Last update: January 1, 2026

The purpose of this Privacy Policy is to inform users of the O’CARE website about how their personal data is collected and processed, in accordance with the General Data Protection Regulation (GDPR).

1. Data controller

The person responsible for the processing of personal data is:

O’CARE
Email : contact@ocarelab.com

2. Data collected

Dans le cadre de l’utilisation du site, les données suivantes peuvent être collectées :

• Identification data: last name, first name, postal address, email address, phone number
• Order and billing information
• Browsing data: cookies, IP address, connection data

Bank details are processed exclusively by secure and certified payment providers. O’CARE does not have access to this information at any time.

3. Purposes of processing

Personal data is collected for the following purposes:

• order management and processing,
• management of customer service and of requests from users,
• compliance with legal and regulatory obligations,
• improvement of the site’s functionality and user experience,
• sending commercial communications, subject to prior consent.

4. Legal basis for processing

The processing carried out is based on the following legal grounds:

• the performance of the contract,
• compliance with a legal obligation,
• the legitimate interest of the data controller,
• user consent when required.

5. Recipients of the data

Personal data may be transmitted to the following recipients:

• technical and IT service providers,
• payment service providers of,
• logistics and transportation providers.

No data is transferred for commercial purposes.

6. Shelf life

Data is retained for the following periods:

• customer data: for the duration of the business relationship,
• accounting data: 10 years in accordance with legal requirements,
• data for the purposes of commercial prospecting: 3 years from the date of the last contact.
• cookies: 13 months maximum.

7. User rights

In accordance with applicable regulations, users have the following rights:

• right of access,
• right of rectification,
• right to erasure,
• right to object,
• right to restriction of processing,
• right to data portability.

These rights may be exercised at any time by contacting: contact@ocarelab.com

In the event of a complaint, the user may also refer the matter to the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés, CNIL).

8. Security

O’CARE implements appropriate technical and organizational measures to ensure the security, confidentiality, and integrity of personal data.

9. Health data

No sensitive health data within the meaning of the GDPR is collected or processed via the website.

10. Data transfers outside the European Union

When data transfers outside the European Union are carried out, they are governed by appropriate safeguards in accordance with the requirements of the GDPR.

11. Policy changes

This Privacy Policy may be amended at any time.

Users are encouraged to check it regularly to stay informed of any updates.