Scope
This notice covers the public Costa Fitness website. It does not replace any separate privacy notice or agreement for an authenticated MesoForge service, a coaching relationship, or another service with its own terms.
Information you provide
Netlify hosts this site and processes the public Netlify Forms used for coaching conversations, downstream coaching intake, and contact questions. Depending on the form, fields include name, email, phone or Instagram contact, coaching goal, current obstacle, preferred follow-up method, coaching path, training experience, age/height/bodyweight, schedule and equipment, injuries or limitations, nutrition starting point, sticking points, and message text.
Some optional intake fields can contain health-adjacent fitness context. Share only what Costa Fitness needs to review the request. Do not send medical records or emergency information through a public form.
Free ebook registration pages, including the Mesocycle Blueprint, use Google Forms. Google receives the submitted email and the selected resource attached to that request. The standalone Blueprint page can also include an optional typed training goal.
If you email Costa Fitness directly, Google, as the Gmail provider, and your own email provider process your address, message, email headers, and any attachments.
Website and attribution data
Google Analytics 4 (GA4) and Google Ads conversion measurement may receive the page origin and path without its query string, a referrer without its query string or fragment, device/browser details, approximate location, ad-click identifiers, and interaction or successful-form-receipt events for visitors who have not enabled a recognized privacy signal or the browser opt-out below. Google can set first-party analytics and ad-attribution cookies. Advertising personalization and user-provided-data measurement are disabled by this site. Google Fonts receives ordinary network request information when the browser downloads fonts from fonts.googleapis.com or fonts.gstatic.com.
The site also uses browser sessionStorage to keep the first landing-page path, a referrer without its query string or fragment, and available UTM values plus gclid and fbclid. When you use the Blueprint-to-Membership path, it also creates an opaque random client_reference_id that is not derived from your email, training goal, or other form values. Campaign values may be copied into a submitted Netlify form; the opaque Membership reference may be sent to GA4 with the Blueprint interaction when analytics is enabled, and it is passed to MesoForge and Stripe only if you choose Membership checkout. A Google Ads lead conversion is sent only after a supported Netlify form reaches the receipt page. The site does not intentionally send form values, names, email addresses, phone numbers, health context, or free-text messages to GA4 or Google Ads.
Netlify and Google may also receive standard network, hosting, form, and anti-abuse data such as IP address, browser or device information, requested URL, submission time, and security signals.
Why information is used
- Review and answer coaching conversations, downstream intakes, contact requests, and questions.
- Call, text, or email directly about a request when the visitor supplies that contact method.
- Provide coaching if the applicant is accepted and a separate coaching relationship is formed.
- Deliver requested lead magnets and optionally send closely related training or promotional follow-up with an opt-out in promotional email.
- Understand site use, campaign attribution, reliability, abuse, and conversion flow without placing submitted form text into analytics.
Providing a phone number for a request does not enroll the visitor in recurring marketing texts.
Providers and disclosures
Costa Fitness uses Netlify for hosting and public forms and Google for Gmail, Google Forms, GA4, Google Ads conversion measurement, and Google Fonts. Information may be disclosed to these providers to operate the site, to professional advisers or authorities when reasonably necessary for legal, safety, fraud, or rights-protection purposes, or as part of a legitimate business transfer subject to appropriate handling. Provider processing is also governed by each provider's terms and privacy practices.
Retention and requests
Information is retained for a reasonable period based on the request, follow-up, coaching records if a relationship is accepted, fraud/security needs, and applicable business or legal obligations. Costa Fitness does not promise one fixed retention period for every category.
To request access, correction, or deletion, email Costafitnessllc@gmail.com. Costa Fitness may need to verify the request and may retain limited information when reasonably required by law, safety, fraud prevention, or an active agreement.
Analytics choice
The site respects Global Privacy Control (GPC), browser Do Not Track signals, and the first-party preference below. The preference stores only a measurement opt-out flag in this browser. Opting out asks the Google tag to deny analytics and ad storage and removes first-party Google measurement cookies where the browser permits. Browser or provider limitations may prevent perfect cookie deletion.
Children and security limits
This public site is not directed to children under 13. A child under 13 should not submit a form. A parent or guardian can contact Costa Fitness to request review or deletion of information submitted by a child.
Costa Fitness uses practical site controls, but no public website, transmission, provider, or storage method can be promised perfectly secure. Do not use these forms for emergencies, medical records, passwords, payment-card data, or other information the form does not request. See the Security page for source-configured controls and reporting instructions.
Contact
Privacy questions: Costafitnessllc@gmail.com.