Privacy Policy

Rural Shipping & RD Rates NZ · Last updated 14 June 2026

This Privacy Policy explains how the Shopify app Rural Shipping & RD Rates NZ ("the App", "we", "us") handles information when a merchant installs and uses it. The App is operated by JS Software. If you have any questions, contact us at apps@jona.nz.

In short: the App hides or shows shipping rates at checkout based on a delivery postcode. It does not store any of your customers' personal information. The only data we keep is the secure session your store uses to connect to Shopify, and we delete it when you uninstall.

1. Information we collect

Store and account data

When you install the App, Shopify provides us with a secure session so the App can access your store through Shopify's API. We store this session in our database. It contains:

your store's myshopify.com domain;
API access and refresh tokens, and the permission scopes you granted;
for some sessions, the name, email address, and locale of the staff account that installed or opened the App, as supplied by Shopify.

App configuration

The rules you set up (your rural postcode list, which rates apply to rural, urban, and Waiheke addresses, and any address exceptions) are saved by Shopify in a metafield on your store. This configuration lives within your Shopify store, not in a separate database of ours.

Customer (buyer) data

The App does not collect, store, or receive your customers' personal information. At checkout, the App's delivery-customization function reads the delivery address postcode and country code transiently inside Shopify's secure environment, solely to decide which shipping rates to show. This information is never transmitted to us and is never stored.

2. How we use information

We use the store and account data described above only to:

authenticate your store and operate the App's features;
read your shipping rates and apply your configured rate rules at checkout;
respond to support requests you send us.

We do not sell your data, and we do not use it for advertising.

3. How information is shared

We share data only with the service providers needed to run the App:

Shopify, the platform the App runs on. Your use of Shopify is also governed by Shopify's own privacy policy.
Fly.io, our hosting provider, where the App and its session database run.
Google Analytics, used to measure traffic to our Shopify App Store listing page and app installs, as described in section 4.

We do not share your data with any other third parties except where required by law.

4. Listing analytics

We use Google Analytics to measure traffic to our Shopify App Store listing page and app installs. This helps us understand how merchants discover the App. It relates to our App Store listing, not to data within your store, and Google processes this data in line with its own privacy policy.

5. Data retention and deletion

We keep your store session only while the App is installed.
When you uninstall the App, we delete your store's session data. Shopify also sends a shop/redact request about 48 hours after uninstall, on receipt of which we delete any remaining session data for your store.
Your rules configuration is stored in a Shopify metafield and is removed by Shopify together with the App.
Because we hold no customer personal data, customer data-access and erasure requests (customers/data_request and customers/redact) have nothing for us to return or delete; we acknowledge them as required.

6. Security

Access tokens and session data are stored in a hosted database and transmitted over encrypted (HTTPS) connections. We take reasonable steps to protect the limited data we hold, though no method of transmission or storage is completely secure.

7. International transfers

The App is hosted on infrastructure that may be located outside New Zealand. Where data is transferred internationally, we rely on our service providers' safeguards to protect it.

8. Your rights

Depending on where you are located, you may have rights under the New Zealand Privacy Act 2020, the EU/UK GDPR, or other applicable laws, including the right to access, correct, or request deletion of the limited personal data we hold about your account. To make a request, email apps@jona.nz and we will respond within a reasonable time.

9. Cookies

The App's admin pages run embedded inside the Shopify admin and use only the session cookies required for you to stay signed in and for the App to function. We do not use tracking or advertising cookies.

10. Children

The App is a business tool for merchants and is not directed at children.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be reflected on this page.

12. Contact

For any privacy questions or requests, contact us at apps@jona.nz.