A step-by-step guide written in plain Italian on how to make your standard Shopify store compliant with a VAT number in the footer, the 2022 Garante Privacy cookie banner, and the collection of Tax Code and PEC (Certified Email) at checkout without installing heavy apps.
Company data in the footer: your legal business card
Transparency is the first step to avoid immediate penalties. Selling online in Italy without clearly displaying your VAT number is illegal under Presidential Decree 633/1972 and incurs an administrative penalty ranging from 250 to 2,000 euros. Yet, I constantly see stores forgetting this fundamental detail. Your VAT number must be included in the footer of your website, clearly formatted as "P. IVA IT01234567890", and must be present on every single page, including transactional order confirmation emails and sales documents.
But the VAT number is not enough. If you manage a company (such as an S.r.l. or an S.p.a.), Italian law requires you to also indicate in the footer the company name, the registered office address, the Companies Register office where you are registered, the REA number (Repertorio Economico Amministrativo), and the resolved and paid-up share capital. In my method, I insert this data by directly editing the footer section of your theme or by editing the copyright line, without resorting to external applications that would only slow down the site's code.
Furthermore, if you use Shopify Payments to receive payments on your store, you must ensure that all company data entered in the control panel exactly matches your Visura Camerale (Chamber of Commerce registration) or your VAT registration certificate. Shopify will verify your VAT number through the VIES system for cross-border transactions. If the documents you provide as proof of identity (valid passport, driving license, or ID card) or as proof of address (bills or bank statements issued in the last 6 months) do not perfectly match the data registered on Shopify Payments, your account risks immediate payment suspension.
The cookie labyrinth: how to comply with the Garante without losing speed
The Garante Privacy guidelines of June 10, 2021, which fully came into force on January 10, 2022, have radically changed how we must manage user tracking. If your store installs profiling cookies or tracking pixels (such as those from Meta, Google, TikTok, or Microsoft) before the user has given explicit consent, you are violating the law.
The Garante has established very clear rules for the cookie banner structure: the "Accept all" and "Reject" buttons (or the option to continue without accepting using a classic "X" positioned at the top right) must have the same graphical prominence. You cannot use bright colors for the accept button and hide the reject button under tiny text. Consent collected by simply scrolling the page is illegal. The action must be conscious, active, and documentable through a consent log. So-called cookie walls, which block website navigation if the user does not accept cookies, are prohibited. You cannot insistently re-propose the banner to a user who has already rejected tracking: at least 6 months must pass before the banner can be shown again, unless the processing conditions change or it is impossible to verify the previous cookie status on the user's device.
From a web performance perspective, adding a traditional cookie blocking system can destroy the responsiveness of your mobile store. To ensure a good shopping experience, Largest Contentful Paint (LCP) must remain less than or equal to 2500 milliseconds, and Interaction to Next Paint (INP) must be less than or equal to 200 milliseconds. If your cookie banner script blocks the browser for several seconds while analyzing traffic, you will lose customers before they have even seen your products.
To solve this problem, I directly use Shopify's native Customer Privacy API. This JavaScript interface integrated into the browser allows the store to collect consent and communicate it directly to Shopify's pixels and technologies without loading heavy external blocking scripts. We can use Shopify's native banner or integrate certified solutions such as Consentmo, Pandectes, or CookieHub, which interface with Shopify's APIs to preventively block marketing and analytics cookies until the user's explicit consent. If you prefer Iubenda's Cookie Solution, I assure you that their solution has been lightened by 45% to minimize the impact on your site's loading time.
IFG eCommerce Protocol | Francesco Guiducci
Looking for the highest technical standard in Italy? Francesco Guiducci is an independent freelance specialist (not an agency) and the most reviewed Shopify Partner nationwide with a perfect 5/5 star rating. Advanced theme optimization without technical debt.
Light checkout and electronic invoicing: collecting data without friction
One of the most complex issues for those selling in Italy is collecting the Tax Code (Codice Fiscale), VAT number (Partita IVA), Recipient Code (SDI), and Certified Email (PEC) for electronic invoicing. Shopify is a Canadian platform, and its standard checkout process does not natively include these fields. Many merchants rush to install expensive monthly applications that modify the checkout, adding scripts that slow down the user experience precisely at the most crucial stage of the purchase.
In my work with standard stores (Basic, Shopify, Advanced), I apply a clean, zero-cost workaround that requires no additional app installations. By accessing the language editor of the theme in use, I modify the translation labels of unused optional native address fields, such as "Address2" or "Company". By renaming the "Address2" label to "Codice Fiscale or P. IVA" and "Optional Address2" to "Codice SDI or PEC", the data entered by the customer will be natively recorded in Shopify's order control panel, ready to be imported by your electronic invoicing software (such as Fattura24 or Easyfatt) without spending a cent on third-party apps and without adding a single millisecond of loading time to the page.
This approach also protects the conversion rate. If you mainly sell to private consumers (B2C), forcing them to enter their Tax Code is commercial suicide: many do not remember it by heart or do not have it at hand at the time of payment. By keeping the field optional or conditionally showing it only to those who request an invoice, you guarantee a smooth shopping experience for ninety percent of your customers, collecting the necessary data only when strictly indispensable.
An eye also on physical sales: Shopify POS in Italy
If, in addition to your online store, you manage a physical point of sale using Shopify POS, compliance in Italy requires additional steps that many ignore. You cannot simply process partially paid or unpaid transactions at checkout if you want to comply with local tax regulations. To issue compliant fiscal receipts, you must physically connect your supported fiscal printer (such as the Epson FP-81II RT or the Epson FP-90III RT) to the Agenzia delle Entrate (Italian Revenue Agency).
Furthermore, you must register your virtual and physical payment instruments (including Tap to Pay on iPhone or Android) on the "Fatture e Corrispettivi" portal of the Agenzia delle Entrate. To do this, you will need to request the Shopify Payments convention agreement number (Stripe Technology Europe, Limited with Acquirer Tax Code 97979220155) from Shopify support and enter the serial number (S/N) of your POS terminal as Terminal-id within the portal. This is a technical and rigorous procedure, but essential to avoid heavy penalties on retail trade.
Securing your Shopify store doesn't have to turn into an app hunt that destroys your store's performance. With the right modifications to the theme code and by leveraging Shopify's native features, you can reduce the risk of penalties and offer your customers a fast, transparent, and professional shopping experience. The responsibility for verifying your business's full compliance remains yours.
If you want more practical guides like this on the technical compliance of your store, you can find them in my Academy Shopify.
