Privacy Policy

Who we are

This website, williamscxtt.com, is operated by Will Scott, a sole trader based in the United Kingdom. If you have any questions about this policy or how your data is handled, contact us at will@williamscxtt.com.

What information we collect

We collect the following categories of personal data:

• Payment information — when you purchase the Physique Blueprint, your payment is processed by Stripe. We do not store your card number, CVV, or bank details. Stripe retains payment data under their own privacy policy.
• Email address — if you choose to provide your email address on the thank-you page after purchase, we use it to send you your download link. This is optional.
• Usage data — anonymous analytics data (pages visited, device type, country, referral source) collected via Vercel Analytics. This does not identify you personally.
• Transaction records — Stripe provides us with a payment reference and confirmation of successful payment. We retain this to verify purchases and handle any support requests.

How we use your information

We use the data we collect for the following purposes:

• To fulfil your purchase and deliver the digital product.
• To send your download link if you provide an email address.
• To verify payment in the event of a support request.
• To understand how people use the site so we can improve it.

We do not use your data for advertising, profiling, or automated decision-making.

Who we share your data with

We share data with the following third-party service providers only to the extent needed to operate the site:

• Stripe — payment processing. Stripe is PCI-DSS compliant and processes your card data directly. Their privacy policy is at stripe.com/privacy.
• Resend — transactional email delivery. If you provide an email address, it is sent to Resend to deliver your download email. Their privacy policy is at resend.com/legal/privacy-policy.
• Vercel — website hosting and analytics. Vercel may process anonymised request data as part of serving the site. Their privacy policy is at vercel.com/legal/privacy-policy.

We do not sell your data. We do not share it with any other parties.

How long we keep your data

Transaction records are retained for up to 7 years for accounting purposes, in line with HMRC requirements. If you provided an email address, it is stored in Resend's systems for as long as we maintain an active Resend account. You can request deletion at any time by emailing us.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data, where we are not legally required to retain it.
• Object to or restrict how we use your data.
• Lodge a complaint with the ICO (ico.org.uk).

To exercise any of these rights, email us at will@williamscxtt.com. We will respond within 30 days.

Customer support

If you contact us for support — for example, if you have a problem accessing your download — we will use the information you provide (your email address and payment reference) solely to resolve your issue. We do not add support enquiries to any mailing list, and we do not share that information with third parties. Correspondence is kept for up to 12 months in case a follow-up is needed, then deleted.

Cookies

This site does not use first-party cookies for tracking or advertising. Stripe may set cookies as part of the payment flow. Vercel Analytics uses privacy-friendly, cookie-free tracking.

Security

The site is served over HTTPS. Payment data is processed directly by Stripe and never passes through our servers. We do not store card details or sensitive financial information. Access to our third-party accounts (Stripe, Resend, Vercel) is protected with strong passwords and two-factor authentication.

Changes to this policy

We may update this policy from time to time. The date at the top of this page will reflect when it was last changed. Continued use of the site after changes are published means you accept the updated policy.