Privacy Policy

Version fuel40-privacy-v7-2026-10-13. Effective when the approved signup service launches.

Who is responsible

Fuel40, 100 King St W, Bowmanville, ON L1C 3Z9, Canada. Contact [email protected] for privacy questions, access, corrections, withdrawal or deletion requests.

Your choices

On these lead-magnet forms, clicking “Download FREE Guide & Subscribe” requests the guide and expressly agrees to Fuel40 emails about training advice, fitness education, product updates and occasional coaching offers, as disclosed beside the button. This form does not offer guide access without promotional-email consent. Reading this policy does not give marketing consent.

Withdraw marketing consent at any time using the unsubscribe link in our marketing emails or by contacting us. We honour withdrawal and do not send further marketing after consent is withdrawn. Promotional messages are sent only with affirmative marketing consent and an active, unsuppressed provider status. Historical guide-only records remain separate from marketing consent and are never placed in an email workflow.

Collection and use

We collect your email, requested guide, referral source and campaign, and the consent choices submitted with your request. We record the time, source page, exact disclosure and sender identification, submission action, consent version and privacy policy version as evidence. We use this information to fulfil your request, manage authorised subscriptions, prevent abuse and demonstrate consent. We do not sell your information or use advertising trackers on these signup pages.

Retention and deletion

We retain active subscribers’ information while consent remains valid and the information is still necessary for the subscription. We review necessity regularly. Longer retention never permits marketing after you withdraw consent.

We retain limited consent evidence for 7 years after withdrawal to demonstrate what was requested, what disclosure was shown, and when consent was given or withdrawn, subject to applicable legal requirements. This evidence is separated from ordinary contact information and restricted to compliance and dispute handling. We retain minimal protected unsubscribe and suppression records for as long as necessary to prevent unwanted marketing, with regular necessity reviews; these records are not used for marketing.

Legacy guide-only contacts are reviewed after 12 months from their last guide request. Where delivery is complete and there is no necessary continuing purpose or legal hold, we delete unnecessary personal information. Twelve months is a review point, not a blanket deletion deadline for every record. Guide-only request evidence is reviewed separately; it is not automatically treated as ongoing marketing consent.

Financial records are retained for the legally required period, generally at least 6 years from the end of the last tax year they relate to, and longer where required. This website’s free-guide forms do not collect payment or invoice information.

We honour verified deletion requests promptly and explain any limited records retained for compliance, suppression or a legal requirement. Reasonable identity checks protect your information. Legal holds require a documented purpose, scope, authorisation, review date and expiry. We remove information when its purpose and retention requirement end; email provider erasure can take up to 30 days after our request.

Purchases and app services

When approved purchases launch, Stripe will process one-time PDF payments and card details. Fuel40 will record payment references, amount, product, access entitlement and your separate optional marketing choice, and use browser-bound access cookies to protect downloads. A purchase does not grant marketing consent. Kahunas will process app-trial and coaching enrollment under its verified billing and privacy terms; clicking a link alone does not prove membership. This site does not collect card numbers. Financial records follow the applicable retention rule; purchase consent evidence follows the consent rule, and access/contact data is reviewed by purpose.

Service providers

Cloudflare hosts the site and stores signup and consent information in D1. Server-side rate limits and a hidden form field help reduce abusive submissions; technical processing can include request IP addresses and browser information. MailerLite processes guide delivery, authorised marketing, unsubscribe status and deletion requests. These providers may process information outside Canada under their service terms and safeguards. Contact us for details or to raise a privacy concern.

Requests and security

Contact [email protected] to request access, correction or deletion, withdraw consent, or make a complaint. We review requests promptly and explain any legally required retention. We restrict access, protect credentials, verify provider notifications and maintain consent and suppression safeguards. Local mock previews do not contact MailerLite; use fictional addresses. Production signup is available only when consent, privacy and email delivery safeguards are approved and verified.