Legal

Privacy policy

Last updated: 18 October 2026

English translation provided for information only. The French version prevails.

1. Data controller

Clément Marceau, sole trader (see the legal notice). Contact: contact@clementmarceau.com.

This policy applies the EU General Data Protection Regulation (GDPR) and the French Data Protection Act. No data protection officer has been appointed, as this is not required for an activity of this size.

2. Data collected, purposes and legal bases

  • Booking appointments (discovery call, sessions): name, email, answers to the booking form. To organise the appointment. Basis: pre-contractual measures and performance of the contract.
  • Workshop bookings: name, email, payment information processed by Billetweb. To manage your registration. Basis: performance of the contract.
  • Coaching: email exchanges, questionnaires, session summaries and notes. To ensure follow-up and continuity. Basis: performance of the contract.
  • Health information: contraindications and any medical certificate for breathwork workshops, and anything you choose to share in sessions. For your safety. Basis: your explicit consent, which you can withdraw at any time.
  • Invoicing: name, address, amounts, dates. Basis: legal obligation (accounting).
  • Newsletter: email and preferences, only if you subscribe. Basis: consent; you can unsubscribe at any time via the link in every email.

3. Cookies and local storage

The site shows no advertising and uses no advertising trackers or tracking cookies. It only stores:

  • your chosen language (functional cookie set by the Polylang plugin);
  • your display and accessibility settings (theme, text size…), stored in your browser and never sent to the server.

Audience measurement: to know which pages are read, the site uses Matomo, installed on its own server at Infomaniak. It works without cookies, only keeps anonymised IP addresses (the last two bytes are masked), respects your browser’s “Do Not Track” setting, and the statistics are shared with no one. This setup meets the CNIL’s conditions for consent-exempt audience measurement.

These are strictly necessary for the features you request or exempt from consent. Fonts and images are hosted on the site’s own server: no call is made to Google Fonts or an image bank during your visit.

4. Recipients and processors

Your data is reserved for Clément Marceau and the following technical providers, who act on instruction:

  • Infomaniak Network SA (Switzerland): website and email hosting. Switzerland benefits from a European Commission adequacy decision.
  • zcal, Inc. (United States): online appointment booking. Transfers governed by the European Commission’s standard contractual clauses.
  • Billetweb (France): ticketing and payment for workshops.
  • Brevo (Sendinblue SAS, France): newsletter delivery.
  • Indy (France): invoicing and accounting.
  • Zoom Video Communications, Inc. (United States): video sessions. Transfers governed by the EU–US Data Privacy Framework.

No data is sold, rented or shared for commercial purposes.

5. Retention periods

  • Client relationship and session notes: during the programme, then 3 years after the last contact.
  • Health information: during the programme or until the workshop concerned, then deleted.
  • Invoices and accounting records: 10 years (article L123-22 of the French Commercial Code).
  • Newsletter: until you unsubscribe, or 3 years without opening.
  • Server technical logs: 12 months maximum.
  • Visit statistics (Matomo): anonymised raw data deleted after 13 months maximum.

6. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw your consent at any time (articles 15 to 22 GDPR).

To exercise them, write to contact@clementmarceau.com. You will receive an answer within one month. If needed, you can lodge a complaint with the CNIL (French data protection authority).

7. Security

Data is hosted in Switzerland by Infomaniak and exchanges with the site are encrypted (HTTPS). In the event of a data breach that poses a risk to your rights, you will be informed as soon as possible, in accordance with the GDPR.

8. Changes

This policy may change. The date of the last update is shown at the top of the page.