Can I update the email address on my account?Updated 13 hours ago

No, Koh can't update the email address on an existing account. The email is the verified identity tied to your account, your order history, your Koh Perks balance, and your subscription preferences. Rewriting it on request would create a security risk for account takeover. The path forward is to delete the old account and create a new one on the email you want to use. If you can still sign in to the old account, you can delete it via the self-service flow in your account settings. If you can't sign in (the email is no longer active), contact our team with verification details and we'll delete it for you.

If you can still access your old account (you receive sign-in codes at the old email or phone), use the self-service account deletion flow. Sign in to your Koh account, then submit a deletion request via the help-centre self-service flow. Once the deletion is confirmed, register a new account with your current email at koh.com. Existing order history doesn't transfer, you start fresh on the new account.

If you can't access the old account because the email is no longer active or in use, contact our team. To verify account ownership before deletion, we need three pieces of information: the full email address on the account, the postcode of your last Koh delivery, and the first and last name on the account. Once verification is confirmed, we'll delete the old account for you. If you can't provide all three details, the account will remain on file in line with our Privacy Policy and is automatically removed after the standard data retention period.

The email on your Koh account is the verified identity that controls access to your order history, saved preferences, and any loyalty balance. If we updated emails on request, an attacker who phoned or emailed pretending to be you could redirect that account to an email they control. Sticking to the rule that emails can't be changed (and deletion requires ownership verification) closes that attack path. The trade-off is a small workflow tax on legitimate customers, who need to delete and re-register rather than edit in place. It's the same logic that governs why banks won't change the email on your online banking just because someone asks, even if the request looks legitimate.