Last updated 15 October 2026

Privacy notice

This notice explains what personal data Harris collects through useharris.com and our emails, why, who else handles it, how long we keep it and what your rights are. It's written to be read, not skimmed past.

Who we are

Harris is run by Thomas Scott in the United Kingdom. Thomas is the controller of your personal data for everything in this notice.

What we collect, why, and the lawful basis

1. The waitlist and the free kit

When you enter your email address to get the Afternoon Build Kit, we store that address with the date, the page section you signed up from, any campaign tag in the link you followed (such as utm_source) and the address of the page that sent you, if your browser shares it.

• Why: to send you the kit. Then, in our words on the sign-up form: “I’ll send a few short emails about the founding install before 30 October, then one when Harris opens. Unsubscribe any time.” Every one of those emails has a one-click unsubscribe link.
• Lawful basis: your consent, given when you sign up. You can withdraw it at any time with the unsubscribe link in any email, by replying "remove", or by emailing us. Withdrawing doesn't affect emails already sent.

2. The "Ask Harris" chat on the home page

Your question, and your last few questions in the same visit, are sent to our automation server and then to Anthropic's Claude to write the answer.

• We don't store your questions. Our automation server is set not to keep a record of chat runs.
• Rate limits: to cap use at twenty questions per visitor per day, we keep a one-way scrambled (hashed) version of your internet address for one day, then it's discarded.
• Lawful basis: our legitimate interest in answering questions about Harris and protecting the service from abuse. Please don't type personal or sensitive information into the chat.

3. Booking a fit call

Fit calls are booked through Calendly and held on Google Meet. Calendly collects your name, email address, the time you choose and anything you write in the booking form, and shares them with us so we can prepare for and hold the call.

• Lawful basis: taking steps at your request before a possible contract, and our legitimate interest in preparing for the call (for example, reading your company's public website beforehand).
• If you buy an install or a care plan, we use your details to deliver it, to bill you and to keep business records (lawful bases: contract and legal obligation).

4. Business outreach (if we emailed you first)

We may email company directors at their work address to introduce Harris, where we believe it is relevant to their business.

• What we use: your name, role, company, and a work email address, plus public facts about the company.
• Where it comes from: the public Companies House register and your company's own website.
• Lawful basis: our legitimate interest in telling relevant businesses about a business service. We keep messages short and few, and we stop as soon as you reply asking us to.
• Who we contact: directors of limited companies at their corporate email address. We don't send unsolicited marketing emails to sole traders or partnerships. [THOMAS TO APPROVE]
• Your right to object: you can object at any time, and we will stop. Reply "no" or "stop" to any message, or email [email protected]. We then keep only your email address on a do-not-contact list so we never email you again.

5. Emails you send us

Mail to [email protected] is forwarded to Thomas's own mailbox and kept as ordinary correspondence.

Cookies and tracking

This site sets no cookies and uses no analytics or advertising trackers. Fonts, images and video are served from our own site. If that ever changes, we'll update this notice and ask for your consent first where the law requires it. Calendly sets its own cookies when you open its booking page; see Calendly's own notice.

Who else handles your data

We use these service providers (processors) to run Harris. Each handles data only to provide its service to us.

International transfers: some of these providers are based in, or process data in, the United States or elsewhere outside the UK. Where they do, we rely on the UK's adequacy regulations (including the UK extension to the EU-US Data Privacy Framework, for providers certified under it) or on the UK's approved contract clauses. [TO CONFIRM: check each provider's transfer mechanism]

We don't sell your data, and we don't share it with anyone else unless the law requires it.

How long we keep it

• Waitlist: until you unsubscribe or ask to be removed, and in any case we delete addresses that haven't opened or clicked an email in 24 months. [THOMAS TO APPROVE]
• Chat: questions are not stored; the hashed internet address is kept for one day.
• Business outreach: contact details are deleted 12 months after our last message if you haven't replied. The do-not-contact list keeps only your email address, for as long as we do outreach. [THOMAS TO APPROVE]
• Customers: billing and business records are kept for six years after the end of the financial year they relate to, as UK tax law requires.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how we use it, including an absolute right to object to direct marketing;
• receive data you gave us in a portable format, where the law allows;
• withdraw consent at any time, where we rely on consent.

To use any of these, email [email protected]. We'll reply within one month.

Complaints

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator: ico.org.uk/make-a-complaint, or call 0303 123 1113.

Changes

If we change how we use your data, we'll update this page and the date at the top. If a change matters to you, we'll tell you before it takes effect.