Privacy policy.

Who we are.

B One Consulting is an independent consulting firm founded in Paris in 2016, with offices in Paris, Dubai, Singapore and Bali. References in this policy to we, us or our refer to B One Consulting and its affiliated entities operating under the B One brand.

For any privacy question, including requests to exercise the rights described below, you can write to us at legalteam@boneconsulting.com. A member of the team will reply within a working week.

What data we collect.

We collect personal data in three contexts. When you visit our website, we collect technical data such as IP address, browser type, pages visited and time spent, through cookies and analytics tools described in our Cookie Policy. When you contact us through a form, an email or a meeting, we collect the information you choose to share, including name, professional email, phone number, company, role and the nature of your request. When you apply to join our team, we collect the information you submit through your application materials.

We do not knowingly collect personal data from children under sixteen years old. Our services are addressed to professional audiences.

How we use your data.

We use personal data to respond to your enquiries, deliver our services under engagement agreements, manage business relationships with clients and partners, evaluate job applications, and improve our website and communications. We do not sell personal data to third parties and we do not use it for automated decision making that produces legal or significant effects on you.

Marketing communications, where applicable, are sent only with explicit consent. You can withdraw consent at any time using the unsubscribe link or by writing to us at the address above.

Legal basis for processing.

We process personal data on one of the following bases, depending on the context. Performance of a contract, when we engage with you as a client or supplier. Legitimate interests, when we manage our business relationships, develop our services, and protect our infrastructure. Consent, when you fill in a contact form or subscribe to communications. Legal obligation, when we are required to retain or disclose information under applicable law.

Where we rely on legitimate interests, we have assessed that our interests do not override your rights and freedoms, and we are happy to share our assessment on request.

Sharing your data.

We share personal data only with parties that need it to deliver the service you have asked for. This includes service providers we use to operate our infrastructure, communication tools, and analytics platforms. These providers are bound by contractual obligations to handle data only on our instructions and to apply equivalent protection standards.

We may also disclose personal data when required to do so by law, regulation or valid legal process, or to protect the rights and safety of our team, clients and partners.

International transfers.

Because we operate across four offices and serve clients globally, personal data may be transferred outside its country of origin. When transfers occur outside the European Economic Area, we rely on adequacy decisions of the European Commission, on standard contractual clauses, or on equivalent safeguards recognised under applicable law. Details of the safeguards in place for a specific transfer are available on request.

Data retention.

We retain personal data only for as long as needed for the purposes set out in this policy and as required by law. Contact and prospect data is retained for up to three years after our last meaningful interaction. Client engagement records are retained for the duration of the relationship and ten years thereafter for legal and audit purposes. Job application data is retained for up to two years for unsuccessful candidates, unless you ask us to delete it sooner.

Your rights.

Depending on the jurisdiction that applies to you, you may have rights to access, correct, delete, restrict, transfer or object to the processing of your personal data, and to withdraw consent where consent is the legal basis. You can exercise these rights by writing to legalteam@boneconsulting.com. We will respond within thirty days, or sooner if required by law.

If you are based in the European Economic Area, you also have the right to lodge a complaint with your local supervisory authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL).

Changes to this policy.

We may update this policy from time to time to reflect changes in our practices or in applicable law. The current version, with the effective date, is always available at this page. Material changes will be communicated to active clients and partners directly.