Effective 31 July 2026
Privacy Notice
This notice explains what happens to personal information submitted through the Sibley Hill Press website, why it is used, and how to make a request about it.
01
Who is responsible
Sibley Hill Press is an independent, unincorporated publishing imprint responsible for determining how personal information submitted through this website is processed. The service is administered from Saudi Arabia.
Privacy requests are made through the same secure, email-verified contact channel used for other correspondence. A public email address is not required to exercise your rights.
02
What we collect
When you contact the press, we collect your verified email address, inquiry category, subject, message, and any optional or category-specific details you choose to provide, such as your name, organization, book, proposed use, territory, deadline, outlet, or affected webpage.
The verification process also creates temporary security records: an email challenge, cryptographic hashes, verification status, timestamps, and rate-limiting records. The website does not create a user account and does not retain the content of ordinary messages in its website database.
For a privacy request, a minimal administrative log is retained containing its reference, a cryptographic hash of the verified email address, request category and type, dates, status, and any reason for a refusal or partial refusal. It does not contain the request message, full email address, name, or identity documents.
03
Why we use it
Information is used to authenticate the return address, route and answer correspondence, consider rights and institutional inquiries, operate the website securely, prevent abuse, and meet applicable legal obligations. Depending on the inquiry and applicable law, processing may be necessary to respond at your request, based on legitimate publishing and security interests, based on consent, or required by law.
The fields marked as required are necessary to verify and deliver the inquiry. Without them, the contact request cannot be submitted. Please do not include sensitive personal information unless it is genuinely necessary.
04
Email verification and security
A six-digit, single-use code is sent to the address you provide. It expires after 10 minutes; a successful verification session expires after 20 minutes. Cloudflare Turnstile is used to distinguish legitimate use from automated abuse. Security and rate-limit records are removed after approximately 24 hours.
06
How long information is kept
Temporary verification and rate-limit records are removed after approximately 24 hours. Irrelevant or abusive correspondence may be deleted within 90 days. Ordinary correspondence may be retained for up to two years after the last substantive exchange. Rights, permissions, contractual, legal, or institutional records may be kept longer where reasonably necessary.
The minimal privacy-request log may be kept for up to three years after closure, unless a longer period is required to establish compliance or address a legal claim. Mail providers may retain delivery and mailbox records according to configured services and applicable law.
07
Your rights and how identity is verified
Depending on applicable law, you may ask to access, correct, or delete personal information; restrict or object to its use; withdraw consent; or ask a question about processing.
A request can affect only information associated with the exact address verified by the one-time code. Each additional email address requires a separate verified request. If an address cannot be verified and no independent identifier exists, Sibley Hill Press cannot safely disclose, change, or delete information associated with it.
08
Children and changes to this notice
This contact service is not directed to children. If you are under 18, ask a parent or guardian to contact the press on your behalf. This notice may be updated when the website, its providers, or legal requirements change. The effective date above identifies the current version.