Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
KnoCommerce is a post purchase survey and attribution platform for ecommerce that collects survey responses tied to orders and sets cookies, hosted in the United States.
KnoCommerce is a United States based post purchase survey and attribution platform for ecommerce merchants, widely used on Shopify stores. It presents short surveys on the order confirmation page to capture how customers discovered the brand and why they bought. This zero party data helps merchants close attribution gaps left by cookie based tracking. The responses are tied to the order so that marketing channels can be credited accurately.
KnoCommerce collects survey answers along with order identifiers, and it can link these to customer details such as name and email through the store integration. Its widget uses JavaScript and cookies to manage the survey session, prevent duplicate responses and support attribution. Because the answers are connected to an identifiable order and customer, the data is personal data under the GDPR. Open ended questions can also capture unexpected information, so the responses should be treated with care.
The cookies used by the KnoCommerce widget for attribution and analytics are not strictly necessary, so storing and reading them requires prior consent under Art. 5(3) of the ePrivacy Directive. The processing of survey responses linked to a customer must also comply with the GDPR, with a clear lawful basis and transparent information. Merchants should ensure that participation is genuinely optional and that customers understand how their answers will be used. The link between survey data and order data heightens the need for accuracy and minimisation.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Consent is the appropriate basis for the KnoCommerce cookies and for using survey responses for attribution and marketing analytics. The widget and its cookies should remain blocked until the customer opts in through a consent management platform. Completing a voluntary survey can signal agreement to answer, but it does not by itself authorise non essential cookies or further marketing uses. Customers must be able to decline and to withdraw consent without detriment.
KnoCommerce processes data on infrastructure in the United States, which is a third country for European customers. Transfers can rely on the EU US Data Privacy Framework where KnoCommerce is certified, or on Standard Contractual Clauses supported by a transfer impact assessment and supplementary measures. The merchant should confirm the current certification status and document the chosen safeguard. Limiting the personal fields sent to KnoCommerce reduces the risk associated with the transfer.
Gate the KnoCommerce widget and its cookies behind a compliant consent banner and keep participation optional. Conclude a data processing agreement, record the United States transfer mechanism and run a transfer impact assessment. Minimise the personal data shared, set sensible retention periods and disclose KnoCommerce clearly in the privacy and cookie policies. Review survey questions so they do not inadvertently collect sensitive data, and test the consent flow regularly.
Websites using KnoCommerce must obtain user consent under GDPR regulations.
DPIA considerations
KnoCommerce collects survey responses that can be linked to identifiable orders and customers and uses them for attribution, which may warrant a data protection impact assessment depending on the scale and the nature of the questions. Assess whether any sensitive information could be revealed through open ended answers, the linkage to order and contact data and the transfer to the United States. Document the lawful basis, retention periods, the consent flow and the supplementary measures applied to the transfers.
Sample consent text
We use KnoCommerce to ask a short survey after your purchase and to understand how you found us. Your answers are linked to your order and processed in the United States. The survey runs only after you accept the related cookies.
Third-party domains contacted
knocommerce.comapi.knocommerce.comwidget.knocommerce.comcdn.knocommerce.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| kno_session | third party | Session | Maintains the post purchase survey session so that the survey state is preserved while the customer answers. |
| kno_responded | third party | 6 months | Records that a customer has already answered the survey to prevent duplicate or repeated prompts. |
| kno_attribution | third party | 6 months | Stores an identifier used to link the survey response to the order for attribution reporting. |
KnoCommerce collects user analytics data — you legally need a consent banner. Try FlowConsent free.
The KnoCommerce survey widget typically sets cookies such as a session cookie to manage the survey, a cookie that records whether a customer has already responded, and an attribution identifier cookie. These cookies support the survey experience and link responses to orders. They are not strictly necessary, so they require consent.
Yes. The KnoCommerce cookies and the use of responses for attribution and marketing analytics are not strictly necessary, so prior consent is required under Art. 5(3) of the ePrivacy Directive and the GDPR. The widget should stay blocked until the customer opts in, and survey participation must remain voluntary.
Consent under Art. 6(1)(a) GDPR is the appropriate basis for collecting survey responses and using them for attribution and marketing insight. The ePrivacy Directive separately requires consent for the non essential cookies. Where responses are linked to orders, the processing must be transparent and limited to the stated purposes.
Yes. KnoCommerce processes survey and attribution data on infrastructure in the United States, which is a third country for European customers. Transfers should rely on the EU US Data Privacy Framework where KnoCommerce is certified, or on Standard Contractual Clauses with a transfer impact assessment and supplementary measures.
A data protection impact assessment may be advisable, especially at scale or where survey questions could reveal sensitive information. The assessment should consider the linkage between responses and identifiable orders and the transfer to the United States. Documenting the safeguards and the consent flow supports accountability.
Block the survey widget and its cookies behind a consent management platform and keep participation optional. Sign a data processing agreement with KnoCommerce, record the US transfer mechanism and minimise the personal fields shared. Review survey questions to avoid collecting sensitive data and disclose the tool clearly in the privacy and cookie policies.
Other post purchase survey and attribution tools exist, including European hosted survey platforms that can reduce third country transfers. Some merchants use built in store survey features or privacy focused feedback tools instead. Any alternative still needs a lawful basis, careful question design and proper handling of cookies and transfers.
List the KnoCommerce cookies by name, purpose and duration, and identify KnoCommerce as a recipient processing data in the United States. Explain that consent is required and how customers can withdraw it or decline the survey. Keep the policy aligned with the live widget configuration and review it when surveys or integrations change.