Privacy Policy

Privacy Policy

CM DIGITAL SAS, operating the totem-spirit.com website, is committed to protecting the privacy of its users. This privacy policy describes how we collect, use, and protect your personal data, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).

1. Data Controller

CM DIGITAL SAS
3A Rue des Armuriers, 42340 Veauche, France
SIREN : 934 270 190
Contact : contact@totem-spirit.com

2. Data Collected and Purposes

We collect the following data:

  • Quiz data (via Tally): first name, revealed totem animal, answers to the questionnaire — purpose: personalization of your reading and sending of adapted content — legal basis: consent (opt-in upon form submission)
  • Email address: collected during the quiz or registration — purpose: sending personalized reading, follow-up email sequence, newsletters — legal basis: consent
  • Payment data: processed exclusively by Shopify Payments — we do not have access to credit card data — legal basis: contract performance
  • Browsing data: IP address, pages visited, session time — collected via Microsoft Clarity (subject to your consent to analytical cookies) — legal basis: consent

3. Subprocessors

Your data may be transferred to the following subprocessors, with whom CM DIGITAL SAS has concluded data processing agreements:

  • Shopify Inc. (hosting, payment) — shopify.com/legal/privacy
  • Brevo SAS (email sending) — brevo.com/legal/privacypolicy
  • Tally (quiz forms) — tally.so/privacy
  • Microsoft Clarity (behavioral analytics) — privacy.microsoft.com

4. Data Retention Period

  • Contact and email data: 3 years from the last active contact
  • Order data: 10 years (legal accounting obligation)
  • Browsing data: 13 months maximum (CNIL recommendation)

5. Your Rights

In accordance with the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw your consent at any time

To exercise these rights, please contact us at: contact@totem-spirit.com

You can also file a complaint with the CNIL (French National Commission for Information Technology and Civil Liberties): www.cnil.fr

6. Cookies

This site uses cookies. Cookies strictly necessary for the operation of the site are placed without prior consent. Analytical cookies (Microsoft Clarity) are placed only after your explicit consent, collected via our cookie management banner.

7. Transfers Outside the EU

Some of our subprocessors (Shopify Inc., Microsoft) are established outside the European Union. These transfers are governed by standard contractual clauses approved by the European Commission, ensuring an adequate level of protection.

8. Changes

We reserve the right to modify this policy at any time. Any significant modification will be communicated by email or via a notice on the website.

Last updated: June 2026