Privacy notice
How Overheard Research handles personal data on this website. Last updated 25 September 2026.
- Responsible
- Lalida Sritanyaratana UX Research (Lalida Sritanyaratana)
Zürich, Switzerland - Contact
- (turn on JavaScript to see the address)
Visiting the website
When you open a page, the hosting provider processes technical data such as your IP address, browser type and the time of the request. This is needed to deliver the pages, protect the site from attacks and produce aggregated statistics, for example how many visits a page gets. I don’t use this data to identify you, for advertising, or to build profiles.
Contact form and email
When you send the contact form, I receive your name, email address, company (if you give one) and your message. The message is delivered to my email inbox; the website itself doesn’t store it. If you email me directly, I receive your email address and message in the same way. I use this information only to reply to you and, if we decide to work together, to prepare that work. I don’t sell it or pass it on.
Giving this information is voluntary. Without a name, email address and message I can’t reply to you.
Spam protection
The contact form uses a spam-protection service to check that a person, not a bot, is sending it. For this check, the service evaluates technical signals from your browser, such as your IP address and browser characteristics.
Recipients and transfers abroad
External providers host this website, provide the spam protection, forward email for this domain and store my email. They process data on my behalf, mainly in Switzerland, the European Union and the United States, and in other countries where they run data centres. Transfers to the United States rely on the provider’s certification under the Swiss-U.S. and EU-U.S. Data Privacy Frameworks, or on standard contractual clauses.
How long data is kept
Technical data from page visits is kept only as long as the hosting provider needs it for delivery and security, under its own retention periods. I keep messages as long as needed to answer them and for our correspondence. If we work together, business records are kept as long as Swiss law requires, generally ten years.
Legal basis
This notice follows the Swiss Federal Act on Data Protection (FADP). For visitors in the EU or EEA, processing is based on Art. 6(1)(b) GDPR (steps you asked for before a possible contract) and Art. 6(1)(f) GDPR (my legitimate interest in answering enquiries and keeping the site secure).
Your rights
You can ask what personal data I hold about you and receive a copy of it, and ask me to correct or delete it, to restrict its use, or to stop using it. Write to the email address above. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, to your local data protection authority.
Third-party providers
Hosting, spam protection and email forwarding for this website are provided by Cloudflare, Inc. Its privacy policy is at cloudflare.com/privacypolicy.