Privacy Policy

Depending on how you interact with the Services, we may collect or process the following, including any inferences we draw from it:

• Contact details — your name, billing and shipping addresses, email address, and phone number.
• Order and payment information — your purchases; the items you view, add to your cart, or add to your wishlist; returns and cancellations; transaction details; and payment confirmation. Card details are processed by our payment providers — we do not store full card numbers.
• Account information — if you create an account, your username, password, and preferences.
• Communications — the content of messages you send us, such as customer support enquiries and reviews.
• Marketing preferences — your email and SMS marketing consent, and any preferences you share with us, such as your favourite artists or groups.
• Order-verification footage — video recorded at our packing stations showing the contents and condition of items as they are packed, linked to your order. We use this only to verify what was dispatched if there is a dispute (see Section 09 for how long we keep it).
• Device and usage information — your device, browser, IP address, and similar identifiers, and information about how you interact with the Services, collected through cookies and similar technologies.

• Directly from you — when you create an account, place an order, contact us, sign up for marketing, or otherwise provide information.
• Automatically — from your device and through cookies and similar technologies when you use the Services.
• From our service providers — such as Shopify and our payment, analytics, and shipping providers.
• From partners and other third parties — such as advertising and marketing partners.

• To provide the Services — to process and fulfill your orders, arrange shipping, handle returns, exchanges, and refunds, manage your account, remember your preferences and wishlist, enable reviews, and provide customer support.
• To communicate with you — to send order and account notifications, respond to your enquiries, and maintain our relationship with you.
• From marketing — to send you marketing by email and SMS where you have consented, and to tailor and measure that marketing. You can opt out at any time (see Section 06)
• For advertising — to show you relevant advertising, including personalised advertising based on your activity, subject to your choices (see Section 06).
• For security and fraud prevention — to authenticate you, keep the Services secure, verify orders (including using packing-station footage), and detect and prevent fraud or misuse.
• For legal reasons — to comply with the law, respond to lawful requests, and to enforce our terms and policies.

We may disclose personal information:

• To service providers — including Shopify and providers of payment processing, analytics, customer support, cloud hosting, and fulfilment and shipping, who process it on our behalf.
• To advertising and marketing partners — to deliver and measure advertising, including personalised advertising. This may involve "sharing" or "selling" personal information as those terms are defined under some privacy laws; you can opt out (see Section 06).
• Where you direct or consent — for example, to ship your order, or when you use social media or login integrations.
• For legal and business reasons — to comply with the law or legal process, enforce our terms, protect our rights and the rights of others, and in connection with a business transaction such as a sale, merger, or restructure.

We do not sell your personal information for money.

We and our providers use cookies and similar technologies to operate the Services, remember your preferences, analyse usage, and support advertising. You can manage cookies through your browser settings and, where available, through cookie controls on the Services. Some features may not work properly if you disable certain cookies.

• Email and SMS. Where you have consented, we may send you marketing by email and SMS. You can opt out of email marketing at any time using the unsubscribe link in our emails, and out of SMS marketing by replying STOP. You may still receive non-marketing messages, such as order updates. Standard message and data rates may apply to SMS.
• Targeted advertising. We may use your information to show you personalised advertising based on your activity, including through Shopify and third-party advertising services. Depending on where you live, you may have the right to opt out of the "sale" or "sharing" of your personal information for targeted advertising. You can opt out by contacting us at hello@kkumi.com.au or by using any opt-out controls we provide on the Services.
• Global Privacy Control. If you visit our website with a Global Privacy Control (GPC) signal enabled, we will, where required by law, treat it as a request to opt out of targeted advertising for that browser. We do not currently respond to other "Do Not Track" signals.

The Services are intended for adults. We do not direct the Services to children, and a person under the age of majority should only use the Services with the involvement of a parent or guardian who agrees to our Terms.

We do not knowingly collect personal information from children under 16 without parental consent, and we do not knowingly use the personal information of anyone under 18 for targeted advertising or profiling. If you believe a child has provided us with personal information, please contact us using the details below and we will delete it.

The Services are hosted by Shopify, which collects and processes information about your use of the Services in order to provide and improve them. Information you submit may be shared with Shopify and processed in countries other than where you live. Shopify also offers enhanced features that use data from your interactions with our store, other Shopify merchants, and Shopify; where Shopify provides these features, it is responsible for that processing, including for handling related requests about your information. To learn how Shopify handles your personal information and the rights you may have, see Shopify's privacy policy at privacy.shopify.com.

We take reasonable steps to protect your personal information, but no system is perfectly secure, and information sent over the internet is not guaranteed to be secure in transit. Please avoid sending sensitive or confidential information through unsecured channels.

We keep personal information only as long as we need it for the purposes described in this Policy — for example, to provide the Services, maintain your account, comply with the law, and resolve disputes. Order-verification (packing) footage is kept for up to 120 days from dispatch and is then deleted, except where it relates to an active or anticipated dispute or chargeback, in which case we keep it until that matter is resolved.

Depending on where you live, you may have some or all of the following rights over your personal information. These rights are not absolute and may not apply in every case.

• Access — to request a copy of the personal information we hold about you.
• Correction — to ask us to correct inaccurate information.
• Deletion — to ask us to delete your information.
• Portability — to receive a copy of certain information, or have it transferred, where applicable.
• Opt out of sale/share or targeted advertising — see Section 06.
• Withdraw consent — where we rely on your consent, you can withdraw it at any time. This does not affect processing carried out before you withdrew it.
• Object to or restrict processing — if you are in the UK or EEA, you may ask us to stop or limit certain processing.

To exercise a right, contact us at hello@kkumi.com.au. We may need to verify your identity, and you may use an authorised agent where the law allows. We will not discriminate against you for exercising your rights. To learn about rights relating to data processed by Shopify, see privacy.shopify.com.

We may store and process your personal information outside the country you live in, including in countries with different data protection laws. Where we transfer personal information out of the UK or EEA, we rely on recognised safeguards — such as the European Commission's Standard Contractual Clauses or the UK equivalent — unless the destination is recognised as providing an adequate level of protection.

The Services may contain links to websites or platforms we do not operate or control. We are not responsible for their content or privacy practices, and we recommend reviewing their policies before sharing information with them.

If you have a concern about how we handle your personal information, please contact us first at hello@kkumi.com.au and we will try to resolve it. Depending on where you live, you may also have the right to complain to your data protection authority — for example, the Office of the Australian Information Commissioner (OAIC) in Australia, or your national supervisory in the UK or EEA.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. We will post the updated version here, update the "Last updated" date, and provide notice where the law requires it.

For any questions about this Privacy Policy, or to exercise your rights, contact us at:

Kkumi
hello@kkumi.com.au

37 Endeavour Drive,
Port Kennedy WA 6172,
Australia