session we treat it as confidential and we do not record it in our systems unless you have asked us to.
Why we collect it
We only collect personal information where it is reasonably necessary for what we do: to respond to your enquiry and work out whether we are a fit; to deliver the program, session or product you have purchased; to take payment and issue receipts and tax invoices; to send you the emails you asked for; to send you marketing about our own programs and offers, which you can stop at any time; to improve the website; to detect and prevent fraud and abuse; and to meet our legal and tax obligations.
We do not sell your personal information.
Who we share it with
We use third-party services to run the business. Each one gets only what it needs to do its job.
Website hosting. Our site is hosted on servers in Australia.
Customer relationship, forms and checkout. We use GoHighLevel to receive enquiries, manage contact records and take payments. Data is stored on servers in the United States. Your card details go directly to the payment processor and are handled under PCI-DSS standards. We receive confirmation of payment, the last four digits of the card, and your billing details.
Email and publishing. We use Substack to publish our newsletter and podcast. If you subscribe, your email address is held by Substack under their own privacy policy.
Analytics and advertising. We use website analytics and the Meta Pixel to understand traffic and measure our advertising. We do not use this data to identify individuals.
Video. Videos on the site are embedded from YouTube, which sets cookies and collects viewing data under Google’s privacy policy.
Professional advisers. Our accountant and, where necessary, our lawyer, in the ordinary course of running the business.
We will also disclose information where we are required to by law, by a court order or by a regulator, and where it is necessary to protect someone’s safety or to establish or defend a legal claim.
Overseas disclosure
Several of the services above store data outside Australia, principally in the United States. By using the site and providing your information you consent to that disclosure. We use reputable providers who commit to appropriate data protection standards, but we cannot guarantee that overseas recipients will handle your information in a way that complies with the Australian Privacy Principles.
Cookies
Essential cookies keep the site working and remember your choices. Analytics cookies tell us which pages get visited and where visitors arrived from. Marketing cookies let us measure whether an ad led to an enquiry. Third-party cookies are set by embedded content such as YouTube.
You can control cookies through your browser settings, including blocking or deleting them. If you block essential cookies, parts of the site will stop working.
Marketing emails
Every marketing email has an unsubscribe link and unsubscribing takes effect immediately. You can also email info@biancaa.com and ask to be removed. If you have bought a program we will still send the emails needed to deliver it, such as access details, call links and receipts.
How long we keep it
Enquiries that do not become clients: two years from the last contact, then deleted. Client and purchase records: seven years from the end of the financial year of the transaction, as Australian tax law requires. Coaching notes: for the engagement and two years afterwards, unless you ask us to delete them sooner. Newsletter subscribers: until you unsubscribe. Website analytics: aggregated and anonymised, up to 26 months.
Security
The site runs over HTTPS. Access to our systems is limited to people who need it and protected with strong passwords and multi-factor authentication where available. Payment card data never touches our systems. No method of transmission or storage is completely secure. If a data breach is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.
Your rights
Access. You can ask for a copy of the personal information we hold about you. We will respond within 30 days. Correction. If something we hold is wrong, tell us and we will fix it. Deletion. You can ask us to delete your information, except where we are legally required to keep it. Opt out. You can unsubscribe from marketing at any time. Complain. Email info@biancaa.com first and we will respond within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
If you are in the EU or the UK
Under the GDPR you also have the right to restrict processing, to data portability, to object to processing based on legitimate interests, and to withdraw consent at any time. Our lawful bases are performance of a contract, consent, legitimate interests and legal obligation. You may lodge a complaint with your local supervisory authority.
If you are in California
You have the right to know what personal information we collect, to request deletion or correction, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising these rights. We do not sell personal information.
Children
This website and our programs are intended for adults. We do not knowingly collect personal information from anyone under 18.
Changes to this policy
We may update this policy from time to time. When we do, we will change the date at the top.
Contact us
Questions, requests or complaints about privacy: info@biancaa.com
Mana Kaitiaki Pty Ltd as trustee for the Mana Kaitiaki Trust (ABN 59 353 729 897). This policy is governed by the laws of Queensland, Australia.
