Your privacy

Stripe collects your payment details and the contact details our team needs to arrange your class. Card details are handled by Stripe.

WhatsApp booking assistance

After you purchase a trial, we use the phone number collected by Stripe to send a WhatsApp payment acknowledgement and arrange your first class through our GoHighLevel customer service system. We share your phone number and confirmed trial details for this purpose. These booking messages are separate from advertising cookies. You can reply STOP to stop WhatsApp messages, or contact Ms. Haley at 011-1079 8168 for assistance or a deletion request.

Post-class feedback and team follow-up

When you complete our Pilates check-in, we store your name, contact details, class rating, goals, preferences and feedback. Authorised team members use this information to improve classes and discuss your next steps. We also keep verified trial payment references and team follow-up notes. Your survey answers are not sent to Google or Meta or used as advertising event data. Contact Ms. Haley at 011-1079 8168 to request access, correction or deletion.

Website statistics

We count page views, broad device categories, referring website names and campaign labels to understand our website performance. Our aggregate traffic counters do not use visitor profiles. Separately, we keep first-party event, contact and attribution records to connect booking activity with verified purchases and staff-confirmed membership outcomes. Repeated views are counted separately. Your browser’s Do Not Track or Global Privacy Control preference disables page-view collection. Checkout and verified payment totals remain part of our business records.

Cookies, Meta Pixel and Conversions API

We use Meta Pixel in your browser and the Conversions API on our server to measure advertising and attribute confirmed trial purchases and staff-confirmed attendance and membership purchases. Data may include cookies and browser identifiers, ad-click identifiers, IP address, browser information, purchase time, value and currency, plus SHA-256 hashed name, email, phone and customer identifiers for customer matching. Hashing does not make this information anonymous. We do not send card details or survey answers to Meta.

Our website uses connection-country information from our hosting provider; when unavailable, our server may send your connection IP to IPWHOIS to estimate the country to apply regional tracking settings. In the EU/EEA, United Kingdom and Switzerland, advertising tracking waits for your agreement. If the country lookup fails, tracking is enabled by default. Outside those regions, including Malaysia, tracking is enabled by default unless you turn it off. This default is not recorded as your explicit consent.

You can turn advertising tracking off or on through Cookie settings. We respect saved opt-outs and supported Global Privacy Control and Do Not Track signals. You can purchase without advertising tracking. Turning it off stops new events from this browser and withdraws eligibility for its current checkout where the server has not already sent the purchase. It does not undo information already shared. Previous explicit refusals are kept. Existing visit-only permissions retain their original matching scope.

Google Ads purchase measurement

When advertising tracking is allowed, Google Ads uses browser cookies, ad-click identifiers and browser connection information to measure visits and purchases from our ads. After Stripe confirms payment, our receipt page sends the purchase value, currency and a unique transaction identifier to Google to prevent duplicate counting. We do not send contact fields, card details or survey answers through this Google purchase tag. The regional settings, saved opt-outs and privacy signals described above also apply to Google Ads.

Payment confirmation

We use an essential checkout cookie and Stripe’s payment confirmation to show your receipt and prevent duplicate reporting. Campaign attribution and the visitor cookie last for 90 days. Expired visit-level identifiers are cleared during later website activity. First-party event and business records are retained for reporting and follow-up until a deletion request or scheduled retention review. Minimal payment references are retained for reconciliation and duplicate prevention.

Contact records and website behaviour

When you submit a booking form, we store your name, phone and email before payment so our team can help with your enquiry. Contact and check-in records may be synchronised to GoHighLevel for staff follow-up, using your stated preferences. We store campaign labels, ad-click identifiers and QR sources for attribution. When configured and tracking is allowed, Microsoft Clarity records interaction patterns on our public landing pages. Contact fields are masked; Clarity is not loaded on feedback forms or staff pages.

Media and questions

Our photos and videos may load from our media hosting provider. For questions about your personal information or a deletion request, contact The Lazy Kamp using the contact details on your payment receipt or speak to our team at the studio next to INTI College Nilai.