Effective date: 01 September 2025

Who we are: Kundikoff Limited (Registration number: 14534654), 86-90, Paul Street, London, EC2A 4NE, England ("we", "us", "our").

Contact: [email protected]


1) Scope & Roles

Merchant data (Shop data). When you install and use the App, we act as an independent controller for your merchant/account information needed to operate, support, and improve the App (e.g., subscription, App settings, diagnostics).

Store customer data processed via Shopify APIs. When our App reads or writes limited order/product data to run pre‑orders (e.g., tagging orders, reading product/variant IDs), we act as a processor on your behalf. You remain the controller for your customers’ data. We process customer data only under your documented instructions (the actions & logic you configure in the App). We do not re‑purpose customer data.

Data Processing Addendum (DPA). We offer a Controller‑Processor DPA with SCCs/UK Addendum at K1 PreOrder Manager DPA.

End‑customers. We do not provide any customer‑facing features that require direct contact with your store’s end‑customers. We only process minimal order/product metadata required for the pre‑order workflow you configure.


2) What we collect

We collect the minimum data necessary to run the App reliably, support you, and understand product usage.

A. Shopify & operational data

Shop identifiers (theme name/ID/version, storefront/locale settings, location settings and time zone), catalog context (product/variant IDs, collection IDs/titles, conflict logs, UI preferences), order context (pre‑orders only), and technical logs (timestamps, request IDs, API errors, App version, device data). We do not store full order contents beyond what is necessary to tag/attribute pre‑order activity.

B. Support data (Tidio)

If you contact our support widget, the App may pass helpful shop context to reduce back‑and‑forth and speed resolution (e.g., store URL, installed theme name/ID, shop locale, time zone, App version, purely technical diagnostics such as feature flags, onboarding status). You can ask us to remove or limit what’s shared.

C. Product analytics (Mixpanel, Hotjar, Mantle)

Mixpanel (pseudonymous event data about admin UI usage, device/OS/browser, performance metrics); Hotjar (optional session insights for admin interface; we mask input fields where feasible and avoid capturing sensitive text; no storefront replays); Mantle (install & lifecycle telemetry; no end‑customer personal data).

D. Communications

Business contact information, such as email ****- ****we send operational/service emails needed to run the App (e.g., technical, security/reliability, onboarding). We may also send brief product communications that help improve quality and support (tips, highlights, short surveys) and limited information about closely related features or services. You can opt out of non‑operational emails at any time by contacting [email protected] (transactional/service notices may still be sent).