Privacy Policy

Last updated 1 September 2026

This policy explains what personal data Cole Anderson James ("we", "us") collects through coleandersonjames.com (the "Service"), why we collect it, and how you can control it.

There is no support email address. Everything, questions about your purchase, your account, your data, goes to one place: a direct message to Instagram at coleanderson.j.

Who we are

Cole Anderson James is the trading name behind the Build & Bulk training programme and this web app. We are the data controller for the personal data described below.

What we collect

We collect only what we need to sell you the programme and run your account:

• • Your email address, used to send your sign in link and your purchase receipt.
• • Payment details, handled entirely by Stripe. We never see or store your card number.
• • Purchase records: the Stripe reference, the amount, the currency, and the date.
• • Workout data you enter yourself: sets, reps, weight logged, bodyweight entries, and your choice of kilograms or pounds.
• • Basic technical data, such as your IP address and device type, generated automatically when you use the Service, for security and fault finding.
• • Anonymous page view statistics, collected by Vercel Analytics without cookies and never tied back to you personally.

Why we collect it

We use your data to give you access to the programme you paid for, keep your account secure, remember your training history so the tracker works, process payment and handle receipts and refunds queries, and respond when you contact us. We do not use your data for advertising, and we do not sell your data to anyone.

Who we share it with

We use a small number of processors to run the Service, each of whom only sees what they need to do their job: Stripe (payment processing), Neon (database hosting and sign in links), Vercel (application hosting and anonymous analytics), and Mux (video hosting and playback). None of these processors are permitted to use your data for their own purposes.

Cookies

We use a single functional cookie to keep you signed in. We do not use advertising or cross-site tracking cookies, and our page view statistics are collected without cookies. Stripe and Mux may set their own limited cookies when you check out or play a video, governed by their own privacy policies.

How long we keep it

We keep your account and your training data for as long as your account exists. Purchase records are kept for six years from the end of the financial year the purchase falls in, because UK tax law requires it. Security records, such as the counters behind our rate limits, are short lived and clear themselves automatically.

Your rights

You can ask us at any time to give you a copy of the personal data we hold about you, correct anything that is wrong, or delete it. You can also ask us to stop using it. All of these are free, and we will not treat you any differently for asking.

How to make a request

Send a direct message to Instagram at coleanderson.j. Because an Instagram account is not proof of who bought the programme, we will ask you for two things before we action anything:

• • The email address you used at checkout.
• • Either the date you bought or the amount you paid.

We check both against the payment record before touching any data, and we will not action a request that does not match. That step exists to stop somebody else reading or deleting your training history. If you have lost access to the email address on the account, say so in the message and we will find another way to confirm it is you.

What we delete, and what we have to keep

If you ask us to delete your data, we remove:

• • Your account and your sign in details.
• • Your workout history: every set, rep and weight you have logged.
• • Your bodyweight entries and your unit preference.
• • Your email address from our purchase record.

What we cannot remove is the transaction itself. Stripe holds the record of your payment, and UK tax law requires transaction records be kept for six years from the end of the financial year they fall in. Stripe does not permit a completed charge to be deleted in any case. What remains is the amount, the date, and the card details Stripe holds, which we have never had access to.

Deleting your data ends your access to the programme permanently. We will not be able to restore it, and you would need to buy again. We will say this back to you before we action a deletion, so nobody loses access by accident.

How long we take

We will confirm we have received your request within five working days, and complete it within one month. If a request is unusually complex we may extend that by up to a further two months, which is the limit UK data protection law allows, and we will tell you if that happens and why.

Complaints

If you are unhappy with how we have handled your data, message us first and we will try to put it right. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page. Continued use of the Service after a change means you accept the update.