Kia Ora Connect Privacy Policy

Last updated: 11 August 2026

This privacy policy describes how the Kia Ora Connect Shopify app (the "App"), provided by Kia Ora Digital ("we", "us"), accesses and uses data from your Shopify store.

1. What data we access

When you install Kia Ora Connect, the App accesses the following data from your Shopify store via the Shopify Admin API:

• Orders (created date, financial status, totals, taxes, shipping, discounts, line items), used to compute aggregate sales analytics
• Products (title, handle, type, vendor, status, variants), used to compute per-product performance
• Collections (title, handle, product membership), used to compute collection-level performance
• Shop information (store name, currency, primary domain), used to display your store's context in the dashboard

The App does not access customer names, email addresses, phone numbers, shipping addresses, or any other customer-identifying information.

2. Why we access this data

The data is used for one purpose only: to render an analytics dashboard for your store, accessible through the App's website. The dashboard shows aggregate metrics such as total sales, order counts, average order value, top products and collections, daily and hourly trends, and period-over-period comparisons.

3. How long we keep it

The App fetches data from Shopify on demand each time you open the dashboard. Order, product, and collection data is not stored persistently by the App.

The App stores only the following data on its own server, and only for as long as the App is installed on your store:

• Your store's .myshopify.com domain
• Your store's primary domain
• The Shopify-issued OAuth access token (used to authenticate API requests)

When you uninstall the App, Shopify sends a notification to the App and the stored access token and store metadata are removed.

4. How we protect the data

• All communication between the App, Shopify, and your browser uses HTTPS (TLS) encryption.
• Stored access tokens are kept in a server-side file outside the public web root, with restricted file permissions (owner-only read/write).
• The App does not share, sell, or transfer any store data to third parties.

5. Sub-processors

The App's server is hosted on a Kia Ora Digital cPanel account. No third-party analytics, tracking, or advertising services are used by the App.

6. Your rights and data requests

You can request:

• A copy of any data the App holds about your store
• Deletion of any data the App holds about your store

The App also handles Shopify's mandatory privacy webhooks (customers/data_request, customers/redact, shop/redact) automatically.

For any privacy questions or data requests, contact us at: hello@kiaora.digital

7. Changes to this policy

If we change this policy, we will update the "Last updated" date above and post the revised version at this URL. Continued use of the App after changes are posted constitutes acceptance of the revised policy.

8. Contact

Kia Ora Digital
Email: hello@kiaora.digital
Website: www.kiaora.digital