Last updated: 6 October 2026
This policy explains what personal information Kobamundii collects, why, where it goes, and what you can do about it.
Kobamundii is a sole trader business operating from Adelaide, South Australia. ABN 12 301 744 551. This site is kobamundii.com.
1. What we collect
When you buy something
Name, email address, shipping and billing address, phone number, and order details. Payment card details are entered directly with our payment processors. We never see or store your full card number. Section 3 names them and covers payment in Monero.
When you join our mailing list
Your email address, and your name if you join at checkout. The signup goes straight to our email provider, MailerLite (section 3), which records the IP address and time it came from as a record that the address was entered by you rather than added by us. If you sign up at the foot of a page, MailerLite emails you to confirm before you are added.
When you contact us
Whatever you put in the message.
Automatically, when you visit
Our web host records your IP address, browser type and device type in its server logs. Our analytics tool records pages visited and referring site. It does not record your IP address. Section 4 describes the analytics. Section 5 says how long the logs are kept.
We collect information you give us voluntarily, plus the automatic technical data above.
2. Why we use it
- To process and ship your order
- To respond to you when you contact us
- To send you email updates, if you asked for them
- To meet our tax and record-keeping obligations
- To detect and prevent fraud and spam
We do not sell your personal information. We do not trade it.
3. Who we share it with
We use third-party services to run this business. They receive only what they need to do their job, and they are bound by their own privacy obligations. They are:
| Service | Purpose | Where |
|---|---|---|
| Hostinger | Website hosting | EU / global |
| Stripe | Card payment processing | United States |
| PayPal | PayPal payment processing | United States |
| MailerLite | Email list and newsletters | European Union / United States |
| Australia Post / courier | Shipping | Australia and the destination country |
| Zonos | US import duty payment, for parcels to the United States | United States |
| Google Fonts | Website typography | United States |
| Esri | Map imagery, on the few pages that show where a piece is being sold in person | United States |
| Google reCAPTCHA | Fraud protection at checkout: checks that an order is placed by a person, not by a script testing stolen cards | United States |
Monero. Monero payments come to us directly. There is no third-party processor, so none of your payment details pass through one. A Monero refund is sent to an address you give us, which we keep with the order record.
We also disclose information where the law requires it.
Overseas disclosure. Several of the services above store or process data outside Australia, including in the United States and the European Union. By using this site, you consent to your information being handled overseas. We take reasonable steps to use reputable providers, but overseas recipients may be subject to laws different from Australian privacy law.
4. Cookies and tracking
This site uses cookies and similar technologies.
Necessary cookies. WordPress and WooCommerce set cookies to keep your shopping cart working and to keep you logged in if you have an account. The site does not function properly without these.
Things you find. A few things on the site are hidden. When you find one, your browser keeps a note of it on your own device, in its local storage, so the site can show it as found, and our server records the find: which hidden thing, a finder number, a code and the date. That record holds nothing that identifies you. To stop one find being counted twice, the server keeps a scrambled form of your IP address for a day, then discards it. If you make an account, your finds are linked to it, so you can see them on any device. You can ask us to delete your account at any time.
Analytics. We count visits using Burst Statistics, which runs on our own server. It sets no cookies, does not store your IP address, and does not fingerprint your browser or follow you across other sites. Nothing it records leaves our hosting, which is why it does not appear in the table above. It tells us how many people looked at a page. It cannot tell us who they were. We also count which network each visit comes from, such as a home broadband provider or a data centre, to tell people from automated crawlers. Our server looks the network up itself, in a copy of GeoLite2 data created by MaxMind (maxmind.com), and keeps only the network's name and a daily count, never your IP address.
Advertising. We do not currently run advertising trackers on this site. If that changes, we will update this policy and ask for your consent first.
Fonts. We load typefaces from Google Fonts, which means your IP address is sent to Google when the page loads.
Fraud protection. The checkout page loads Google reCAPTCHA for orders placed without an account. It checks that an order is placed by a person rather than a script testing stolen cards. To do that, Google receives your IP address and information about your browser and how the page is used, and may set a cookie. Google's Privacy Policy and Terms of Service apply to it.
You can set your browser to refuse cookies or to warn you when they are set. Parts of the site, particularly checkout, may stop working if you do.
5. How long we keep it
- Order and transaction records: seven years. Australian tax law requires at least five; we keep them longer so we can honour warranty and consumer guarantee claims on pieces made to last.
- Mailing list: until you unsubscribe, then removed within 30 days.
- Mailing list signup record: the IP address and date of signup, kept as long as your mailing list record.
- Contact messages: up to two years.
- Website technical logs: typically 30 to 90 days, depending on the provider.
6. Your rights
You can ask us to:
- Tell you what personal information we hold about you
- Correct anything that is wrong
- Delete your information
- Stop sending you marketing
- Provide your information in a portable format
Every marketing email we send has an unsubscribe link. It works immediately.
We will respond to requests within 30 days. We may need to verify your identity first.
We cannot delete information we are legally required to keep. Most commonly, records of a completed sale.
If you are in the European Union or United Kingdom, you also have the right to object to processing, restrict processing, and lodge a complaint with your local data protection authority. Our legal bases for processing are: performing our contract with you (orders), your consent (marketing emails), and our legitimate interests (fraud prevention, improving the site).
7. Security
Your connection to this site is encrypted. Payment details are handled by our payment providers and never stored on our servers. Access to customer information is limited to what is needed to run the business.
No method of transmission over the internet is completely secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner, as required under the Notifiable Data Breaches scheme.
8. Children
This site is not intended for anyone under 16. We do not knowingly collect information from children.
9. Links to other sites
This site links to other websites and may embed content from them. Those sites have their own privacy policies and we are not responsible for them.
10. Changes
We may update this policy. The date at the top shows when it last changed. Material changes affecting how we use your information will be notified by email if you are on our list.
11. Contact and complaints
Questions, requests, or complaints:
The form at kobamundii.com/contact, or by post:
Kobamundii
PO Box 2090
Hilton Plaza SA 5033
Australia
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.