Privacy & Cookies Policy
Last updated: 27 September 2026
Your privacy matters to me. This policy explains what personal information Callumthept collects, why I collect it, how I look after it, and the choices you have. It covers this website (callumthept.com), my online coaching services, and any products you buy from me.
1. Who I am
Callumthept ("Callumthept", "I", "me", "my") is an online personal training business based on the Sunshine Coast, Queensland, Australia. I handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If you live in the UK or European Union, I also respect your rights under the UK and EU General Data Protection Regulation (GDPR).
If you have any questions about this policy or your information, email me at calthept@gmail.com.
2. The information I collect
I only collect information that I need to respond to you, deliver my services and run my business. Depending on how you interact with me, this may include:
Contact and enquiry details – your first and last name, email address and anything you write in a message when you use a contact form or email me.
Newsletter details – your name and email address if you tick the box to receive news and updates.
Purchase and account details – your name, email address, billing address, phone number (if provided), order history and subscription status when you buy a program, ebook or coaching package, or create a customer account on this site.
Payment information – payments are handled by secure third-party payment processors through Squarespace checkout. I never see or store your full card details.
Coaching information – if you become a coaching client, I may collect your training goals, exercise history, lifestyle and work routine, nutrition habits, body measurements, weight and progress photos, and workout and check-in data.
Health information – to keep your training safe, I may ask about injuries, medical conditions, medications or other health matters. This is sensitive information, so I only collect it with your consent, only when it's relevant to your training, and only use it to design and adjust your program safely.
Messages – the content of messages you send me by email, social media direct message or messaging apps.
Technical and usage information – your IP address, browser and device type, pages you visit, how long you spend on them, the site that referred you, and your approximate location. This is collected automatically through cookies (see section 8).
You can browse this website and send a general enquiry without giving your full name if you prefer. However, I can't provide coaching or process a purchase without your real contact details.
3. How I collect it
Directly from you – when you fill in a form, buy a product, create an account, complete an onboarding questionnaire or check-in, or message me.
Automatically – through cookies and similar technologies when you use this website.
From third parties – for example, payment processors confirming a payment, or social media platforms when you contact me through them.
4. How I use your information
To reply to your enquiries and messages.
To create, deliver and personalise your training programs and coaching.
To keep your training safe and appropriate for your health and fitness level.
To process orders, deliver digital products and manage coaching subscriptions.
To send you news and updates, but only if you've opted in. You can unsubscribe at any time using the link in any email.
To understand how people use this website so I can improve it.
To protect this website and its forms from spam, fraud and misuse.
To meet my legal, tax, accounting and insurance obligations.
I will never sell your personal information. I don't use automated decision-making that has a legal or similarly significant effect on you.
Legal bases (UK/EU visitors): I process your information to perform a contract with you (for example, delivering your coaching), with your consent (for example, newsletters, health information and non-essential cookies), for my legitimate interests (for example, running and securing this website), and to comply with legal obligations.
5. Who I share it with
I only share your information with trusted service providers who help me run my business, and only as much as they need to do their job:
Squarespace – hosts this website and handles forms, checkout, customer accounts, mailing lists and website analytics.
Payment processors – such as Stripe or PayPal, which process payments made through this site.
Google – provides reCAPTCHA spam protection on website forms, and my email service.
My online coaching app provider – used to deliver your program, log workouts and manage check-ins if you're a coaching client.
Messaging and social media platforms – such as Instagram, TikTok and WhatsApp, when you choose to contact me or check in through them. These platforms handle your information under their own privacy policies.
Professional advisers – such as my accountant or insurer, where needed.
Authorities – where I am required or permitted to by law.
6. Overseas disclosure
Several of the service providers above store or process information outside Australia, including in the United States, the European Union and other countries. I choose reputable providers and take reasonable steps to make sure your information is protected in line with Australian privacy law.
7. How I store and protect your information
Your information is stored securely with the service providers listed above, using password-protected accounts. I take reasonable steps to protect it from misuse, loss, unauthorised access, modification and disclosure.
I keep your information only for as long as I need it:
Coaching clients and customers – for as long as we work together, and afterwards for as long as needed to meet tax, accounting and insurance requirements (generally up to 7 years).
Enquiries – if we don't end up working together, I delete enquiry details within 2 years.
Newsletter subscribers – until you unsubscribe.
When information is no longer needed, I delete or de-identify it.
8. Cookies
Cookies are small text files placed on your device when you visit a website. They help the site work properly, remember your preferences and show how the site is being used.
Strictly necessary cookies – these are needed for the website to work and can't be switched off. They include:
crumb – helps protect the site and its forms from cross-site request forgery (expires when you close your browser).
CART – remembers items in your shopping cart (2 weeks).
SiteUserInfo – keeps you signed in to your customer account (up to 3 years).
Cookie preference cookies – remember whether you accepted or declined non-essential cookies.
Google reCAPTCHA – helps tell people and bots apart on website forms.
Analytics and performance cookies – these help me understand how visitors use the site so I can improve it. They are only set if you accept them:
ss_cid and ss_cpvisit – identify unique visitors and visits (2 years).
ss_cvr – records conversions such as purchases or form submissions (2 years).
ss_cvisit – tracks an individual browsing session (30 minutes).
Third-party cookies – if I embed content from other sites (such as YouTube videos or social media posts), those sites may set their own cookies. They are governed by those providers' privacy policies.
Managing cookies: when you first visit this site, a cookie banner lets you accept or decline non-essential cookies. You can change your choice at any time using the cookie preferences button on the site. You can also block or delete cookies in your browser settings, but some parts of the site (such as the cart or your account) may not work properly if you do.
9. Your rights and choices
You can ask me to:
give you access to the personal information I hold about you;
correct information that is inaccurate, out of date or incomplete;
delete your information, where I'm not required to keep it by law;
stop sending you marketing emails; or
withdraw any consent you've given (for example, for health information or non-essential cookies).
If you're in the UK or EU, you can also ask me to restrict or object to certain processing, and to give you a copy of your data in a portable format.
To make a request, email calthept@gmail.com. I may need to confirm your identity first. I'll respond within 30 days, and there's no charge.
10. Children
My services are designed for adults. I don't knowingly collect personal information from anyone under 18 without the consent of a parent or guardian. If you think a child has given me their information, please contact me and I'll delete it.
11. Links to other websites
This website links to other sites, such as Instagram and TikTok. I'm not responsible for their privacy practices, so please read their privacy policies before sharing information with them.
12. Complaints
If you have a concern about how I've handled your personal information, please email me first at calthept@gmail.com and I'll do my best to resolve it within 30 days.
If you're not satisfied with my response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992. If you're in the UK, you can contact the Information Commissioner's Office (ico.org.uk), and if you're in the EU, your local data protection authority.
13. Changes to this policy
I may update this policy from time to time, for example if my services or the law change. The latest version will always be on this page, with the date it was last updated at the top.
14. Contact
Callumthept
Sunshine Coast, Queensland, Australia
Email: calthept@gmail.com