Privacy policy

1. Data controller

The controller of the data collected on totemsauvage.com is Camille Marchand, sole proprietorship, Atelier Neubourg, 42153 Riorges, France; camille@totemsauvage.com.

Last updated: 15 October 2026.

2. Data collected

Contact and commission forms: name, email and message content. Newsletter: email. Reservation or purchase of a work: identity, email and billing data, processed by Stripe; card data never passes through totemsauvage.com and is never stored there.

Technical logs: IP address and request timestamps, for security and abuse prevention.

Visit measurement: for each page viewed, the page path, the time it stays visible and the scroll depth, with no cookie, no identifier and no IP address kept for this measurement. Legal basis: legitimate interest (anonymous statistics). Retention: six months at most.

3. Purposes and legal bases

Answering your requests (pre-contractual measures), fulfilling an order or reservation (contract), sending the newsletter (consent, withdrawable at any time via the unsubscribe link or on request), securing the site (legitimate interest).

No data is used for advertising, sold or shared with third parties.

4. Recipients

The data is intended for Camille Marchand only. Technical processors: OVH SAS (site hosting and email delivery, France), Stripe (secure payment) and Google (Google Ireland Limited and its affiliates, including Google LLC in the United States), only if you accept audience measurement. Stripe may transfer certain data outside the European Union under safeguards recognised by the European Commission (standard contractual clauses). Data processed by Google Analytics may also be transferred outside the European Union; see Google’s privacy policy (policies.google.com/privacy).

5. Retention periods

Contact requests: 3 years after the last exchange. Order-related documents: 10 years (accounting obligation). Newsletter: until unsubscription. Technical logs: 12 months at most.

6. Cookies

totemsauvage.com sets no advertising trackers. Google Analytics, the site’s audience measurement tool, only sets its cookies after your consent, given or refused in the banner shown on your first visit; your choice is kept for thirteen months. The visit measurement described in section 2 sets no cookie. Payment takes place on Stripe’s secure pages, which may set its own cookies strictly necessary for payment security (see stripe.com/privacy).

7. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights: camille@totemsauvage.com. You may also lodge a complaint with the French supervisory authority, the CNIL (cnil.fr).