Privacy notice
Updated 29 September 2026
Steve Harding is responsible for personal information collected through this website. For questions, access requests, corrections or deletion requests, email hello@steveharding.co.uk.
Book news by email
If you sign up, we store your email address, signup source and date in Supabase so Steve can send occasional news about his books with your consent. The website does not send automatic confirmation emails. You can withdraw consent or ask to leave the list by emailing hello@steveharding.co.uk. Information is not sold.
Private reading room
When Steve invites an agent or reader, we store their name, optional email address, invitation dates and status. We record sign-ins and which manuscripts are opened against the invitation. This helps Steve manage access and follow up on his work, on the basis of legitimate interests. It does not prove who used a code or whether they read a manuscript.
Security and site usage
Vercel hosts this website and Supabase provides its database. These providers process technical information needed to operate and protect the service, such as IP addresses and request logs. The website uses secure, essential session cookies for owner and reading-room sign-in. Owner sessions last up to eight hours. Public pages do not use advertising cookies.
We count page views, book openings, signup requests, enquiry clicks and application errors in daily totals. These totals do not contain names, email addresses, visitor identifiers or browsing histories. A one-way security identifier based on an IP address is used temporarily to limit excessive requests.
Keeping and deleting information
Subscription records are kept while needed to manage the mailing list. Unsubscribed addresses may be retained as suppression records to prevent further mail. Invitation and activity records are kept while needed for manuscript enquiries and access management. You may request deletion or object to this processing by emailing Steve. Backups may retain older records until replaced; restored data must be checked against current unsubscribe and deletion requests before use.
Service providers and international processing
Our hosting, database and email providers may process information outside the UK. Their applicable data-processing terms and international transfer safeguards govern that processing. These providers receive information only as needed to operate their services.
Your rights
Depending on the circumstances, you can ask to access, correct, erase, restrict or obtain a copy of your information, object to processing, or withdraw consent. Withdrawing consent does not affect earlier lawful processing. You can also complain to the UK Information Commissioner’s Office.