Privacy Policy

Effective date: 2026-10-26 · Last updated: 2026-10-26

Gulf ID (“the app”, “we”, “us”) is a Shopify app published by Trifid Media LLC, Dubai, United Arab Emirates. It lets merchants collect a buyer’s Gulf ID number (for example a Saudi national ID or Iqama, Emirates ID, Kuwait Civil ID, Qatar ID, Bahrain CPR or Oman civil ID number) and the Saudi National Address short code in the cart, and blocks checkout when a required number is missing or not valid. This policy explains what the app accesses, why, and where that data goes.

In short:

• ID numbers are stored only in the merchant’s own Shopify store, with the cart and the order.

• ID numbers are never sent to our servers and we never store them.

• Numbers are checked with offline rules (length, format and, for Saudi IDs, the check digit). We do not look them up in any government or third-party database.

• We do not sell, rent or share data, and we do not use it for advertising or AI training.

1. Data the app accesses in your store

The app uses these Shopify permissions:

PermissionWhat we use it for
read_validations
write_validations		 Create Gulf ID’s checkout rule, switch it on or off, and save your settings to it.

We do not request access to orders, customers, products or your theme. The app cannot read your customers’ names, email addresses, phone numbers, addresses or past orders.

2. ID numbers your customers enter

When you switch on the app’s box in your theme, buyers can type an ID number on the cart page, in the cart drawer or (if you turn it on) on product pages. The number is saved directly to the buyer’s Shopify cart as a cart attribute (or, on product pages, a line item property) by the buyer’s browser talking to your store. It then appears on the order in your Shopify admin, where you and your courier can see it, like any other order note.

The number goes from the buyer’s browser to your Shopify store only. It does not pass through our servers and we never receive a copy. You decide who in your team and which couriers see your orders, and you are responsible for telling your customers why you ask for the number (for example in your own store’s privacy policy).

3. What happens at checkout

Gulf ID’s checkout rule runs inside Shopify’s own infrastructure (Shopify Functions). For each checkout it reads the ID numbers on the cart, the delivery country, the cart total, whether a product is tagged needs-id, and the buyer’s language, and decides whether to let the checkout continue. This happens inside Shopify for that checkout only. Nothing is sent to us and nothing is stored by the rule.

4. Where your settings are stored

Your settings (which countries are required, your messages) are saved in your own Shopify store: on Gulf ID’s checkout rule, and a copy of the countries on the app’s installation so your theme can show the right box. The admin page remembers your language choice in your browser only, and the cart box remembers the buyer’s chosen country for the browsing session only.

5. Our servers

A small service on Cloudflare delivers the admin page, receives Shopify’s mandatory privacy webhooks, and asks Shopify which plan your store is on. It handles your store’s domain and Shopify-issued session tokens to check that requests are genuine. It never receives ID numbers or customer data and does not store merchant data.

6. Billing

Subscriptions are billed by Shopify through your Shopify invoice. We never see your payment details.

7. Service providers

We do not use any other third parties to process your store’s data.

8. Retention and deletion

Because we store no ID numbers and no store or customer data on our servers, there is nothing to delete on our side. ID numbers stay on the carts and orders in your Shopify store for as long as you keep those orders, and are removed when you delete them or when Shopify deletes the customer’s data. When you uninstall Gulf ID, Shopify removes its checkout rule and settings; numbers already on past orders stay in your store.

9. Requests from your customers

If one of your customers asks to access or delete their data (for example under the UAE PDPL, Saudi Arabia’s PDPL or GDPR), we will confirm that Gulf ID holds no data about them; their ID number is only on their orders in your store, which you can edit or delete in your Shopify admin. Shopify’s mandatory privacy webhooks are received and acknowledged.

10. Security

11. Children

Gulf ID is a business tool for Shopify merchants. We do not knowingly collect data from anyone under 18.

12. Changes to this policy

If we make material changes, we will update the date at the top of this page and tell active merchants through the app or by email.

13. Contact