Ordifolio Tax ID Checkout for WooCommerce

Description

Ordifolio Tax ID Checkout for WooCommerce (Spanish UI: NIF/CIF en checkout para WooCommerce) adds a «NIF / CIF / NIE» field to the WooCommerce checkout so Spanish shops can collect the customer’s tax ID when a full invoice (factura completa) is needed.

• Works with the classic checkout (shortcode) and the Checkout block (Additional Checkout Fields API).
• Optional by default. The field becomes required only when the customer ticks «Necesito factura a nombre de empresa/profesional» (default mode). Other modes: always optional, required when the Company field is filled in (B2B), or always required for B2B-only shops. Asking every consumer for an ID is not needed for a simplified invoice and goes against data minimisation, so there is no “always required for everyone” option for B2C shops.
• Local format check of DNI/NIF, NIE and CIF, including the check digit/letter, on your own server. Input is normalised (spaces, dots, dashes, lowercase and an ES prefix are removed: es b-1234567-4 → B12345674). A correct format does not prove that the ID exists or who it belongs to.
• Optional VIES lookup (off by default) through the official REST API of the European Commission, only for company IDs (CIF) and only when you enable it. DNI and NIE numbers are never sent anywhere.
• The ID is saved on the order and shown on the order screen, in the orders list (optional column) and in WooCommerce emails. Compatible with HPOS.
• Legal text under the field (can be turned off): «Lo usamos solo para emitir tu factura completa (obligación legal, RD 1619/2012). Más información en la política de privacidad.»

Language: the plugin is meant for shops in Spain, so its interface strings are written in Spanish. They are translatable.

What this plugin is not: it does not issue invoices, does not create e-invoices or any tax records, and does not send anything to the Spanish Tax Agency (AEAT). It only collects and stores the tax ID your invoicing tool needs.

External services

This plugin can connect to one external service: the VIES VAT number validation service (REST API) of the European Commission. It is off by default. While the Consultar VIES setting is off, the plugin makes no external requests at all: not at checkout, not on activation and not in the admin.

• What it is used for: to look up whether a Spanish company tax ID (CIF), as an EU VAT number (NIF-IVA), is registered as valid for intra-EU operations on the date of the lookup. The answer does not confirm the customer’s identity or the correct tax treatment of the order.
• When data is sent: only if the shop owner enables Consultar VIES in WooCommerce → Settings → NIF/CIF checkout, and only when a customer submits the checkout with a CIF that passes the local format and check-digit check. The request has a 10-second timeout. Answers are cached on your site for 24 hours, so the same CIF is not sent again during that time.
• What data is sent: the country code ES and the sanitised CIF, as part of the request URL (https://ec.europa.eu/taxation_customs/vies/rest-api/ms/ES/vat/{CIF}), from your server. As with any HTTP request, the service also receives your server’s IP address and a user-agent with the plugin and WordPress version numbers. DNI and NIE numbers (natural persons) are never sent. No customer name, address, email or other order data is sent.
• What is stored: only the result flags (status, valid, available, date of the lookup) in a 24-hour transient, and the result and date on the order. No name or address from VIES is stored.

Service provider: European Commission (Directorate-General for Taxation and Customs Union).

• VIES service: https://ec.europa.eu/taxation_customs/vies/
• About VIES: https://taxation-customs.ec.europa.eu/vies-vat-information-exchange-system_en
• Terms of use (legal notice of the European Commission websites, linked from the VIES site): https://commission.europa.eu/legal-notice_en
• Privacy policy (European Commission websites, linked from the VIES site): https://commission.europa.eu/privacy-policy-websites-managed-european-commission_en

Privacy

This plugin collects the tax ID (NIF, CIF or NIE) the customer types at checkout and stores it on the order so the shop can issue a full invoice. Legal basis: compliance with a legal obligation (GDPR art. 6.1.c; Spanish invoicing rules, RD 1619/2012) when the customer is a business or professional or asks for a full invoice. For registered customers the tax ID is also saved in their account (user meta ordifolio_nif_tax_id) so it can be pre-filled next time, and it is shown in WooCommerce order emails. Uninstalling the plugin does not delete tax IDs from orders or customer accounts; use WordPress’s personal data erasure tools when you no longer need them.

The plugin does not send the tax ID to any third party, with one exception you control: if you enable Consultar VIES, company tax IDs (CIF) are sent to the European Commission’s VIES service (https://ec.europa.eu/taxation_customs/vies/) to look up whether they are registered for intra-EU operations. DNI and NIE numbers are never sent. The request goes to ec.europa.eu from your server at checkout, only for that purpose. See External services above for what is sent, when, and the European Commission’s terms and privacy policy.

If you enable VIES, add the recipient to your privacy policy (GDPR art. 13.1.e). Suggested text: «El NIF-IVA se comunica a la Comisión Europea (VIES) para consultar su validez a efectos intracomunitarios».

The plugin does not add cookies, tracking or any other external requests. Uninstalling it removes only its settings and cached VIES results; tax IDs saved on orders and in customer accounts are kept (your invoices may need them) until you erase them with WordPress’s personal data erasure tools.