Privacy notice
Updated 29 September 2026
Steve Harding is responsible for personal information collected through this website. For questions, access requests, corrections or deletion requests, email hello@steveharding.co.uk.
Book news by email
If you subscribe, we store your email address, subscription status, request and confirmation dates, and the consent wording version. New subscriptions require email confirmation. We use this information with your consent to send occasional news about Steve’s books. You can withdraw consent using the unsubscribe link in any newsletter.
Supabase stores subscription records and Resend handles confirmation emails and newsletter delivery. Existing signup records are retained separately; a stored address alone is not treated as a newly confirmed subscription. Information is not sold.
Private reading room
When Steve invites an agent or reader, we store their name, optional email address, invitation dates and status. We record sign-ins and which manuscripts are opened against the invitation. This helps Steve manage access and follow up on his work, on the basis of legitimate interests. It does not prove who used a code or whether they read a manuscript.
Spam protection
The newsletter form uses Cloudflare Turnstile to distinguish genuine signup requests from automated abuse. Cloudflare processes browser and device signals for this check. See Cloudflare’s privacy policy.
Security and site usage
Vercel hosts this website and Supabase provides its database. These providers process technical information needed to operate and protect the service, such as IP addresses and request logs. The website uses secure, essential session cookies for owner and reading-room sign-in. Owner sessions last up to eight hours. Public pages do not use advertising cookies.
We count page views, book openings, signup requests, enquiry clicks and application errors in daily totals. These totals do not contain names, email addresses, visitor identifiers or browsing histories. A one-way security identifier based on an IP address is used temporarily to limit excessive requests.
Keeping and deleting information
Subscription records are kept while needed to manage the mailing list. Unsubscribed addresses may be retained as suppression records to prevent further mail. Invitation and activity records are kept while needed for manuscript enquiries and access management. You may request deletion or object to this processing by emailing Steve. Backups may retain older records until replaced; restored data must be checked against current unsubscribe and deletion requests before use.
Service providers and international processing
Our hosting, database and email providers may process information outside the UK. Their applicable data-processing terms and international transfer safeguards govern that processing. These providers receive information only as needed to operate their services.
Your rights
Depending on the circumstances, you can ask to access, correct, erase, restrict or obtain a copy of your information, object to processing, or withdraw consent. Withdrawing consent does not affect earlier lawful processing. You can also complain to the UK Information Commissioner’s Office.