Privacy
Privacy policy
Last updated 15 November 2026
This website is run by Mary Atolagbe, an independent short-term rental consultant working as STR With Mary. I’m responsible for the personal information you share here. This page explains, in plain language, what I collect, why, where it goes and how long I keep it.
What I collect
Only what you choose to send me through the forms on this site:
- Free STR Performance Audit: your name, email, country, role, number of properties, listing and website links, and your answers about challenges and goals.
- Contact form: your name, email, role, number of properties, message, and your WhatsApp number if you ask me to reply there.
- Referral form: your name and email, and the name, email and optional phone number and business details of the person you refer. Please only refer someone who has agreed to hear from me.
I don’t use advertising or tracking cookies. If analytics is switched on, it uses Plausible Analytics, which counts visits without cookies and without collecting personal data.
How I use it
- To prepare your audit, reply to your enquiry, or make a referral introduction.
- To provide services if we decide to work together, and to keep business records.
- To track referral rewards under the Referral Programme terms.
I never sell your information, add you to a mailing list without asking, or share it with other clients. Where the law asks for a legal basis, I rely on your consent (which you give on each form), on taking steps you’ve asked for before a possible contract, and on my legitimate interest in replying to business enquiries.
Where it’s stored and who helps me
A small number of service providers process information on my behalf:
- Supabase stores form submissions in a private database hosted in the European Union (Ireland). Visitors can’t read, change or delete stored submissions.
- Netlify hosts the website and keeps short-lived technical logs, such as IP addresses, to run and secure it.
- Resend sends me an email notification for each submission, and my email inbox (Google) stores those messages.
- YouTube plays the client video only after you press play, using YouTube’s privacy-enhanced mode. Google Fonts serves the site’s fonts.
I work remotely from Nigeria, and some of these providers are based in the United States. That means your information may be accessed or processed outside your country. I use established providers that offer recognised safeguards for international transfers, and I only access your information to do the work described above.
If we work together, I may also need access to your own systems (for example Airbnb, PriceLabs, Hostaway or Guesty). That access is limited to what the agreed work needs, and I treat everything I see there as confidential.
How long I keep it
| Information | Kept for |
|---|---|
| Free STR Performance Audit requests and contact enquiries that don’t lead to work togetherLong enough to pick up a conversation you paused, without keeping your details indefinitely. | 24 months from our last contact, then deleted |
| Details of clients I work withNeeded for invoices, tax and accounting records, and to answer questions about past work. | For the length of our work together, then up to 6 years |
| Referral submissionsEnough to make the introduction and honour the 20% reward, and no longer. | Details of the person referred: 12 months if they don’t become a client. Referrer details: until any reward is used, plus 12 months |
| Email notifications and replies about your requestForm submissions are also sent to my email so I can reply; those copies follow the same rules. | Same periods as above, then deleted from my inbox |
You can ask me to delete your information sooner at any time (see below).
Your rights
Depending on where you live, you can ask to see the information I hold about you, correct it, delete it, or object to how I use it, and you can withdraw your consent at any time. Email strwithmary@gmail.com and I’ll respond as quickly as I can, and within the time the law allows.
You can also complain to your local data protection authority, for example the ICO in the UK, your national authority in the EU, the Office of the Privacy Commissioner in Canada or Australia, or the Nigeria Data Protection Commission.
Security
Submissions are sent over an encrypted connection and stored in a private database that only I can access. The site’s server-side keys are never exposed in the browser. No system is perfectly secure, but I take reasonable steps to protect your information.
Changes and contact
If this policy changes, I’ll update the date at the top of this page. Questions or requests: strwithmary@gmail.com, or use the contact page. This site isn’t intended for anyone under 18.