BANDLEY WAY.

Your information. Your choices.

Privacy policy

Effective and last updated: October 14, 2026

This policy explains how Bandley Way handles personal information when you visit our website, request a free resource, use your Bandley Way account, apply as a partner, or buy from our checkout.

Questions or privacy requests: pirates@bandleyway.com. Use the subject “Privacy request.”

1. Information we collect

2. How we use information

We use information to deliver requested resources, create and secure accounts, save your work, operate the course, fulfill purchases, manage subscriptions and referrals, provide support, prevent fraud and abuse, and meet recordkeeping obligations. We also use permitted analytics and advertising information to understand visits, measure campaigns, and reach people who may be interested in Bandley Way.

When you sign up, the form describes the resource and related emails you are requesting. Course enrollment starts the course messages; access to a free chapter alone does not automatically activate the course. You can unsubscribe from marketing emails using their unsubscribe link or by contacting us. Necessary sign-in, purchase, security and service messages may still be sent.

3. Service providers and other recipients

We use providers to operate our services, including Vercel for website hosting; Supabase for app authentication, database and storage; GoHighLevel/LeadConnector for forms, customer records, email delivery, checkout and affiliate management; payment providers presented at checkout for payment processing; and Google Workspace for support email. Some signup processing also passes through our existing Jay Elliot website integration before reaching our customer records.

Google Analytics and Meta receive information when their optional tools are enabled, as explained below. They may process information under their own policies as well as provide services to us. We may also disclose information to professional advisers, service providers helping fulfill an order, authorities where legally required, or parties involved in a business transfer subject to appropriate protections. Within the app, information you share with invited collaborators can be visible to those collaborators.

Advertising-related disclosures may qualify as a “sale,” “sharing,” or processing for targeted advertising under some privacy laws, even without a cash payment for the information. You can decline advertising cookies and contact us to exercise applicable rights. We do not treat accepting marketing cookies as a condition of buying the book or accessing a requested resource.

4. Cookies, Google Analytics and Meta Pixel

Essential functions and preferences

Cookies or similar storage may be used to keep you signed in, secure forms and checkout, remember choices and operate requested services. Our cookie preference record, bandley_privacy_v1, records your choices and their date for up to 180 days. Deleting browser storage or changing browsers may require you to choose again.

Google Analytics

With analytics permission, we use Google Analytics 4 to understand how visitors use the main bandleyway.com website. Google may receive device and browser information, page and interaction data, and cookie identifiers. Read how Google uses information from sites and apps that use its services. You can decline analytics here or use Google’s Analytics opt-out browser add-on.

Meta Pixel and advertising

With advertising permission, the main bandleyway.com website uses the Meta Pixel. We and third parties, including Meta, may use cookies, pixels, web beacons and similar technologies to collect or receive information from our website and elsewhere on the Internet. This information is used to provide measurement services and to target and deliver advertising, including ads on Facebook and Instagram. The separate GoHighLevel checkout integration and its consent limitations are described below.

The information can include the page URL and referrer, visits and interactions, IP address, device and browser details, and identifiers such as Meta cookies. Meta may associate these events with your Meta account and other information it holds. See Meta’s Privacy Policy and Cookies Policy. Do not put payment details, passwords or sensitive personal information into page URLs or public form fields.

Referral attribution

Partner links may include a referral identifier. With advertising permission, our public site can remember a validated referral for up to 90 days in bandley_referral_v1 and pass it to checkout. A referral already present in a link you follow can also travel with that link without being stored by our site. GoHighLevel manages checkout attribution and partner records.

Choosing or changing cookie permissions

On the main bandleyway.com website, separate from the GoHighLevel checkout, optional Google Analytics and Meta Pixel scripts wait until you allow the corresponding category. You can accept, reject, choose categories, or reopen the controls at any time. Rejecting optional cookies does not prevent using our public forms or checkout. Withdrawal stops future optional tracking controlled by these main-website settings; it cannot recall information already sent.

Cookies on the GoHighLevel checkout

Our separate checkout at piratesat.bandleyway.com uses GoHighLevel’s native Meta Pixel and Conversions API integration. When advertising is enabled, this integration can send Meta the page URL and events for page views, content views, starting checkout, adding payment information and purchases, including purchase-event data. When supplied at checkout, email addresses, phone numbers, first and last names, and contact identifiers may be hashed and sent to Meta for advertising measurement and matching. Hashing does not make this information anonymous.

GoHighLevel controls the timing of its native integration. Its Meta components may initialize before a first-time visitor saves a cookie choice, so the checkout does not provide the same first-visit blocking as the main website. Use the checkout banner to reject optional cookies, then reload the checkout so the saved choice applies on the next page load. A saved rejection prevents the native Meta Pixel from loading on subsequent page loads; it cannot recall information already sent. The checkout does not use the main website’s GPC control.

You may need to set checkout cookie choices separately from the main website. To change them, use the Cookie settings link at the bottom of the checkout page (this resets the checkout cookie choice and reloads the page), then save your new choice. The checkout’s saved cookie choices expire after 180 days.

On the main bandleyway.com website, separate from the GoHighLevel checkout, we treat a supported Global Privacy Control (GPC) signal as a request to keep advertising tracking controlled by our cookie settings off. Browser “Do Not Track” settings are different and are not used as a consent signal. These preferences apply to this browser on the main website; the separate checkout, embedded services, payment providers, the member app and other sites have their own storage and privacy controls.

5. Advertising and communication choices

6. Privacy rights and requests

Depending on where you live and the laws that apply, you may have rights to access, correct, delete or obtain a copy of your information; restrict or object to certain processing; withdraw consent; or opt out of sale, sharing or targeted advertising. Send requests to pirates@bandleyway.com. Include the account email and the request, but do not send passwords, card numbers or identity documents unless a secure verification process is specifically arranged.

We may need to verify your identity or an authorized agent’s authority before responding. Some records must be retained for security, transactions, disputes or legal obligations. Where available, you may appeal a request decision by replying with “Privacy appeal” or complain to your local data protection authority. We will not penalize you for exercising applicable privacy rights.

Where European, UK or similar rules apply, the basis for processing depends on the activity: performing a requested service or contract; legitimate interests such as security, support and improving the service; legal obligations; or your consent, including for optional tracking where required. You can withdraw consent without affecting processing already carried out lawfully.

7. Retention, security and international processing

We retain information as needed for its stated purpose, including providing account access and saved work, processing transactions and refunds, maintaining required records, resolving disputes and protecting the service. Retention depends on the kind of record and applicable obligations. You may request deletion; limited records may remain where there is a lawful reason to retain them.

We use access controls and other safeguards appropriate to our services, but no Internet service or transmission is completely secure. Our providers may process information in the United States or other countries. Applicable protections and transfer requirements depend on the provider, service and jurisdiction.

8. Children, external services and updates

Bandley Way is intended for adults working on products and businesses, not children under 13. If you believe a child has provided personal information, contact us so we can investigate and address it. Links and embedded third-party services have their own privacy practices; this policy does not replace their policies.

We may update this policy when our services, practices or requirements change. The date at the top identifies the latest update. Material changes will be communicated when required.

9. Independent of Apple and Meta

Bandley Way and its books, courses, tools and services are not affiliated with, authorized, sponsored or endorsed by Apple Inc. Apple does not endorse these products or services. Bandley Way is also not sponsored, administered or endorsed by Meta Platforms, Inc., Facebook or Instagram. Using their advertising or analytics tools does not imply endorsement. See our full disclaimer.