Last updated: July 21, 2026

We attach great importance to the protection of personal data. This privacy policy (“Privacy Policy”) aims to inform you, regardless of your status (customer, prospect, supplier, candidate, partner, or internet user) (“you”), about how your data may be processed in the context of our relationship.

The Privacy Policy complies with the legal provisions applicable to the protection of personal data, particularly those defined by Law No. 78-17 of January 6, 1978, known as the "Loi Informatique et Libertés" (Data Protection Act), and by the General Data Protection Regulation No. 2016/679 (“GDPR”).

We reserve the right to modify this Privacy Policy at any time, notably to comply with current regulations.

1. DEFINITIONS

Within the framework of this Privacy Policy, the terms below shall have the following meanings:

 - “Customer”: refers to any consumer who has accepted the General Terms and Conditions of Sale.

  - “General Terms and Conditions of Sale” or “GTC”: refers to the general terms and conditions of sale of On The Wild Side, accessible here.

  - “Supplier / Partner”: refers to any natural or legal person acting as a professional and having entered into a contract with On The Wild Side.

  - “Products”: refers to all products offered by On The Wild Side to Customers on its Site and described in the General Terms and Conditions of Sale.

  - “Site”: refers to the website published by On The Wild Side and accessible at: https://onthewildsidecosmetics.com/.

  - “User”: refers to any natural person who accesses and browses the Site, whether they are a candidate, Customer, Supplier, Partner, prospect, or internet user.

2. WHO IS THE DATA CONTROLLER?

The company CREDO, a simplified joint-stock company registered with the Trade and Companies Register of Bordeaux under number 842 016 123, with its registered office at 6 rue Poitevin, 33000 Bordeaux, is the data controller concerning you.

3. WHAT PROCESSING WILL WE CARRY OUT ON YOUR DATA?

We process your personal data only for the purposes described below.

Management of commercial prospecting and statistical monitoring

Purpose

- Manage our commercial prospecting actions.

- Conduct analyses and statistics.

Legal basis
Our legitimate interest in promoting our products and services to our prospects and customers.

Retention period

- Prospect data is retained for 3 years from the last contact.

- Customer data is retained for 3 years after the end of the commercial relationship.

- Connection data is retained for 1 year.

 

Responding to information and contact requests

Purpose
To respond to your requests for information or contact.

Legal basis
Our legitimate interest in processing requests addressed to us.

Retention period
Data is retained only for the time necessary to process your request.

 

Sending newsletters and commercial information

Purpose
To send you news, commercial offers, and information related to our products and services.

Legal basis
Your consent, collected when you subscribe to our newsletter.

Retention period
Your data is retained until you unsubscribe.

 

Customer satisfaction management

Purpose
To collect, manage, and publish customer reviews to improve our products and services.

Legal basis
Our legitimate interest in measuring and improving customer satisfaction.

Retention period
Data is retained until your customer account is deleted.

Contractual relationship management

Purpose
To ensure the management of the commercial relationship, including:

• the creation and management of your customer account;
• the processing and tracking of your orders;
• the invoicing of your purchases;
• after-sales service follow-up.

Legal basis
The performance of our General Terms and Conditions of Sale.

Retention period
Data is retained for the entire duration of the contractual relationship, then archived for 5 years as proof.

Billing data is retained for 10 years, in accordance with legal obligations.

Application management

Purpose
To process received applications and manage our recruitment process.

Legal basis
Our legitimate interest in reviewing applications, whether unsolicited or in response to a job offer.

If we wish to retain your application beyond the recruitment process, your prior consent will be obtained.

Retention period
Data is retained for the duration of the recruitment process, then deleted.

With your agreement, it may be retained for 2 years to contact you for future opportunities.

Website improvement

Purpose
To improve the performance, operation, and user experience of our website.

Legal basis
Our legitimate interest in optimizing our online services.

Where regulations require, your consent is obtained before certain cookies or other trackers are placed.

Retention period
Cookies and trackers are retained for a maximum duration of 13 months.

Information collected through them is retained for 25 months before being deleted or anonymized.

Management of requests related to your rights

Purpose
To process requests to exercise your rights regarding personal data protection.

Legal basis
Compliance with our legal obligations.

Retention period
Data is retained for the time necessary to process your request, then archived for the applicable limitation period.

This version is more adapted to CREDO while retaining the other information from the original policy. If you are using Shopify, we can also adjust the sections concerning service providers and cookies to precisely match your site.

4. HOW IS YOUR DATA COLLECTED?

The personal data processed is collected directly from you. 

5. WHO ARE THE RECIPIENTS OF YOUR DATA?

Within the limits of their respective responsibilities and for the purposes mentioned in Article 3, the categories of recipients who may have access to your data are:

 - Authorized personnel from our various departments (authorized personnel from human resources, commercial, accounting, IT, marketing, and customer services);

 - The service provider responsible for hosting the Site;

 - Authorized personnel of our subcontractors (publishers of customer service and sales software, email marketing, data analysis);

 - Where applicable, the relevant courts, mediators, chartered accountants, auditors, lawyers, bailiffs, debt collection companies;

 - Third parties likely to place cookies on your devices when you consent (for more details, click on the pink button at the bottom left of your screen.)

6. IS MY DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?

Whenever possible, we prioritize subcontractors located within the European Union. However, we may transfer your data outside the territory of the European Union. These transfers are carried out in accordance with the provisions of the GDPR, and we implement all required safeguards to secure your personal data, particularly through the application of the European Commission's standard contractual clauses supplemented by additional safeguards.

For more information on data transfers outside the EU, you can contact us:

 - By mail to the following address: On The Wild Side – Personal Data Protection - 6 rue Poitevin, 33000 Bordeaux

 - By e-mail to the following address: hello@onthewildside.fr 

7. WHAT IS OUR COOKIE POLICY?

7.1. What is a cookie?

A cookie is a small text file placed on your device's hard drive when you visit a website. It records certain information related to your browsing or online behavior, allowing us to improve and facilitate your experience.

7.2. Why do we use cookies?

The cookies used on the Site serve to differentiate you in order to improve your browsing and the Products and services we provide to you.

The cookie categories are as follows:

- Essential cookies: Essential trackers are necessary for the functioning of our site. They allow you to browse our site and use its services and features.

- Preference cookies: Preference trackers allow us to store information about your choices, settings, and preferences. They are not essential for the functioning of our site.

- Analytical and statistical cookies: Analytical trackers collect or use information about your use of our site, which helps us improve our site.

- Marketing and targeting cookies: These trackers are used to build a profile of your interests and later show you relevant advertisements.

7.3. How to remove cookies? 

You can set your cookie preferences and change them at any time by clicking on the pink button at the bottom left of your screen.

8. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?

In accordance with applicable legislation, you have rights when your personal data is being processed.

Subject to the conditions applicable to the exercise of these rights, you have the following rights:

 - Right of access: you have the right to obtain confirmation as to whether or not your personal data is being processed, and where that is the case, to receive a copy of all the data we hold about you.

 - Right to object to the processing of your data for legitimate reasons.

 - Right to withdraw your consent at any time in cases where the legal basis for processing is consent.

 - Right to data portability: only when the legal basis for processing is the performance of a contract or consent, you can receive your personal data in a structured, commonly used, and machine-readable format, particularly for transmission to a third party. You also have the right to have your personal data transmitted directly to that third party.

 - Right to rectification: you have the right to request the rectification, as soon as possible, of personal data if this data is incomplete or inaccurate.

- Right to restriction of processing: you have the right to request the restriction of the processing of your personal data in certain cases defined by law.

- Right to erasure: subject to certain conditions detailed in Article 17 of the GDPR,

- Right to define the fate of your data after your death and to choose whether or not we communicate your data to a third party you have designated beforehand. In the event of death and in the absence of instructions from you, we undertake to destroy your data, unless its retention is necessary for evidentiary purposes or to comply with a legal obligation.

When exercising these rights, you may be asked to prove your identity to prevent any fraudulent request. 

For any questions concerning the processing of your data or to exercise any of your rights, you can contact us:

- By mail to the following address: On The Wild Side – Personal Data Protection - 6 rue Poitevin, 33000 Bordeaux

- By e-mail to the following address: hello@onthewildside.fr 

- On the website: https://onthewildsidecosmetics.com/pages/gdpr-compliance 

Finally, you have the right to lodge a complaint with the supervisory authority in your country of residence; for France, this is the CNIL: https://www.cnil.fr/.