Privacy policy

Who we are (privacy contact)

Agency: Kumara Acoustics Limited trading as Kella + Co.

Contact for privacy requests: our contact details on this website.

Address: New Zealand.

Information we collect

Identity & contact: name, email address, phone number, delivery address, and messages you send us.

Order & payment: items purchased, amounts paid, shipping details, Stripe checkout session references, and receipts. Payment card numbers are processed by Stripe — we do not store full card details.

Technical & usage: IP address, browser type, device information, pages viewed, referrer URL, and similar data in server logs and our shop analytics events (for example product views, cart actions, and checkout steps).

Cookies & session storage: we use essential session cookies to run the shop (for example keeping items in your cart and checkout progress). We do not use third-party advertising cookies on this shop.

How we collect information

Directly from you when you checkout, contact us, or complete forms on the site.

Automatically when you browse (server logs and engagement events).

From Stripe when you pay (confirmation of payment status and customer contact details needed for the transaction).

Why we use information

To process orders, deliver goods, and provide customer support.

To prevent fraud, secure the website, and troubleshoot errors.

To meet tax, accounting, and other legal record-keeping requirements.

To understand shop performance in aggregate (for example which pages are viewed) and improve listings and layout.

We do not sell your personal information.

Who we share information with

Service providers who help us operate the shop, only as needed for their services:

• Stripe — payment processing (see stripe.com/privacy)
• Courier companies — delivery name, address, phone, and parcel details
• Hosting and infrastructure providers — data stored on servers used to run the site
• Professional advisers — lawyers or accountants when required

Overseas disclosure

Some providers (including Stripe and our hosting partners) may store or process data outside New Zealand.

Where we disclose information overseas, we do so in accordance with the Privacy Act 2020, including using providers that meet appropriate safeguards or where disclosure is otherwise permitted.

Retention & security

We keep order and contact records for as long as needed for business operations, tax law (typically at least seven years for financial records), and to respond to disputes or legal requests.

Engagement/analytics events may be kept in aggregated form for a shorter period.

We use reasonable technical and organisational measures (access controls, HTTPS, limited staff access). No internet transmission is completely secure.

Your rights

You may ask us whether we hold personal information about you and request access or correction.

You may withdraw consent for optional uses where consent applies, but we may still need to hold order information for legal and accounting reasons.

If you are concerned about our handling of personal information, contact us first. You may also complain to the Office of the Privacy Commissioner: privacy.org.nz.

Children

Our shop is intended for adults. We do not knowingly collect personal information from children under 16 without parental involvement. Contact us if you believe we have done so.

Changes to this policy

We may update this policy from time to time. The “Last updated” date shows the current version. Material changes will be reflected on this page.

Contact

Privacy questions or access/correction requests: our contact details on this website.

Please include enough detail for us to identify your order or enquiry.