Privacy Policy
Last updated: 22 September 2026
Overlay Research takes the protection of personal data seriously. This Privacy Policy explains what personal data we collect through this website, why we use it, how long we keep it, and the rights available to you.
This policy applies to the Overlay Research website. It does not describe the data practices of future Overlay products or research activities, which may be subject to their own privacy information and consent processes.
1. Who is responsible for your data?
The data controller for this website is:
Overlay Research
SASU with a share capital of €5,000
60 rue François 1er
75008 Paris
France
SIREN: 942 980 707
For questions about this Privacy Policy or to exercise your data protection rights, you can contact us at: kevin@overlayresearch.com
2. What personal data do we collect?
Information you provide through the contact form
If you use the contact form on this website, we collect:
your email address;
the category you select under “I am…”;
the area you select under “I am interested in…”; and
any information you choose to include in the optional message field.
The email address and selections requested by the form are necessary for us to understand and respond to your enquiry. The message field is optional.
Please avoid including sensitive personal information in the message field unless it is necessary for your request.
Website analytics
This website is built and hosted using Framer.
Framer provides built-in, privacy-preserving website analytics. These provide aggregated information about use of the website, including metrics such as page views, referral sources, countries, device types, browsers and operating systems.
According to Framer, its built-in analytics do not use cookies or persistent identifiers and do not collect or store information that identifies an individual.
We do not currently use Google Analytics or other third-party advertising or behavioural tracking tools on this website.
3. Why do we use your personal data?
We use information submitted through the contact form to:
receive and respond to your enquiry;
understand your interest in Overlay, Mnemea, research, partnerships, or other areas you select;
continue a conversation that you have initiated;
follow up where relevant to the request or interest you expressed; and
manage our relationships with people and organisations that contact Overlay Research.
Submitting the contact form does not automatically subscribe you to a newsletter or general marketing list.
Where we respond to a request or take steps at your request before entering into a potential contractual relationship, processing may be necessary to take those steps.
For general enquiries, relationship management, relevant follow-up and operation of the website, we may rely on our legitimate interests in communicating with people who contact Overlay Research, developing our activities and operating our website, provided that those interests are not overridden by your rights and interests.
Where applicable law requires your consent for promotional or other communications, we will obtain that consent before sending them.
4. Who receives your personal data?
Personal data is accessible only where necessary for the purposes described above.
We currently use the following service providers:
Framer
The website is built and hosted using services provided by Framer B.V., based in the Netherlands.
Framer may process technical website data and information submitted through website forms in connection with providing its services to Overlay Research.
Proton
Emails generated through the contact form and subsequent correspondence are handled using Proton Mail, provided by Proton AG in Switzerland.
Proton provides security and encryption measures for its email services and acts as a service provider in connection with our use of Proton Mail.
We do not sell your personal data.
We may also disclose personal data where required by law, regulation, legal process, or a competent authority.
5. International data transfers
Some of the service providers used to operate this website or communicate with you may process personal data outside the European Economic Area.
Proton AG is based in Switzerland. Switzerland benefits from an adequacy decision of the European Commission for transfers of personal data.
Framer is based in the Netherlands and may use service providers located outside the European Economic Area. Where personal data is transferred internationally, Framer provides for appropriate transfer mechanisms in accordance with applicable data protection law, including adequacy decisions, the EU-US Data Privacy Framework where applicable, and Standard Contractual Clauses where required.
6. How long do we keep your personal data?
Information submitted through the contact form is kept only for as long as reasonably necessary for the purposes for which it was collected.
For enquiries and prospective relationships, we generally retain relevant contact information and correspondence for up to three years from its collection or from your last meaningful interaction with us, unless:
an ongoing relationship requires us to keep it for longer;
you ask us to delete it earlier and no overriding reason requires its retention; or
a longer retention period is necessary to comply with a legal obligation or to establish, exercise, or defend legal claims.
Technical information associated with website operation and analytics is retained according to the applicable settings and retention practices of the service providers involved.
7. Cookies and tracking
We do not currently use advertising cookies or behavioural tracking technologies on this website.
Framer's built-in analytics operate without cookies or persistent identifiers.
If we introduce technologies in the future that require consent under applicable law, we will update this Privacy Policy and implement an appropriate consent mechanism before using them.
8. Your rights
Subject to the conditions provided by applicable data protection law, you may have the right to:
access the personal data we hold about you;
ask us to correct inaccurate or incomplete personal data;
ask us to delete your personal data;
ask us to restrict the processing of your personal data;
object to processing based on our legitimate interests;
receive certain personal data in a portable format where the right to data portability applies; and
withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, contact:
We may need to request information necessary to verify your identity before acting on a request.
You also have the right to lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), the French data protection authority.
9. Children
This website is not specifically directed at children.
We do not intentionally ask visitors to provide their age through the contact form. If you are a minor, you should avoid providing unnecessary personal information through the website.
10. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.
We also select service providers with security and data-protection measures appropriate to the services they provide. However, no internet transmission or information system can be guaranteed to be completely secure.
11. Links to other websites
This website may contain links to websites or services operated by third parties.
Their processing of personal data is governed by their own privacy policies and practices. Overlay Research is not responsible for the privacy practices of third-party websites.
12. Changes to this Privacy Policy
We may update this Privacy Policy as the website, our services, or applicable legal requirements evolve.
When we make changes, we will update the “Last updated” date at the top of this page. Where a change materially affects how we process personal data, we will provide additional information or notice where appropriate.