Data protection

Privacy policy

Last updated: 30 September 2026

This policy explains what personal data is processed when you visit kokunari.com or contact us, why, and what rights you have. We keep it short because this website collects very little: there are no cookies, no analytics and no tracking.

1. Who is responsible

The controller for data processing on this website is:

2. Visiting this website

Hosting and delivery

This website is hosted and delivered by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you open a page, your browser necessarily sends technical data to Cloudflare’s servers, in particular your IP address, the date and time of the request, the page requested, your browser type and operating system, and the referring page.

Cloudflare uses this data to deliver the website quickly and to protect it against attacks and misuse. Security logs may be kept for a short period. The legal basis is our legitimate interest in a secure and reliable website (Art. 6 (1)(f) GDPR). Cloudflare is certified under the EU-U.S. Data Privacy Framework, and we rely on it and on the EU Standard Contractual Clauses for transfers to the USA.

Fonts

All fonts are stored on and loaded from this website itself. No connection to Google or any other font provider is made when you visit.

No cookies, no analytics, no tracking

This website does not set cookies, does not use analytics or advertising tools, and does not embed social media plugins or third-party content.

3. Contacting us

If you email us, or use the request form on this website, we process the details you give us, such as your name, email address, shop URL, team size and your message, only to answer your request and, if it leads to a project, to prepare and carry it out.

The request form does not send your data anywhere by itself. It prepares a note in your browser that you then send to us by email.

The legal basis is the preparation or performance of a contract (Art. 6 (1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6 (1)(f) GDPR). We delete your enquiry once it has been dealt with, unless statutory retention periods require us to keep it longer.

Our email is hosted by Migadu (Switzerland). Switzerland is recognised by the European Commission as providing an adequate level of data protection.

4. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you (Art. 15)
• Have incorrect data corrected (Art. 16)
• Have your data deleted (Art. 17)
• Restrict processing (Art. 18)
• Receive your data in a portable format (data portability, Art. 20)
• Object to processing based on legitimate interests (Art. 21)

To use any of these rights, email [email protected]. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work.

5. Changes

We will update this policy when the website or our services change, for example if we add new tools. The current version is always available on this page.