Does Pre-order Now by Shopify Work in China? ICP, PIPL & an Offshore Storefront
Pre-order Now is a Shopify storefront app, not a host — so it carries no ICP filing of its own. The ICP duty sits on the public Shopify store it runs on, served offshore with no mainland-China region, and every pre-order sends a shopper's personal data across the border under PIPL. A compliance-first look at the two layers.
Does Pre-order Now by Shopify work in China?
Pre-order Now is a Shopify storefront app, not a host — so the app carries no ICP filing of its own. The compliance question lands one layer down: the public Shopify store it runs on is served from offshore, and the pre-order details your shoppers hand over leave mainland China.
Shopify installs it into your store — in its own words, "To install this app you need to create a Shopify account or log in to an existing one and then select a store" — and Shopify's own subprocessor list names that store's cloud hosts as Amazon Web Services (USA), Google Cloud Canada (Canada) and Nebius B.V. (Netherlands), with no mainland-China entry. Two duties therefore sit beneath the widget: a public storefront shown to mainland visitors turns on an ICP filing it has no in-country host to anchor, and every pre-order name, contact and order becomes a cross-border transfer of personal information under PIPL. The table below is Shopify's own wording and the rule each layer triggers.
This is a risk map, not a verdict — which duties bind you turns on your entity, your data volumes and who your shoppers are. Our China team can map your exposure with you →
What Pre-order Now by Shopify's own documentation says about China
| Fact | Primary source |
|---|---|
| Pre-order Now is an app you add to a Shopify store, not a host you file against. Shopify distributes it through the Shopify App Store, where installing it means, in Shopify's own words, you "create a Shopify account or log in to an existing one and then select a store." It is published by Website on Demand Studio, LLC and runs inside a merchant's existing Shopify storefront — so it has no domain, server or hosting resource of its own that an ICP filing could attach to. The filing question belongs to the store, not the widget. | Shopify App Store — Pre-order Now listing (apps.shopify.com), retrieved 2026-10-07 |
| The storefront it rides on is hosted offshore — Shopify names no mainland-China region. Shopify's own subprocessor list states "The Subprocessors used by Shopify for the performance of the Services under the Terms are listed below," then names its cloud-hosting subprocessors as "Amazon Web Services, Inc." (USA), "Google Cloud Canada Corporation" (Canada) and "Nebius B.V." (Netherlands), each handling "All platform data." No mainland-China host appears anywhere on the page. A public site served to mainland visitors from offshore infrastructure has no in-country footing for an ICP filing under State Council Order No. 292 and MIIT Order No. 33. | Shopify Help Center — International data transfers: Subprocessors (help.shopify.com), retrieved 2026-10-07; State Council Order No. 292; MIIT Order No. 33 |
| Every pre-order becomes a cross-border transfer of your shopper's personal information. A pre-order captures a customer's name, contact details and order intent, processed through Shopify's offshore systems. Shopify's Privacy Policy says it "may send your Personal Data outside of your state, province, or country, including to the United States," routing Canada and US data to "Shopify Inc." in Ottawa and Asia-Pacific data to "Shopify Commerce Singapore Pte. Ltd.," and warns this "data may be subject to the laws of the countries where we send it." For mainland shoppers that is a cross-border transfer under PIPL — notice, separate consent and a transfer mechanism, Articles 38–43. | Shopify Privacy Policy (shopify.com/legal/privacy), retrieved 2026-10-07; PIPL Articles 38–43 |
| For some operators that offshore storage is a residency problem, not just a transfer one. Where a merchant is a critical information infrastructure operator or handles personal information above the regulatory volume thresholds, information collected in mainland China must be stored inside the mainland (PIPL Article 40; Cybersecurity Law Article 39 (formerly Article 37)). Shopify's hosting — offshore by its own subprocessor list — cannot meet that in-country storage duty, and the obligation falls on the merchant as the data handler, not on Shopify or on the app. | Shopify Help Center — Subprocessors (help.shopify.com), retrieved 2026-10-07; PIPL Article 40; Cybersecurity Law Article 39 (formerly Article 37) |
Sources verified by the 21YunBox compliance team on 2026-10-07.
For a mainland-China audience, the question about Pre-order Now by Shopify is not how quickly the pre-order button paints — it is whether the store the button lives on is cleared to operate there, and where the personal details it collects are allowed to sit. Pre-order Now is a storefront app: you add it from the Shopify App Store and it runs inside your existing Shopify store, so it is not itself a host and has no domain or server of its own to file against. That pushes the compliance question down a layer — onto the public Shopify storefront it rides on, which Shopify serves from offshore, and onto every pre-order record, which leaves the mainland the instant a shopper places it.
Pre-order Now in China at a glance
| What decides it | In Shopify's own terms |
|---|---|
| What the app is | A Shopify App Store app, not a host. To use it you “create a Shopify account or log in to an existing one and then select a store”; it then runs inside that store, with no domain or server of its own. |
| Where the storefront is hosted | Shopify's subprocessor list names its cloud hosts as Amazon Web Services (USA), Google Cloud Canada (Canada) and Nebius B.V. (Netherlands), each handling “All platform data.” No mainland-China region appears. |
| Serving the public | A storefront shown to mainland visitors turns on an ICP filing tied to a mainland hosting resource. With Shopify hosting offshore, the store the app rides on has no in-country footing to file against. |
| Your shoppers' pre-order data | Shopify “may send your Personal Data outside of your state, province, or country, including to the United States,” so a pre-order's name, contact and order cross the border — a transfer PIPL governs. |
| Who carries the duty | The ICP and PIPL obligations fall on you as the merchant and data handler — not on the app and not on Shopify. Installing or removing the widget does not move them. |
The app is a widget, so the ICP question sits on the storefront
Pre-order Now is distributed through the Shopify App Store and published by Website on Demand Studio, LLC. Shopify’s own install flow makes its nature plain: “To install this app you need to create a Shopify account or log in to an existing one and then select a store.” It turns product pages into pre-order flows from inside that store — it does not stand up a site, a domain or a server you could point regulators at.
So the licensing question never lands on the widget; it lands on the public Shopify store a mainland audience loads. A public-facing website delivered to visitors inside China turns on an ICP filing (ICP 备案) under State Council Order No. 292 and MIIT Order No. 33, and that filing has to attach to a hosting resource physically located in the mainland. The pre-order app changes what the store does; it does not change where the store lives — and it is the where, not the feature set, that the filing turns on.
No mainland region under the store, so nothing to anchor a filing
Where does that store live? Shopify answers in its own subprocessor list. It states that “The Subprocessors used by Shopify for the performance of the Services under the Terms are listed below,” and the cloud-hosting entries name “Amazon Web Services, Inc.” (USA), “Google Cloud Canada Corporation” (Canada), “Nebius B.V.” (Netherlands) and “Cloudflare, Inc.” (USA) — each tied to “All platform data.” None of the listed hosts is a mainland-China company, and no mainland-China region appears anywhere on the page.
That settles the ICP footing before performance ever enters the picture. “We already run the pre-order app” does not create an in-country hosting resource, and tuning how the storefront is delivered does not either. Reaching mainland shoppers is not the same as being cleared to serve them: a store served from offshore can load and still have nothing on the mainland for an ICP filing to sit on.
Every pre-order is a cross-border transfer of personal data
A pre-order is not just a button — it is a record of a named shopper: their contact details, the item they committed to, and their order and payment intent. Shopify processes that record through offshore systems. Its Privacy Policy says Shopify “may send your Personal Data outside of your state, province, or country, including to the United States,” routing Canada and US data to “Shopify Inc.” in Ottawa and Asia-Pacific data to “Shopify Commerce Singapore Pte. Ltd.,” and it cautions that this “data may be subject to the laws of the countries where we send it.”
For a shopper in the mainland, that outbound movement is a cross-border transfer under China’s Personal Information Protection Law. The handler — you, the merchant, not Shopify and not the app — has to give notice, obtain separate consent, and clear one transfer mechanism: a CAC security assessment, the CAC standard contract, or certification (Articles 38–43). And if you are a critical information infrastructure operator or a large-volume handler, personal information collected in China must be stored in the mainland (PIPL Article 40; Cybersecurity Law Article 39 (formerly Article 37)) — a residency duty that an offshore Shopify store, by its own subprocessor list, cannot satisfy.
This is a risk map, not a verdict — whether you need an ICP filing, in-country storage, or both turns on what your store sells, how much personal data you hold, and who your shoppers are, and it is worth settling with counsel before you build.
Where 21YunBox fits — a compliant overlay, not a migration
You keep running your store on Shopify, pre-order app and all. What we add is the single layer neither the widget nor an offshore platform can: compliant, ICP-filed delivery from inside the mainland, set in front of the Shopify store you already operate — no rebuild, no second codebase, and no move off Shopify. Our China team maps the storefront’s ICP position and your pre-order cross-border exposure against your entity and data volumes, then stands up the in-country delivery and storage a lawful China presence needs, while your store and its pre-order flow stay exactly where they run today.
Related reading:
Frequently Asked Questions
If I install Pre-order Now, does my store become ICP-filed?
Is it a problem that pre-order customer data flows through Shopify?
Can 21YunBox help make our Shopify pre-order setup work in China?
RELATED TECHNOLOGIES
ARTICLES RELATED TO PRE-ORDER NOW BY SHOPIFY
- China Implements Stricter Regulations on Internet Comment Services
- Does reCAPTCHA Work in China? Reachability, Google's Servers & PIPL
- China Cross-Border Data Transfer: What the Regulation Actually Says
- Tips for Businesses Looking to Sell Products in China: How to Start and Where to Start
- What is data privacy?
- Baidu Tieba - build brand reputation and improve search engine optimization in China!
- Why has my app been deleted from Chinese app stores, and how can I fix it?
- 15 Tips on How to Make a Website Load Faster
- Baidu vs Google
- Baidu Wangpan Guide
- How To Create A Little Red Book Brand Account And Store?
- How To Sell Products to China via WeChat?
- How to Publish My Mobile App in China: A Comprehensive Guide
- How to register a .cn domain?
- Trademark registration in China
