Privacy Policy

3. Privacy Policy

3.1 Who we are

VALERIA is the controller of personal data described in this Policy unless another party is expressly identified as controller.

Contact: support@thisisvaleria.com.

3.2 Personal data we may collect

Depending on how you use VALERIA, we may process:

• identity and profile data;
• email, telephone and contact preferences;
• account and customer-reference data;
• retailer/order/tracking information;
• declared product value, currency and category;
• invoices, order confirmations and documents you upload;
• parcel metadata, exterior photographs, weight and volume;
• inspection photographs, video and notes;
• return instructions and labels;
• trip dates, destination and delivery/handover information;
• payment status and payment-provider references;
• support communications;
• marketing preferences;
• login, audit, IP, user-agent and security information; and
• activity data generated when you use VALERIA.

We do not intentionally request sensitive personal information unless it is necessary for a specific lawful purpose.

3.3 How we use personal data and lawful bases

We may process personal data:

• to perform our contract with you, including account access, parcel operations, inspections, returns, trips and requested services;
• to comply with legal obligations, including accounting, fraud-prevention, regulatory and lawful-request obligations;
• for legitimate interests, where appropriate, including service security, fraud prevention, operational administration, protecting customers, resolving disputes and improving reliability, balanced against your rights; and
• with consent, where consent is the appropriate basis, including optional marketing in circumstances where consent is required.

3.4 Who we share data with

We may share only the data reasonably needed with categories such as:

• hosting, database and software providers;
• authentication providers;
• payment processors;
• receiving/storage partners;
• carriers and local delivery partners;
• communications and support providers;
• professional advisers;
• fraud/security providers; and
• public authorities where legally required.

Current service providers may include Lovable, Supabase, Stripe, Cloudflare, Apple/iCloud and Google where the relevant feature is used. This list may be updated as the service evolves.

3.5 International transfers

Some service providers or operational partners may process personal data outside the United Kingdom.

Where required, we use an applicable lawful transfer mechanism, such as an adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another legally recognised safeguard.

3.6 Retention

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including:

• providing active services;
• maintaining account and transaction history;
• handling claims or disputes;
• fraud and security needs;
• accounting/tax requirements; and
• other legal obligations.

Different categories may have different retention periods. Where a precise period is not stated, we use these criteria to determine retention.

Published legal consents, payment evidence and certain audit records may need to be retained after an account becomes inactive where reasonably necessary for legal, security or dispute purposes.

3.7 Your rights

Depending on applicable law, you may have rights including:

• access;
• rectification;
• erasure;
• restriction;
• objection;
• data portability; and
• withdrawal of consent where processing is based on consent.

These rights can be subject to legal exceptions.

To exercise a right, email support@thisisvaleria.com.

You also have the right to complain to the UK Information Commissioner's Office (ICO) and may have rights to complain to another competent data-protection authority where applicable.

3.8 Marketing

Marketing communications are separate from service communications.

Where required, we obtain optional marketing consent. You can unsubscribe from marketing without losing necessary operational communications about your VALERIA account or services.

3.9 Security

We use reasonable technical and organisational measures designed to protect personal data.

No online service can guarantee absolute security.

3.10 Automated decisions

VALERIA does not currently intend to make solely automated decisions that produce legal or similarly significant effects on customers. If this changes, this Policy will be updated as required.

3.11 Children

VALERIA paid services are intended for customers aged 18 or over.

3.12 Changes

This Privacy Policy is versioned. Material updates will be published as a new version.