How we handle your data.

Overlay Graphics Ltd (referred to in this document as “Overlay”, “we”, “us”) is a design-led brand agency for trades vehicles based in Maidstone, Kent. This privacy policy explains how we collect, use and protect personal data when you use our website at overlaygraphics.co.uk or request a quote from us.

For the purposes of UK GDPR, we are the data controllerfor your data. The data controller's contact is hello@overlaygraphics.co.uk.

When you submit a quote request,we collect: your name, email address, phone number (if you provide one), business name, location, industry, fleet size, the details of the work you want done, your timeline, your budget, and any photos you upload. We use this to prepare a quote, contact you about the work, and keep a record of jobs we've handled. Legal basis: legitimate interest (preparing the quote you've asked for) and, where you create an account, contract (providing the service).

When you create an account, we additionally store your sign-in identity (email address only — there are no passwords; sign-in works via magic links emailed to you). We link any earlier guest quotes matching your email to your new account so you can see your history in one place.

When you visit the website, we record anonymous, aggregated analytics (page views, referrer, country, device type) using Vercel Analytics. This data is not tied to your identity, does not use cookies, and is processed under legitimate interest (understanding what works on the site).

We do not use marketing cookies, advertising trackers or third-party fingerprinting.

Your data is held by us. We use a small number of trusted infrastructure providers to operate the site, each of whom processes data only on our instructions:

• Supabase (database and authentication) — your account, quote details, and uploaded photos are stored on Supabase's EU infrastructure.
• Resend (transactional email) — used to send quote confirmations, magic-link sign-in emails, and status updates to you.
• Vercel (hosting and analytics) — runs the website and provides anonymous traffic analytics.

We do not sell or rent your data, ever. We do not share it with advertisers.

We keep quote requests for as long as is reasonable to handle the job and its aftermath — typically 6 years, which aligns with UK statutory record-keeping requirements for businesses. Account data is kept for as long as your account is active. You can ask us to delete everything at any time (see Your rights below).

Under UK GDPR you have the right to:

• Access — ask us for a copy of the data we hold about you.
• Correct — ask us to fix anything that's wrong.
• Delete — ask us to delete your data. You can do this yourself from your account settings, or by emailing us.
• Object — tell us to stop processing your data for a particular purpose.
• Port — receive your data in a portable format (CSV) so you can take it elsewhere.
• Complain— if you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.

To exercise any of these rights, email hello@overlaygraphics.co.uk. We aim to respond within 30 days.

If we wrap your vehicle, we may photograph the finished work for our portfolio, social media, and case studies. We always ask before publishing. If you'd rather we didn't, just tell us at the time of the quote or any point after — no questions asked.

The site sets one technical cookie when you sign in (the Supabase auth cookie), to keep you logged in across pages. There are no marketing, advertising or tracking cookies. We don't show a cookie banner because the only cookie we set is strictly necessary for authentication.

If we change anything material, we'll update the date at the top of this page and, if you have an account, email you to let you know.