Privacy Policy
Before the detail, here’s what this means.
In this summary, “I” means me, Alli Mckean, trading as Onylla. The full policy calls me “we”.
I collect your name and email, your order details, some technical information when you visit the site, and anything you choose to share with me.
Your card details go to Stripe. I never see them.
You only get marketing emails from me if you’ve said yes. Every one has an unsubscribe link.
If you share something personal, about how you’re going or about your family, I only use it for the reason you shared it. Never for marketing. I’ll only share your words publicly, or use them (without your name) to help me write my emails, if you give me permission first.
Inside The Notice Space, other members can read what you post and may see your Telegram profile, such as your username and photo. Please leave out your children’s names, photos and anything that could identify them.
I never sell your information.
You can ask to see or correct what I hold about you, or ask me to remove something you’ve shared. Just email hello@onylla.com. If you’re unhappy with how I’ve handled your information, you can also complain to a privacy regulator.
The full policy below is the one that applies.
The full policy
1. Introduction
This document sets out the privacy policy of Allison Mckean trading as Onylla (ABN 64 483 864 828), the operator of https://onylla.com and the Instagram account @onylla.space (referred to in this privacy policy as ‘we’, ‘us’, or ‘our’). For the purposes of applicable data protection law, (in particular, the General Data Protection Regulation (EU) 2016/679 (the “GDPR”), the UK GDPR and the UK Data Protection Act 2018), we are the controller of your personal data. We also handle your personal data in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
This privacy policy applies whenever we collect your personal information (as defined in the Privacy Act 1988 (Cth)) or personal data (as defined in the GDPR), which we refer to together as your personal data. This includes when you visit our website, order our free or paid digital products, join our waitlist or mailing list, comment on our articles, send us feedback or an enquiry, and join our online weekly practice community, The Notice Space (including any 7-Day First Practice), through its private online community rooms. This privacy policy applies to our use of any and all data collected by us or provided by you in relation to your use of the website and the provision of our services to you.
Your privacy matters to us, and we are committed to handling your personal data with care. Please read this privacy policy carefully. It explains who we are and how and why we collect, store, use and share your personal data when you use our website, buy our products, join our waitlist or community, or contact us. It also explains your rights and how to contact us or a regulator if you have a complaint.
Our website, products and community are designed for adults, and in particular for mothers. They are not directed at children, and we do not knowingly collect personal data directly from anyone under 18. If you believe a child has given us their personal data, please contact us and we will delete it.
2. What personal information we collect
The personal data we collect may include the following:
(a) name;
(b) billing details, being the first name, last name and email address you enter at checkout (and, if requested in future, your billing country or address);
(c) email address;
(d) information you share with us if you contact us, or we contact you, through social media, such as Instagram, including notes we keep of your first name and what you commented;
(e) order details, including the products you order, the price paid, order records and download links;
(f) limited payment information, such as payment status and transaction reference, provided by our third-party payment provider, Stripe (we do not see or store your full card details);
(g) information you choose to share about your personal circumstances, such as your reflections, feedback, comments and posts, which may include sensitive information about your mental wellbeing or family life;
(h) feedback you send us after using our free Micro-Reset wallpaper or our other products;
(i) technical information, such as your IP address, browser type and device information, and information collected through cookies;
(j) information about other people, such as your children or family members, if you choose to include it in your feedback, comments or posts; and
(k) any other information provided by you to us via this website, in the course of us providing services to you, or otherwise required by us or provided by you.
In particular, depending on how you interact with us, we collect:
(l) free Micro-Reset wallpaper: when you sign up through our MailerLite form, your email address (and, if requested, your first name) and your tick-box confirmation about sharing information with us privately, so we can email you a link to download your wallpaper once you have confirmed your email address, and any feedback you choose to send us in reply to our follow-up emails;
(m) paid products: when you buy our Micro-Reset Cards (Mobile Edition, Printable Edition or Bundle), your first name, last name and email address entered at checkout, and a record of your order and your download links (customer accounts are not currently enabled, so we do not collect account login details), while your payment card details are collected and processed directly by Stripe and are not seen or stored by us;
(n) The Notice Space waitlist: when you sign up through our MailerLite form, your email address (and, if requested, your first name), your tick-box confirmation about sharing information with us privately, and any replies you choose to send to our waitlist emails;
(o) The Notice Space: The Notice Space will initially operate through private Telegram rooms. During launches, we offer the 7-Day First Practice (a one-off payment that does not turn into a subscription) in a private Telegram room, which is archived when the 7 days end, and a fresh room is opened for the next launch. Ongoing monthly subscribers are invited into a separate private Telegram room. Once there are 30 or more subscribers, we may move The Notice Space to Mighty Networks. We collect the name and email address you provide when you opt in, together with any posts or reflections you choose to share in the room. Depending on your Telegram privacy settings, we and other members of the room may also see your Telegram username, profile photo and phone number. 7-Day First Practice and subscription payments are processed by Stripe;
(p) blog comments: your name and email address, your website (if you choose to provide it), your comment, and your IP address and browser information, which may be logged for spam filtering;
(q) enquiries: any information you choose to include when you email us at hello@onylla.com; and
(r) technical and cookie data: information collected automatically when you visit our website, as described in the ‘Cookies’ section below.
3. How we collect personal information
We endeavour to ensure that information we collect is complete, accurate, accessible and not subject to unauthorised access.
We may collect personal data either directly from you, or from third parties, including where you:
(a) place an order through our website checkout, sign up for our free Micro-Reset wallpaper, join our waitlist or mailing list, leave a blog comment or send us feedback;
(b) communicate with us via email, social applications (such as Instagram) or otherwise;
(c) buy our digital products or join The Notice Space (including the 7-Day First Practice);
(d) offer to provide, or provide, services to us;
(e) interact with our website, social applications, products and content; and
(f) use our services and we receive information about you from our service providers, such as our payment provider, Stripe, and MailerLite (for example, confirmation that a payment has been made or that you have unsubscribed from our emails).
We may also collect personal data automatically when you use or access our website, including through cookies, server logs and similar technologies. For more information, please see the ‘Cookies’ section below.
4. Sensitive information and information about your children
Some of the information you share with us, particularly in feedback and in The Notice Space, may reveal information about your mental wellbeing, health, emotions, parenting or family life. Some of this information, such as information about your mental health, is ‘sensitive information’ under the Privacy Act 1988 (Cth) and may be ‘special category data’ under the GDPR.
We only collect and use sensitive information with your explicit consent. We will ask you to confirm this consent by tick-box confirmation or a similar consent mechanism when you sign up for our free Micro-Reset wallpaper, our Notice Space waitlist or The Notice Space (including by a tick-box at our Stripe checkout), and before you share information about your wellbeing or family life in feedback, including in email replies about our free Micro-Reset wallpaper or our Notice Space waitlist, and we will only use that information for the purpose for which you shared it. We will not use sensitive information for marketing, and we will not disclose it except as described in this privacy policy or as required by law.
Please share carefully: The Notice Space operates through private community rooms, so the other members of a room will be able to read what you post in it. Please only share what you are comfortable with others seeing. We ask that you do not include your children’s names, photos or other details that could identify them, and that you do not identify any other person, in your feedback, comments or posts.
You can withdraw your consent at any time, or ask us to remove a post, comment or piece of feedback, by emailing us at hello@onylla.com. Withdrawing your consent will not affect our use of your information before you withdrew it.
5. How we use your personal information
We collect and use personal data for the following purposes:
(a) to process your orders, deliver your downloads (including our free Micro-Reset wallpaper) and send you receipts, download links and other transactional emails, and to give you access to The Notice Space;
(b) for record keeping and administrative purposes;
(c) to comply with our legal obligations (including keeping business, bookkeeping and tax records), resolve disputes or enforce our agreements with third parties;
(d) where we have your consent, including to let you know when The Notice Space opens and to send you occasional updates, marketing and promotional messages and other information that may be of interest to you. We send these emails through MailerLite. We will only add you to our mailing list if you have agreed to receive marketing emails from us. Free-download recipients are added to our mailing list through a double opt-in process, which means you must confirm your email address before you are added and before we send you your download link. Every email we send includes an unsubscribe link. You can opt-out of receiving marketing materials from us by using the opt-out facility provided (e.g. an unsubscribe link);
(e) for our legitimate interests including:
(i) to collect and review feedback and understand how our products are used, so we can improve them;
(ii) to improve and optimise our service offering and customer experience;
(iii) to respond to your enquiries and send you administrative messages, reminders, notices, updates and other information requested by you;
(iv) to moderate blog comments and posts in The Notice Space, and to keep our website secure and prevent spam and fraud; and
(v) to operate our website and deliver our free articles and other content.
If you are in the EU or UK, the legal bases we rely on under the GDPR are:
(f) contract: to process your orders, deliver your downloads, send you receipts and transactional emails and give you access to The Notice Space;
(g) consent: to send you waitlist updates and marketing emails, to handle any sensitive information you choose to share and to place non-essential cookies;
(h) legitimate interests: to improve our products, review feedback, respond to enquiries, moderate comments and posts, and keep our website secure and prevent spam and fraud; and
(i) legal obligation: to keep business, bookkeeping and tax records.
We do not use your personal data for automated decision-making or profiling.
We do not currently use artificial intelligence (AI) tools to process our customers’ personal data. If you give us permission, we may use your words in AI tools to help us write our content, but only after removing your name and any other details that could identify you.
Feedback and testimonials: we use the feedback you send us to improve our products. We may also ask for your permission to use your comments as testimonials for Onylla or The Notice Space. We will only publish your feedback or testimonials with your permission and, where you give permission, we will use your words word-for-word.
6. Who we share your personal information with
We may share your personal data in certain circumstances, as follows:
(a) where there is a change of control in our business or a sale or transfer of business assets, we reserve the right to transfer to the extent permissible at law our user databases, together with any personal data and non-personal data contained in those databases. This information may be disclosed to a potential purchaser under an agreement to maintain confidentiality. We would seek to only disclose information in good faith and where required by any of the above circumstances;
(b) disclosures required by law or regulation; and
(c) our service providers, including our website host, WordPress, our payment provider, Stripe, MailerLite (email marketing and waitlist), Telegram (private community rooms for The Notice Space), Mighty Networks (if we move The Notice Space to that platform) and Automattic (Jetpack image delivery, Jetpack Stats and blog comments, and Akismet anti-spam), and our professional advisers such as accountants and lawyers.
Anything you post in a Notice Space room will be visible to the other members of that room.
We do not sell your personal data.
7. Cookies
Cookies are small files stored on your device when you visit a website. Our website uses cookies that are needed for it to work properly, including:
(a) WordPress cookies, for example to remember your details if you choose this when leaving a comment;
(b) Easy Digital Downloads cart and session cookies, which keep track of your cart and checkout; and
(c) Jetpack cookies, used for image delivery and our comment form.
Our website also uses non-essential cookies, including analytics cookies such as Jetpack Stats where applicable. Our website displays a cookie banner, and you can manage non-essential cookies through the cookie banner and/or your browser settings.
You can also manage or delete other cookies through your browser settings. If you block essential cookies, parts of our website, such as the checkout, may not work properly.
8. Security
We take reasonable steps to ensure your personal data is secure and protected from misuse or unauthorised access. Our information technology systems are password protected, and we use a range of administrative and technical measures to protect these systems. However, we cannot guarantee the security of your personal data.
We rely on reputable service providers to host our website, process payments and send emails, and your card details are entered with and processed by Stripe and are not seen or stored by us.
If a data breach occurs that is likely to result in serious harm to you, or a risk to your rights and freedoms under the GDPR, we will notify you and the relevant regulator where the law requires us to.
9. Links and social media
Our website may contain links to other websites. Those links are provided for convenience and may not remain current or be maintained. We are not responsible for the privacy practices of those linked websites and we suggest you review the privacy policies of those websites before using them.
We link to our Instagram account (@onylla.space), but we do not embed social media feeds on our website. If you interact with us on Instagram, Instagram’s own privacy policy applies to your use of that platform.
10. Your rights
Wherever you live, you can ask to access and correct the personal data we hold about you, consistent with the Australian Privacy Principles. If you are in the EU or UK, you have the following rights under the GDPR:
(a) Access: You have the right to obtain access to your information (if we’re processing it) and certain other information (similar to that provided in this privacy notice). This is so that you’re aware and can check that we’re using your information in accordance with data protection law.
(b) Be informed: You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we’re providing you with the information in this privacy policy.
(c) Rectification: We aim to keep your personal data accurate, current, and complete. We encourage you to contact us by emailing hello@onylla.com to let us know if any of your personal data is not accurate or changes, so that we can keep your personal data up-to-date.
(d) Objecting: You also have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing.
(e) Restricting: You have the right to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further.
(f) Erasure: You have the right to ask us to erase your personal data when the personal data is no longer necessary for the purposes for which it was collected, or when, among other things, your personal data have been unlawfully processed.
(g) Portability: You have the right to request that some of your personal data is provided to you, or to another data controller, in a commonly used, machine-readable format.
(h) Complaints: If you believe that your data protection rights may have been breached, you have the right to lodge a complaint with the applicable supervisory authority. In the UK, this is the Information Commissioner’s Office (ico.org.uk). In the EU, it is the data protection authority in the country where you live or work.
(i) Withdraw consent: If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time. This includes your right to withdraw consent to us using your personal data for marketing purposes.
You may, at any time, exercise any of the above rights by emailing us at hello@onylla.com. We may need to verify your identity before acting on your request. We will respond within one month (or within 30 days for requests under the Australian Privacy Principles), and we will not charge you for making a request unless the law allows us to.
11. Complaints
If you have a complaint about how we have handled your personal data, please contact us first at hello@onylla.com so we can try to put things right. We will acknowledge your complaint and aim to respond within 30 days.
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (www.oaic.gov.au) or, if you are in the EU or UK, the relevant supervisory authority, including the UK Information Commissioner’s Office.
12. How long we keep data
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. We will securely destroy your personal data in accordance with applicable laws and regulations.
In particular, we keep:
(a) order records and financial and tax records for at least 5 years after the relevant order;
(b) your details on our mailing list and waitlist until you unsubscribe;
(c) blog comments until they are deleted by us or at your request;
(d) enquiry emails for at least 5 years; and
(e) Notice Space posts and profile information until your membership ends, and posts in archived 7-Day First Practice rooms for up to 12 months after the room is archived.
When we no longer need your personal data, we will securely delete or de-identify it. If you would like more information about our retention periods, please contact us using our email address provided below.
13. Overseas disclosure and transfers outside the UK and European Economic Area (‘EEA’)
We actively market our products globally, including via Instagram, so we may collect personal data from people outside Australia, including in the UK and EEA. We are based in Australia, so personal data of people in the UK and EEA is transferred to and stored in Australia. Some of our service providers also store or process personal data outside Australia, the UK and the EEA, including in the United States. These countries may not provide the same level of data protection as the country in which you live, and some are not recognised by the European Commission or the UK Government as providing an adequate level of data protection.
When we do this, we will make sure that it is protected to the same extent as in the EEA and UK as we will put in place appropriate safeguards to protect your personal data, which may include relying on an adequacy decision or using the European Commission’s standard contractual clauses (together with the UK Addendum, where relevant).
For individuals in Australia, before we disclose personal information to an overseas recipient, we will take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles, unless an exception under the Privacy Act 1988 (Cth) applies.
For more information, please contact us at our email address provided below.
14. Contact us
For further information about our privacy policy or practices, or to access or correct your personal data, or make a complaint, please contact us using the details set out below:
Email: hello@onylla.com
Name: Allison Mckean, trading as Onylla
Address: PO Box 12, Mansfield QLD 4122
15. Changes to this privacy policy
We may change this privacy policy from time to time by posting an updated copy on our website and we encourage you to check our website regularly to ensure that you are aware of our most current privacy policy. Where we make any significant changes, we will endeavour to notify you by email.
We will update this privacy policy if we move The Notice Space to Mighty Networks or otherwise materially change how it operates, so that it accurately reflects how The Notice Space operates.
Last updated: 06 October 2026