This privacy policy explains how Steven Lewis, trading as Steven Lewis Official (“we”, “us” or “our”), collects, uses, shares and protects personal information when you visit stevenlewisofficial.com (the “site”), contact us or buy our digital products. We are based in the United Kingdom and we aim to protect your information wherever in the world you live.
Last updated: 16 October 2026.
In this policy
- Who We Are and How to Contact Us
- Information We Collect
- How and Why We Use Your Information
- Cookies and Similar Technologies
- Who We Share Your Information With
- International Transfers
- How Long We Keep Information
- Your Rights Under UK and EU GDPR
- Additional Information for US Residents
- Canada, Australia, Brazil and Other Countries
- Children’s Privacy
- Security
- Links to Other Sites and Platforms
- Changes to This Policy
- Complaints
1. Who We Are and How to Contact Us
Steven Lewis, trading as Steven Lewis Official, is the controller of the personal information described in this policy and is based in the United Kingdom.
You can contact us about privacy, or make a request, through our contact page. Please say that your message is a “privacy request” so we can deal with it quickly.
2. Information We Collect
Information you give us
- Your name, email address and the contents of any message you send through our contact form or by other means
- Comments or other content you submit on the site
Purchase information
- Purchases are made on third-party platforms such as Stan Store, which collect your name, email address, billing details and payment details and use payment processors. We may receive limited order details, such as your name, email address, product and date of purchase, but we do not receive your full card number.
Information collected automatically
- Your IP address, browser and device type, pages viewed, referring page, approximate location and the date and time of your visit, collected through server logs, cookies and analytics tools such as Google Analytics (through Google Site Kit)
Sensitive information
- We do not ask for sensitive personal information, such as health, financial account or government ID details. Please do not send it to us.
3. How and Why We Use Your Information
| Purpose | Examples | Legal basis (UK and EU GDPR) |
|---|---|---|
| Reply to enquiries | Answering messages sent through the contact form | Legitimate interests, or steps you ask us to take before a contract |
| Provide products and support | Delivering downloads and helping with orders | Performance of a contract |
| Run, secure and improve the site | Analytics, fixing errors, preventing spam and abuse | Legitimate interests, and consent for non-essential cookies |
| Marketing emails and updates | Only if you sign up to receive them | Consent, which you can withdraw at any time |
| Legal and accounting | Tax records and resolving disputes | Legal obligation and legitimate interests |
We do not make automated decisions about you that have legal or similarly significant effects.
4. Cookies and Similar Technologies
We use cookies and similar technologies to make the site work and, where you agree, to understand how it is used. Read our Cookie Policy for the full details and how to change your choices.
5. Who We Share Your Information With
We do not sell your personal information. We share it only with:
- Hosting, security and infrastructure providers that keep the site running
- Analytics providers, such as Google, where cookies are accepted or the law allows
- Form, email and website tools that deliver messages sent to us
- Checkout and payment platforms, such as Stan Store and its payment processors, when you buy
- Professional advisers, such as accountants and lawyers
- Authorities, courts or other parties where the law requires it or to protect our rights
- A buyer or successor if our business is ever sold or reorganised, with the same protections for your information
These providers may only use your information to provide their services to us or as their own legal obligations require.
6. International Transfers
We are based in the UK, and the providers we use may process information in other countries, including the United States. Where we transfer personal information from the UK or the European Economic Area to a country without an adequacy decision, we use approved safeguards such as the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses, or rely on an adequacy decision where one applies. Contact us through our contact page for more information.
7. How Long We Keep Information
We keep personal information only for as long as we need it for the purposes in this policy. Messages are kept while we deal with them and for a reasonable period afterwards. Order and tax records are kept for as long as the law requires, which in the UK is generally six years. When we no longer need information, we delete or anonymise it.
8. Your Rights Under UK and EU GDPR
If the UK or EU GDPR applies to you, you have the right to:
- Access the personal information we hold about you
- Correct information that is inaccurate or incomplete
- Ask us to delete your information
- Ask us to restrict how we use it
- Object to our use of it, including for direct marketing
- Receive it in a portable format
- Withdraw consent at any time, without affecting earlier use
To use a right, send a privacy request through our contact page. We respond within one month, which we may extend by up to two months for complex requests. We do not normally charge a fee, and we may need to verify your identity first.
9. Additional Information for US Residents
If you live in California or another US state with a privacy law, such as Virginia, Colorado, Connecticut, Utah or Texas, you may have the following rights in addition to those above, subject to the law’s conditions:
- To know and access the categories and specific pieces of personal information we collect, use and disclose
- To correct and delete your personal information
- To opt out of the sale or sharing of personal information. We do not sell personal information, and we do not knowingly sell or share the information of anyone under 16
- Not to be treated unfairly for using your rights
In the past 12 months we may have collected identifiers (such as IP address and email address), internet activity (such as pages viewed) and commercial information (such as order records) for the purposes described above, and disclosed them to the service providers listed above. We do not collect sensitive personal information. Where an analytics tool counts as “sharing” under a state law, you can opt out through our cookie settings or a browser setting such as the Global Privacy Control, which we respect where required.
To make a request, or to appeal a decision where your state allows it, use our contact page. An authorised agent may make a request on your behalf with your written permission.
10. Canada, Australia, Brazil and Other Countries
- Canada: under PIPEDA you can ask to access and correct your information and withdraw consent, and you can complain to the Office of the Privacy Commissioner of Canada.
- Australia: under the Privacy Act 1988 you can ask to access and correct your information, and complain to the Office of the Australian Information Commissioner.
- Brazil: under the LGPD you can ask us to confirm that we process your data, access, correct, anonymise, delete or port it, and request information about sharing or revoke consent. You can complain to the ANPD.
- Everywhere else: we respect the rights you have under your local data protection law. Contact us through our contact page and we will help.
11. Children’s Privacy
Our site and products are not aimed at children under 13, or under 16 where your local law sets a higher age. We do not knowingly collect personal information from children. If you think a child has given us information, contact us and we will delete it.
12. Security
We use reasonable technical and organisational measures to protect your information, including encrypted connections and restricted access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Where the law requires us to tell you or a regulator about a data breach, we will.
13. Links to Other Sites and Platforms
Our site links to other websites and platforms, such as Stan Store and social media. We do not control them and are not responsible for their privacy practices, so please read their policies.
14. Changes to This Policy
We may update this policy from time to time. We will change the date at the top, and where a change is significant we will make that clear on the site.
15. Complaints
We would like the chance to put things right first, so please contact us through our contact page. You also have the right to complain to a data protection authority. In the UK this is the Information Commissioner’s Office (ICO). If you live in the EU or elsewhere, you can contact your local authority.