Privacy

We collect the minimum we need to send you your Ducali pieces and answer your questions. This page tells you exactly what, why, and what your rights are.

Who we are

Ducali operates as two entities. Each acts as the data controller for the customers it serves. Full company details — Florida LLC and Italian partita IVA holder — will be listed here in the imprint once the entities are finalised. In the meantime, write to us for any data-controller enquiry.

What we collect

When you place an order, we collect the information we need to fulfil it and to meet our legal obligations:

• Your name, shipping address, billing address, phone number, and email.
• The details of what you ordered — product, colourway, quantity, and any monogram or motif you have specified.
• A record of your payment — but not your card details. Payments are handled by Stripe, Inc., which stores the payment data under PCI-DSS. We never see or store your card number.

When you email us, we keep the emails and our replies so we can help you later if you write again.

Cookies & tracking

We use one strictly necessary cookie to remember what you have put in your shopping cart between visits. We do not use advertising or cross-site tracking cookies. If we add analytics in future, we will ask for your consent first.

How we use it

• To fulfil your order — pack it, ship it, invoice it.
• To reply to your questions.
• To meet our legal obligations — tax and accounting records, warranty claims, and consumer-protection duties.

We do not sell your personal information. We share it only with the service providers we need to complete your order — the payment processor (Stripe), the shipping carrier, and our hosting provider — each of whom acts on our instructions under a written agreement.

Where your data lives

Our storefront and API are hosted by Render in Frankfurt, Germany. Payment data is held by Stripe, subject to Stripe’s own privacy policy and PCI-DSS certification. Backups are encrypted and retained only as long as legally required.

Your rights

European Union & UK (GDPR / UK GDPR)

You have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to have it ported to another service in a machine-readable format, and to object to specific processing. To exercise any of these, write to contact@ducali.com with the subject “Privacy request.” We will action it within 30 days.

You also have the right to lodge a complaint with your national data-protection authority — in Italy, the Garante per la Protezione dei Dati Personali.

California (CCPA / CPRA)

California residents have the right to know what personal information we collect, to have it deleted, to correct inaccurate information, and to opt out of any sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising. To exercise your rights, write to the same address.

Other jurisdictions

If you’re elsewhere and want your data actioned, write to us — we treat every request seriously.

Retention

We keep order and invoice records for as long as required by tax law — 10 years in Italy, up to 7 years in the United States. Non-order emails are kept for as long as they are useful, then deleted.

Changes to this policy

We will update this page when the way we handle your data materially changes. The date below marks the last substantive change.

Contact

For any privacy question or request, write to contact@ducali.com with the subject “Privacy request.” We reply within 30 days.

Last updated: 30 August 2026