Privacy statement

Last reviewed: 22 October 2026

Who collects the information

The School of Self Defence is a Todd Group training service. Website enquiries and operations are managed through the Todd Group headquarters in Dunedin, New Zealand.

For privacy queries, you can contact the Todd Group headquarters by telephone on +64 3 477 8902 or through our website enquiry form.

Information we collect

We collect and process information in the following categories:

• Enquiry and application details: When you submit an application or enquiry, we collect your name, phone number, email address, general location, training interest, availability, previous experience, reasons for training and any relevant physical limitations you choose to share.
• Necessary site preferences and security: We store local browser preferences such as theme appearance (light, dark or system) and secure consent cookies to remember your privacy choices. Form submissions are verified using Cloudflare Turnstile to prevent automated spam and abuse.
• Technical infrastructure processing: Technical network information required to serve pages, maintain security and protect the website against denial-of-service attacks is processed by Cloudflare at the edge.
• Optional analytics: Only with your affirmative consent, Google Analytics 4 and Cloudflare Web Analytics may collect pseudonymous usage metrics to help us understand how the website is used.

Why information is collected

Information is collected strictly to:

• respond to your training enquiry;
• assess applicant suitability and training requirements;
• provide schedule, fee and induction details;
• maintain website security and prevent abuse; and
• understand overall website usage and improve content (only where optional analytics is permitted).

Consent management and your choices

We respect your privacy choices. The website categorises storage and processing into two visitor-facing groups:

• Necessary: Always active. This includes essential site delivery, security verification and the secure storage needed to remember your consent decision. It cannot be disabled through the consent interface.
• Optional analytics: Disabled by default. Controls Google Analytics 4 and Cloudflare Web Analytics. No analytics scripts, beacons or measurement requests are transmitted before you provide affirmative permission.

Your privacy choice remains valid for up to 180 days. Navigating between pages or refreshing does not automatically extend this period. When this period expires, or if the website's consent configuration changes materially, you will be prompted for a fresh choice.

You can review, change or withdraw your consent at any time:

Review privacy choices

Withdrawing consent immediately stops optional analytics, clears applicable Google Analytics cookies, and prevents further beacon transmissions. Consent is browser-scoped and site-specific to the School of Self Defence.

Central Consent Receipt Service

When you grant, modify or withdraw optional consent, a cryptographic audit record is submitted to the central Means & Measure Consent Receipt Service (consent.meansandmeasure.com). This evidence verifies that consent was affirmatively granted or withdrawn in compliance with privacy regulations.

This service receives only minimal, opaque evidence: an opaque receipt identifier, an event identifier, category booleans, configuration version hashes and authoritative timestamps. It never receives your name, email address, IP address, user agent, referrer, device fingerprint or website browsing activity.

Google Analytics 4

Subject to your affirmative permission, we use Google Analytics 4 (measurement ID G-4ZQ161GGXF) provided by Google LLC to measure general traffic trends and page interaction.

• Google Analytics is loaded dynamically only after verified consent.
• Advertising personalisation signals, Google signals and advertising storage are disabled.
• No cross-site tracking or remarketing is conducted.
• Upon withdrawal of consent, Google Analytics cookies (such as _ga and _gid) are deleted and tracking is disabled immediately.

For more information, see Google's Privacy Policy.

Cloudflare services

This website uses Cloudflare, Inc. for edge hosting, DNS, content delivery, SSL/TLS encryption and Turnstile bot protection.

Infrastructure and security: Essential network and security processing is performed by Cloudflare as a necessary infrastructure provider to deliver the website securely and protect it against malicious traffic. This processing does not require optional analytics consent.

Optional Cloudflare Web Analytics: With your affirmative permission, Cloudflare Web Analytics (token d14445af28df4e348709a84bcee0251a) measures aggregate website performance and page views using a client-side beacon without using visitor tracking cookies. The beacon is blocked from loading or executing until consent is verified.

For more information, see Cloudflare's Privacy Policy.

Storage and retention

Contact and application submissions are retained in a secure database only for as long as reasonably required to process your application, communicate joining instructions and meet administrative requirements. Form submissions are automatically pruned after 90 days. Detailed personal medical history should not be submitted through the public form.

Consent receipts are retained in the central evidence service for 24 calendar months following withdrawal or expiry, after which they are permanently pruned.

Access and correction under New Zealand Privacy Act 2020

In accordance with the New Zealand Privacy Act 2020, you have the right to request access to any personal information we hold about you and to request correction if it is inaccurate.

To request access or correction, contact the Todd Group headquarters by phone on +64 3 477 8902 or through our online contact form.

Overseas processing

Technical service providers including Cloudflare and Google operate global infrastructure and may process technical telemetry and analytics data on secure servers located outside New Zealand, subject to their respective privacy commitments and standard contractual safeguards.

Changes to this statement

This privacy statement may be updated when our services, technologies or legal obligations change. The date at the top of this statement indicates when it was last reviewed.