PRIVACY POLICY

Last updated: 10.09.2026

Your privacy matters. So does keeping things clear.

This Privacy Policy explains how KOKUMAMI GmbH, operating under the brand KOKUMAMI ("KOKUMAMI", "we", "us" or "our"), collects and processes your personal data when you visit www.kokumami.com, shop with us, create an account, subscribe to our communications, contact us or otherwise interact with KOKUMAMI.

We process personal data in accordance with applicable data protection law, in particular the Swiss Federal Act on Data Protection ("FADP" / "DSG") and, where applicable, the EU General Data Protection Regulation ("GDPR").

1. WHO IS RESPONSIBLE FOR YOUR DATA?

KOKUMAMI GmbH
operating under the brand KOKUMAMI
Bellerivestrasse 17
8008 Zürich
Switzerland

Email: hello@kokumami.com

If we are legally required to appoint a representative in the European Union under Article 27 GDPR, the representative's details are provided in Section 14 below.

2. WHAT PERSONAL DATA DO WE COLLECT?

The personal data we collect depends on how you interact with KOKUMAMI.

Information you give us

When you place an order, create an account, subscribe to our emails, contact us or otherwise interact with us, we may collect:

• your name;
• billing and delivery address;
• email address;
• telephone number;
• account and login information;
• products ordered and other order information;
• payment and transaction information;
• returns, refunds and customer-service information;
• communications you send to us;
• your marketing and privacy preferences.

Payment details such as complete credit-card information are generally processed directly by the relevant payment provider and are not stored by us in full.

Information collected when you use our website

When you visit our website, we and the technology providers we use may collect technical and usage information such as:

• your IP address;
• browser and device information;
• operating system;
• language and time-zone information;
• referring website;
• pages and products viewed;
• date and time of your visit;
• interactions with our website;
• cookie, pixel and similar identifiers.

Some of this information is necessary for the website and checkout to function. Other information, such as analytics or advertising data, is collected only where permitted by law and, where required, after you have given your consent.

Information received from third parties

We may receive personal data from third parties involved in operating our shop and providing our services, including:

• our e-commerce platform;
• payment providers;
• shipping and logistics providers;
• fraud-prevention and security providers;
• marketing and analytics providers, where applicable;
• other service providers you choose to interact with in connection with KOKUMAMI.

The information received depends on the relevant provider and service. It may include identity, contact, payment-status, transaction, delivery, technical or marketing information.

3. WHY DO WE USE YOUR PERSONAL DATA?

We process personal data only for specific purposes and on an appropriate legal basis.

To process and deliver your order

We use your contact, order, delivery and payment information to:

• process your purchase;
• collect or confirm payment;
• send order and delivery updates;
• deliver your products;
• process returns and refunds;
• provide customer service relating to your order.

Where the GDPR applies, the legal basis is generally the performance of our contract with you or taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR).

Certain information, such as your name, delivery address and necessary payment information, must be provided so that we can enter into and perform the purchase contract. If you do not provide the information required for your order, we may not be able to accept, process or deliver it.

To communicate with you

If you contact us, we process the information you provide so that we can answer your question, resolve an issue or otherwise assist you.
Where the GDPR applies, this processing is based on the performance of our contract with you where the communication concerns an order or purchase, or on our legitimate interest in providing effective customer service and managing our business relationships (Art. 6(1)(f) GDPR).

To keep KOKUMAMI and our website secure

We may process technical, account and transaction information to prevent fraud, misuse, unauthorised access and other security incidents.
Where the GDPR applies, this is based on our legitimate interest in protecting our customers, website, systems and business (Art. 6(1)(f) GDPR).

To meet our legal obligations

We process and retain certain information where necessary to comply with legal requirements, including accounting, tax, customs, consumer-protection and other regulatory obligations.
Where the GDPR applies, the legal basis is compliance with a legal obligation (Art. 6(1)(c) GDPR).

To understand and improve our website

Where we use analytics technologies, we may analyse how visitors use our website so that we can understand its performance, identify problems and improve the shopping experience.
Where consent is legally required for the relevant technology, it will be activated only after you have given your consent. In those cases, the GDPR legal basis for the associated processing is your consent (Art. 6(1)(a) GDPR).

To send you KOKUMAMI news and marketing

If you subscribe to our newsletter or otherwise agree to receive marketing from us, we may send you emails about products, launches, restocks, offers and other KOKUMAMI news.
Where consent is required, the GDPR legal basis is your consent (Art. 6(1)(a) GDPR).
Where applicable law expressly permits us to send marketing to existing customers without separate consent, we may do so within the limits of that permission. Where the GDPR applies, the associated processing may be based on our legitimate interest in marketing similar KOKUMAMI products to existing customers (Art. 6(1)(f) GDPR), subject to your right to object at any time.

You can unsubscribe at any time using the unsubscribe link in any marketing email.
Unsubscribing from marketing does not affect transactional or service-related communications concerning your orders or account.

To personalise and measure advertising

If we use advertising technologies such as marketing pixels, we may process information about your interaction with our website to measure campaigns or personalise advertising.
Where consent is required, these technologies are activated only after you have given your consent.

4. COOKIES AND SIMILAR TECHNOLOGIES

Cookies are small files or pieces of information stored on or accessed from your device. We may also use similar technologies such as pixels, tags, local storage or software development kits.

We distinguish between the following categories:

Necessary technologies

These are required to provide functionality expressly requested by you or otherwise operate essential parts of our shop, for example to maintain your shopping cart, enable checkout, remember privacy choices, prevent fraud or maintain website security.
Where applicable law permits, these technologies may be used without your consent.

Analytics technologies

These help us understand how visitors use our website, how the website performs and where improvements may be useful.

Marketing technologies

These may be used to measure advertising campaigns, understand interactions with advertising or personalise advertising.
For users in Germany and elsewhere where applicable law requires consent, information will not be stored on or accessed from your device through non-essential analytics or marketing technologies until you have provided the necessary consent.

You can accept or reject non-essential technologies and change your choices at any time through our Cookie Settings.
If you withdraw your consent, the withdrawal applies with effect for the future and does not affect processing that took place lawfully before the withdrawal.

Your browser may also allow you to delete or block cookies. Blocking necessary technologies may prevent parts of our website or checkout from functioning properly.
Details about the specific cookies and similar technologies currently used on our website, including their providers, purposes and durations, are available through our Cookie Settings.

5. WHO DO WE SHARE YOUR PERSONAL DATA WITH?

We disclose personal data only where this is necessary to operate KOKUMAMI, provide the services you request, fulfil your order, protect our business or comply with legal obligations. Depending on the services we use, recipients may include the following:

E-commerce and website providers

• Odoo

Our e-commerce provider may process information necessary to provide our website, online shop, shopping cart, checkout, account and related functionality.

Payment providers

• Worldline

Payment providers process information necessary to authorise, execute and administer your chosen payment method.
Depending on the payment provider and payment method, the provider may process your personal data as an independent controller under its own privacy policy.

Shipping and logistics providers

We provide delivery partners with information such as your name, delivery address, contact details and shipment information where necessary to fulfil and deliver your order.

Email and customer communication providers

• Odoo

Where we use a third-party service to manage newsletters or customer communications, the provider may process relevant contact information, marketing preferences and communications on our behalf.

Analytics providers

Analytics providers may process technical and usage data where the relevant technology is permitted and, where required, you have given consent.

Advertising partners

If advertising technologies are enabled with your consent, advertising partners may process information relating to your interactions with our website for advertising measurement or personalisation.
Depending on how the relevant service is configured, an advertising partner may act as our processor, as an independent controller or, in certain circumstances, as a joint controller with us.

Professional and technical service providers

We may also disclose information where necessary to IT providers, hosting providers, accountants, auditors, legal advisers and other professional or technical service providers supporting our business.

Authorities and legal disclosures

We may disclose personal data to courts, regulators, authorities or other parties where we are legally required to do so or where disclosure is necessary to establish, exercise or defend legal claims.

Where a service provider processes personal data on our behalf, we enter into appropriate contractual arrangements and implement safeguards as required by applicable data-protection law.

6. WHERE IS YOUR PERSONAL DATA PROCESSED?

KOKUMAMI is based in Switzerland.

Depending on the service providers we use, personal data may also be processed in the European Economic Area ("EEA") and in other countries.

Current relevant processing countries include:

• Switzerland;
• Germany.

Where applicable law recognises a country as providing an adequate level of data protection, personal data may be transferred to that country on the basis of the relevant adequacy decision.

Where personal data is transferred to a country that does not benefit from an applicable adequacy decision, we use an appropriate safeguard where required. Such safeguards may include:

• the European Commission's Standard Contractual Clauses;
• Standard Contractual Clauses recognised under Swiss data-protection law;
• participation by the recipient in a legally recognised data-transfer framework, where applicable;
• binding corporate rules or another approved transfer mechanism; or
• a statutory exception permitted by applicable data-protection law.

Where required, we also assess whether additional technical, contractual or organisational measures are appropriate.

You may contact us at hello@kokumami.com for further information about the countries in which your personal data is processed and the safeguards applicable to a particular transfer.

7. HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We keep personal data only for as long as it is necessary for the purpose for which it was collected or where we are required or permitted to retain it by law.

In particular:

• Order, transaction and accounting records: generally retained for the applicable statutory retention period, which may be up to 10 years under Swiss law.
• Customer-service communications: retained for as long as reasonably necessary to deal with your request and any related contractual or legal matters.
• Account information: generally retained while your account remains active and thereafter where necessary to comply with legal obligations or establish, exercise or defend legal claims.
• Marketing information: generally retained until you unsubscribe, withdraw your consent, object to marketing or the information is otherwise no longer required. We may retain limited suppression information after an opt-out so that we can continue to respect your preference.
• Cookie, analytics and advertising information: retained according to the applicable technology and the duration disclosed through our Cookie Settings.

Where a specific retention period cannot be determined in advance, we determine it according to criteria including the purpose of processing, the nature of the information, statutory retention requirements, limitation periods and the need to establish, exercise or defend legal claims.

When personal data is no longer required, we delete or anonymise it unless continued retention is required or permitted by law.

8. HOW DO WE PROTECT YOUR DATA?

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access.

The measures applied are selected taking into account the nature of the information, the processing involved and the associated risks.

Access to personal data is limited to employees, contractors and service providers who require access for the relevant purpose.

No electronic system or transmission can be guaranteed to be completely secure.

9. YOUR PRIVACY RIGHTS

Your rights depend on the data-protection law applicable to the relevant processing.

Under Swiss data-protection law

Subject to the requirements and limitations of the FADP, you may in particular have the right to:

• request information about whether we process personal data concerning you;
• obtain access to your personal data and certain information about its processing;
• request correction of inaccurate personal data;
• request deletion or destruction of personal data where applicable;
• prohibit or restrict certain processing where the legal requirements are met;
• request the release or transfer of personal data in a commonly used electronic format where the statutory requirements for data portability are met;
• exercise rights in connection with certain automated individual decisions, where applicable.

Under the GDPR

Where the GDPR applies, you may have the right to:

• access your personal data;
• have inaccurate personal data corrected;
• request deletion of your personal data where the requirements of Article 17 GDPR are met;
• request restriction of processing where the requirements of Article 18 GDPR are met;
• object to processing based on legitimate interests under Article 21 GDPR;
• object at any time to processing of your personal data for direct marketing;
• receive certain personal data in a structured, commonly used and machine-readable format and, where applicable, transmit it to another controller;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with a competent data-protection supervisory authority.

These rights are not absolute and may be subject to statutory exceptions and limitations.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, contact us at hello@kokumami.com.
We may request information reasonably necessary to verify your identity before fulfilling a request.

Supervisory Authorities

Switzerland: You may contact the Federal Data Protection and Information Commissioner (FDPIC / EDÖB).

European Union: Where the GDPR applies, you have the right to lodge a complaint with a competent supervisory authority, in particular in the EU Member State of your habitual residence, your place of work or the place of the alleged infringement.

10. AUTOMATED INDIVIDUAL DECISIONS AND PROFILING

We do not currently make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.

We also do not currently make automated individual decisions that are subject to the specific transparency and review requirements of the Swiss FADP.

We may use automated tools for purposes such as fraud detection, website analytics or advertising measurement. Unless stated otherwise, these tools do not independently make decisions producing legal or similarly significant effects concerning you.

If we introduce relevant automated decision-making in the future, we will provide the information and rights required by applicable law.

11. CHILDREN’S PRIVACY

Our online shop is not specifically directed at children.

We do not knowingly collect personal data from children in circumstances where consent from a parent or legal guardian would be required under applicable law.

If you believe that a child has provided personal data to us inappropriately, please contact us.

12. LINKS TO OTHER WEBSITES

Our website may contain links to websites, social networks or services operated by third parties.

If you follow a link to another website or service, the relevant third party's privacy practices apply. We do not control how independent third parties process personal data.

We therefore recommend reviewing their privacy information separately.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy when our services, technology, processing activities or applicable legal requirements change.

The current version will be published on our website and the date of the latest update will be shown at the top.

Where required by applicable law, we will provide additional notice of material changes.

14. EU REPRESENTATIVE

If KOKUMAMI is legally required to appoint a representative in the European Union under Article 27 GDPR, our representative details will be published here upon appointment.

The representative may be contacted regarding matters relating to our processing of personal data under the GDPR.

15. CONTACT

Privacy should not be complicated.

If you have a question about this Privacy Policy, how we use your personal data or your privacy rights, contact us at:

KOKUMAMI GmbH
Bellerivestrasse 17
8008 Zürich
Switzerland

Email: hello@kokumami.com
Website: www.kokumami.com