Privacy policy

The data controller is MW Ventures SAS, trading as Onsite Exchanges. For privacy questions or to exercise your rights, email nicholas@onsiteexchanges.com.

• Identity and professional details, including your name, role, seniority, company, industry, company size, work email, phone number, and location.
• Exchange and matching details, including the support you need, strengths you can share, preferred peers, named competitors, availability, and any assistant details you provide.
• Transaction details, including the amount, currency, payment status, payment reference, refunds, and disputes. Full card details are entered directly into Stripe’s payment service and are not stored by Onsite Exchanges.
• Correspondence and security information, including messages exchanged with us and technical details such as your IP address, browser type, and the pages requested.
• Sign-in credentials for the Onsite Exchanges team. The site has no customer accounts — you never need to register in order to enquire, book, or pay.

• To answer enquiries and take steps requested before entering a contract.
• To provide the service: arrange exchanges, assess and propose relevant matches, exclude competitors, take payment, communicate with participants, and administer refunds or disputes.
• To meet accounting, tax, fraud-prevention, security, and other legal obligations.
• For our legitimate interests in operating, improving, and protecting a focused business-to-business service, where those interests do not override your rights.

We do not sell personal data or use it for unrelated advertising.

We use the information you provide to score possible peer matches, including complementary needs and strengths, seniority, company size, geography, and industry preference. Same-company and named-competitor pairings are blocked. A person reviews and approves a proposed match before participants are introduced. You may ask for human review or challenge a matching decision by emailing us.

Access is limited to authorised Onsite Exchanges personnel and service providers needed for hosting, data storage, email delivery, security, and payments. Stripe receives payment and transaction information under its own privacy terms. Once a match is approved, the relevant contact details and professional context are shared with the matched peer so the exchange can be arranged.

Some service providers may process information outside the European Economic Area. Where this occurs, we require an approved safeguard such as an adequacy decision or standard contractual clauses. You may request information about the safeguards used.

Enquiries and matching information are kept only while needed to provide the service, manage the relationship, resolve issues, and establish or defend legal claims. Contract, invoice, and transaction records are retained for the periods required by French accounting and tax law, which may be up to ten years. Security logs are retained only for a proportionate period. Data is then deleted or anonymised.

Depending on the circumstances, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may also withdraw consent where consent is the legal basis. Email your request to nicholas@onsiteexchanges.com. We may need to verify your identity.

You may complain to the Commission Nationale de l’Informatique et des Libertés (CNIL).

This site sets no advertising or analytics cookies and loads no third-party tracking, social media, or session-recording scripts. Because there are no customer accounts, nothing is stored to recognise you between visits.

• Team sign-in. When a member of the Onsite Exchanges team signs in to the private admin area, their session is kept in that browser’s own local storage so they remain signed in. It disappears on sign-out or when browser storage is cleared.
• Card checkout. Payment is completed on Stripe’s own secure payment page, where Stripe sets the cookies needed to take the payment and to prevent fraud. Stripe’s privacy terms apply on that page.
• Web fonts. Typefaces are served from this website itself, so no third-party font service receives your IP address.
• Visit counting. To understand how the site is used, our own server records each page viewed, the referring website, campaign tags in the link, the country (derived from your connection, not stored as an IP address), and device type. A one-way code made from your connection details and that day’s date lets us count daily visitors without cookies; it changes every day and cannot identify you. This is based on our legitimate interest in improving the site, and the data is used only by the Onsite Exchanges team, including with an AI tool that summarises traffic trends.
• Server logs. Our hosting provider records basic technical details, such as IP address, browser type, and pages requested, to keep the site running and secure.

None of the above requires advertising consent. If non-essential analytics or marketing tools are ever introduced, we will update this notice and ask for consent before they run.

We may update this notice when the service or legal requirements change. The date at the top shows the latest revision.