Privacy policy

Privacy policy

Last updated: 9 November 2026. This policy explains what data we collect when you visit the Orange Duke website, talk to the assistant or place an order, why we use it and what your rights are under Regulation (EU) 2016/679 (GDPR).

1. Data controller

Luca Dimaggio (sole proprietorship), VAT no. IT04780580231, Via Salvo D'Acquisto 10/1, 37011 Bardolino (VR), Italy. For any request about your data, write to info@valen-ai.com.

2. What data we process

  • Order and account data: first and last name, email, shipping and billing address, phone number if you provide it, purchased products.
  • Payment data: payment takes place on Stripe's page. We never see or store your card number; we only receive the outcome and a transaction identifier.
  • Conversations with the assistant: the messages you write to the shopping assistant (Valen) and its replies, so it can answer you and suggest products.
  • Browsing data in the shop: products viewed, added to or removed from the cart, searches, linked to a session identifier, to show you relevant suggestions and improve the shop.
  • Newsletter and reviews: your email, only if you subscribe; the text and name you choose, if you leave a review.

3. Why we use it and on what legal basis

  • Handling orders, payments, shipping, returns and support: performance of a contract (Art. 6.1.b GDPR).
  • Meeting tax and accounting obligations: legal obligation (Art. 6.1.c).
  • Running the assistant, suggesting products, protecting the site from abuse and improving it: legitimate interest (Art. 6.1.f).
  • Reminding you by email about an unfinished cart, only if you entered your email at checkout: legitimate interest (Art. 6.1.f). You can object at any time via the link in the email or by writing to us.
  • Sending the newsletter and using statistics cookies: consent (Art. 6.1.a), which you can withdraw at any time.

4. Who we share it with

We do not sell your data. The following providers process it on our behalf, only for the purposes above:

  • Stripe, for payments;
  • Fly.io, for hosting the shop;
  • Valen, the shopping assistant built into the site, and the artificial intelligence model providers it uses to process messages (such as OpenAI and Google);
  • Neon, for the assistant's database (servers in the European Union);
  • Resend, for sending emails;
  • the courier delivering your order.

Some of these providers are based in the United States. In those cases the transfer relies on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

5. How long we keep it

Order data and invoices for 10 years, as required by law. Account data until you close your account. Assistant conversations and browsing data for as long as needed to provide and improve the service; you can ask us to delete them at any time. Newsletter email until you unsubscribe.

6. Cookies and browser storage

We use technical cookies, needed for the cart, login and language, and the browser's local storage to remember your conversation with the assistant. Statistics cookies are only enabled if you accept them in the banner; if you decline, the shop works just the same.

7. Your rights

You can ask us at any time to access, correct or delete your data, restrict its use, receive it in a readable format, or object to processing based on legitimate interest (Articles 15-22 GDPR). Write to info@valen-ai.com: we reply within 30 days. If you have an account you can also edit your data from the "My account" page. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).