Clear information about your information.

1. About KZPT

KZPT Fitness Coaching is Karl Zuidema’s personal training and online fitness coaching business. KZPT provides one-to-one personal training in Bundoora and online coaching Australia-wide. Privacy questions can be sent to karl-@live.com.au.

2. Information this website collects

The website receives ordinary technical information needed to deliver and protect a web page, such as an IP address, browser and device information, requested pages, timestamps and security-related request data. It also captures campaign attribution when available, including UTM source, medium, campaign, content and term, the original landing page, referring page and a Meta click identifier (fbclid).

The website uses browser storage to remember the visitor’s analytics and advertising choices, preserve first-touch attribution during a browsing session and prevent confirmed analytics or Meta lead events from firing again when a thank-you page is refreshed. Browser storage is not used as the lead database.

3. Coaching enquiries

The general enquiry form asks for a name, preferred contact method, contact detail, service interest, main goal and optional context. The online coaching form also asks about location, gym-training experience, what is making progress difficult and acknowledgement of the advertised investment. The one-day-sale form asks for contact details, confirmation of Anytime Fitness Bundoora membership, a main goal and optional context.

These coaching enquiries are sent to Karl through Mailjet. They are not automatically added to an email marketing list. KZPT normally deletes enquiry emails after 12 months, unless the person becomes an active client or information must be retained for legal or business-record purposes.

4. Free e-book requests

The Fat Loss That Fits Real Life e-book form asks for a first name and email address, plus an optional multiple-choice answer about what the person is currently finding most difficult. Requesting the e-book allows KZPT to send one operational email delivering it.

The e-book form deliberately does not request body weight, medical history, diagnoses, injuries, eating-disorder information, medication or other sensitive health information. Please do not send sensitive health information when replying to the delivery email.

KZPT Fitness Score

The KZPT Fitness Score processes answers in the visitor’s browser to produce a score and general coaching recommendations. It does not require a name, phone number or email address. Answers remain in the page unless the visitor explicitly selects the optional sharing choice after receiving a result.

If a visitor chooses to share, KZPT stores the selected answer choices, calculated category and overall scores, result band, strength track, primary category, consent wording version and submission time for up to 24 months. The assessment database does not store a name, contact details, IP address, browser identifier, campaign information or free-text response. Hosting and security infrastructure may still process ordinary technical request information as described in section 2. Because a distinctive combination of answers may still carry some re-identification risk, access is limited to Karl’s protected admin area and the records are not combined with leads or used for direct marketing.

The assessment route does not send page-view or custom assessment events to Meta. Choosing to request another resource or contact Karl after viewing a result is a separate action, and the visitor decides what information to share.

5. Optional marketing consent

The e-book form includes a separate optional checkbox for practical KZPT coaching emails and occasional information about coaching. It is unchecked by default. The e-book is delivered whether or not this checkbox is selected, and requesting it is not treated as consent to ongoing marketing.

KZPT stores the exact consent choice, date and time, wording version, submission source and any later withdrawal. Marketing consent can be withdrawn at any time using the secure unsubscribe link in a delivery email or by contacting Karl. Withdrawing consent stops future marketing eligibility but does not automatically delete the underlying operational record.

6. Lead, consent and activity records

E-book leads, consent events, submission and download activity, campaign attribution, lead status, next-action dates and Karl’s private follow-up notes are stored in a Cloudflare D1 database provided through OpenAI Sites. Repeated requests update the relevant lead record and create a new submission activity; an unticked marketing checkbox does not silently convert a previous non-marketing lead into a subscriber.

These records are available only through a private lead dashboard protected by authenticated-user checks and a server-side administrator email allowlist. The dashboard supports search, filters, follow-up status, private notes and CSV export. It does not send bulk marketing email.

7. E-book document storage and email delivery

The canonical e-book PDF is stored in Cloudflare R2 object storage and delivered through a branded KZPT download route. The route is marked to discourage search indexing. Mailjet sends the immediate delivery email using KZPT’s authenticated sender and reply-to settings; the PDF is linked rather than attached.

KZPT may retain operational lead and consent records for up to 24 months after the last activity, or longer when a person becomes a client or retention is needed for legal or business-record purposes. E-book files may remain in R2 while the resource is offered. A person may request access, correction or deletion; KZPT may retain the minimum consent-suppression record needed to honour an unsubscribe.

8. Service providers

The website is hosted through OpenAI Sites using Cloudflare web infrastructure. Cloudflare D1 stores structured lead and consent records, and Cloudflare R2 stores the e-book document. Mailjet processes enquiry and e-book delivery emails. Google may process website analytics information only when the visitor has allowed analytics. Meta may process advertising-event information only when Meta measurement is configured and the visitor has allowed advertising tracking.

KZPT does not sell personal information. Information is disclosed only to the service providers needed to operate the website and communications, when the person asks or consents, or when disclosure is required by law.

9. Cookies, analytics and advertising choices

Essential website, form, email and download functions work without optional tracking. On a first visit, a person can choose essential functions only, allow Google Analytics without advertising tracking, or allow all optional tracking. The choice can be changed later using the Privacy & cookies control.

Google Analytics and the Meta Pixel do not load unless the relevant choice is allowed. If advertising tracking is allowed, Meta cookies such as _fbp and _fbc may be set or read. Declining optional tracking does not prevent a coaching enquiry, e-book request, delivery email or download.

10. Google Analytics 4

When analytics is allowed, Google Analytics 4 records page views and standard engagement information such as broad traffic source, device and browser category, approximate location, scrolling, outbound link clicks and time spent engaging with pages. It also records a generate_lead event after a confirmed coaching enquiry or e-book request and a file_download event when the e-book download link is selected.

KZPT has disabled Google advertising signals and ad-personalisation signals in the website configuration. Names, email addresses, phone numbers, guide answers, coaching goals, private notes and Fitness Score answers are not sent to Google Analytics. The Fitness Score route does not send page-view or assessment events to Google Analytics.

11. Meta Pixel and Conversions API

When configured and allowed, the browser Pixel records page views and a ViewContent event for the online coaching, one-day-sale and fat-loss-guide landing pages. A Lead event is recorded only after the server confirms a valid campaign enquiry or guide request. The browser Pixel and server Conversions API use the same event identifier for deduplication, and a thank-you page refresh does not create another Lead.

The server may send Meta the event source page, available Meta browser identifiers, IP address, browser information and a one-way SHA-256 hash of the supplied email address or phone number for matching. KZPT does not send names or contact details in plain text, guide answers, private notes, coaching goals, free-text enquiry answers or sensitive health information to Meta.

12. Security

KZPT uses server-side validation, a hidden spam field, duplicate protection, request limiting, encrypted HTTPS connections in production, restricted server-side credentials, secure non-guessable unsubscribe tokens and server-enforced dashboard access. No website, database or email service can guarantee perfect security.

13. Access, correction, deletion and questions

To ask what personal information KZPT holds about you, request a correction or deletion, withdraw consent, or ask a privacy question, email karl-@live.com.au. Karl may need to confirm the requester’s identity before acting on a request. A deletion request is handled separately from an unsubscribe request.