Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
Launching an online store can feel like the fastest way to turn a good idea into real revenue. You can test products quickly, reach customers across the UK (and beyond), and scale without the overheads of a physical shop.
But online selling isn’t a “post it and hope” situation. If you’re selling to consumers, there are specific online selling rules and regulations UK businesses need to follow - and the basics (like having the right website terms and a legally compliant checkout) can make a huge difference if something goes wrong later.
This guide breaks down the key legal rules for selling online in the UK in plain English, with practical steps you can action straight away.
What Counts As “Online Selling” (And Why It Matters Legally)
“Online selling” covers more than a Shopify-style store. It can include:
- selling through your own website
- selling through a marketplace platform (where the platform hosts the checkout)
- selling via social media DMs or “link in bio” checkouts
- taking card payments through online invoices or payment links
The exact online selling rules and regulations UK businesses must follow can change depending on:
- who you sell to (consumers vs other businesses)
- what you sell (physical goods, digital downloads, subscriptions, services)
- where your customers are based (UK-only vs international)
- how your checkout works (your own checkout vs marketplace checkout)
If you’re selling to consumers (B2C), the legal compliance bar is higher - mainly because consumer law gives customers strong rights around refunds, cancellations, faulty goods and misleading marketing.
It’s worth getting clarity on this early, because it affects everything from your returns process to what must be displayed on your product pages and checkout.
Getting Your Online Business Setup Right From Day One
Before we jump into consumer rules, it’s worth zooming out. A lot of legal headaches in ecommerce don’t come from one “big” mistake - they come from missing foundations.
Choose The Right Business Structure
Your structure impacts liability and how you bring in co-founders or investors later. It can also affect how tax applies to you and your business (but this section is general information and not tax advice). The main options are:
- Sole trader (simpler admin, but you’re personally liable)
- Limited company (more admin, but generally limits personal liability and can support growth)
- Partnership (shared ownership - but make sure roles and profit splits are clearly documented)
There’s no one-size-fits-all. For example, if you’re selling products with higher risk (like cosmetics or kids’ products), or you’re planning to scale quickly, you may want to consider a limited company sooner rather than later.
Make Sure Your Supplier And Fulfilment Arrangements Are Clear
If you’re using a manufacturer, supplier, fulfilment centre, or dropshipping arrangement, you should treat those as core business relationships - because they are.
At a minimum, you’ll want to be clear on:
- lead times and delivery deadlines
- quality control standards and defect processes
- who pays for returns, replacements, and damaged stock
- who owns IP in packaging and product designs
- what happens if the relationship ends
When these points aren’t agreed upfront, the customer-facing legal risk often lands on you (even if the supplier caused the issue).
Have The Right Website Terms In Place
Your online store needs terms that actually match how you sell - including how orders are formed, delivery expectations, returns, cancellations, and limitations that are legally allowed.
For many ecommerce businesses, Online Shop Terms and Conditions are a practical baseline, and then you tailor them for things like pre-orders, custom products, subscriptions, or age-restricted goods.
This isn’t about burying customers in legal text. It’s about reducing misunderstandings and giving you a clear framework if there’s a dispute.
The Consumer Law Rules Online Sellers Need To Know
If you sell to consumers online, a lot of the online selling rules and regulations UK businesses talk about are really consumer law obligations in disguise. The key laws and principles you’ll keep bumping into include:
- Consumer Rights Act 2015 (faulty goods, quality, “as described”, remedies)
- Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 (distance selling rules, cancellation rights, pre-contract info)
- rules around unfair terms and misleading practices (including pricing transparency and sales claims)
Distance Selling: The “Pre-Contract Information” Rules
Online sales are generally “distance contracts”, which means you must give consumers certain information before they buy - typically on your product pages and during checkout.
This usually includes:
- your business name and contact details
- the main characteristics of the goods/services
- the total price (including taxes) and how it’s calculated
- delivery costs and delivery timelines
- how the consumer can cancel (and any exceptions)
- your returns/refund process
These obligations are a big reason why ecommerce sites need more than just a nice-looking storefront - your legal information architecture matters. If you want a deeper breakdown of how these rules operate, Distance Selling Laws are worth understanding properly because they impact your checkout flow and post-purchase emails.
The 14-Day Cancellation Right (And Its Common Exceptions)
For many online consumer purchases, customers have a 14-day right to cancel (often called a “cooling-off period”). This is not the same as a refund for faulty goods - it’s a separate right that can apply even if the customer just changes their mind.
There are important exceptions, and they can be technical and fact-specific. Depending on what you sell and how you supply it, the right to cancel may not apply (or may be lost once certain conditions are met). Common examples include:
- custom-made or clearly personalised goods
- sealed goods that are not suitable for return due to health protection or hygiene reasons, if they become unsealed after delivery (where the legal criteria are met)
- digital content not supplied on a tangible medium, once performance has begun (where the customer has given the required consent and acknowledgement)
Because the exceptions rely on specific wording and how your checkout and delivery process works, it’s a good idea to get your terms and checkout wording tailored - especially if you sell anything personalised, made-to-order, or digital.
Faulty Goods: Your Obligations Don’t Stop At “No Refunds”
Even if your site says “no refunds”, consumer law may override that. Under the Consumer Rights Act 2015, goods must be:
- of satisfactory quality
- fit for purpose
- as described
If you sell faulty goods, customers can have rights to refunds, repairs or replacements (depending on the situation and timing).
Also, customers often ask: “How long should my refund take?” The answer isn’t “whenever we get to it”. There are expectations and legal obligations around timing, and this is one of those areas where having a clear internal process saves you from complaints and chargebacks. This guide on refund timeframes is a useful reference when setting up your customer service SOPs.
Website Compliance: Pricing, Checkout, And Order Confirmations
A lot of online selling compliance comes down to “what the customer sees and agrees to” at each stage of the purchase journey.
Be Clear And Upfront About Pricing
Hidden fees are a fast way to fall into a compliance hole (and lose customer trust). Make sure:
- prices are not misleading
- VAT treatment is clear where relevant
- delivery costs are obvious before checkout is completed
- any subscription or recurring charges are clearly disclosed
If you run promotions, flash sales, or “was/now” pricing, take care that your pricing claims can be justified. Regulators take misleading pricing seriously, and customers will call it out even faster than regulators do.
Make Your Checkout “Legally Clean”
From a legal perspective, checkout is where the contract is formed. Practical steps to reduce risk include:
- ensuring customers actively agree to your terms (for example, a checkbox)
- making key terms accessible at checkout (delivery timelines, cancellations, returns)
- confirming orders in writing (email confirmation)
- keeping clear records of what was agreed (including the version of terms)
This isn’t about making the process clunky. It’s about ensuring you can prove what the customer agreed to if there’s a dispute later.
Invoices And Record Keeping
Even if you’re using an ecommerce platform, you should still think about invoicing and records as part of compliance and operations.
Your invoices should include the right information, and your internal records should allow you to reconcile orders, refunds, and chargebacks efficiently. If you want a practical checklist, this guide to UK invoice requirements is a good starting point.
Data Protection And Privacy Rules For Online Selling In The UK
If you sell online, you’ll almost certainly collect personal data - even if it’s “just” names, emails, addresses, order history, or IP addresses.
That means UK GDPR and the Data Protection Act 2018 are part of the online selling rules and regulations UK businesses must factor into their day-to-day operations.
What Personal Data Are You Collecting?
Common examples in ecommerce include:
- customer account details (name, email, password)
- delivery addresses and phone numbers
- payment-related details (usually processed by a payment provider, but you still need to manage the relationship)
- support tickets and customer complaints
- website analytics and behavioural data (cookies)
- marketing lists and preferences
You should know what data you collect, why you collect it, where it’s stored, and who it’s shared with (for example, couriers, fulfilment partners, email marketing providers).
Privacy Policy And Transparency
A clear Privacy Policy is one of the simplest (and most visible) compliance steps you can take. It should explain, in plain language:
- what personal data you collect
- your purposes and lawful bases for processing
- who you share data with
- how long you keep data
- how customers can exercise their rights
The key is that it needs to match what you actually do - especially if you use third-party tools for analytics, retargeting, customer support, or email marketing.
Cookies And Tracking
If your website uses cookies (and most do), you’ll also need to think about cookie compliance - including what your cookie banner says, how cookie choices are collected, and how users can manage preferences.
In many cases (particularly where cookies are used for analytics, advertising, or other non-essential purposes), you’ll need user consent before those cookies are set. Having a proper Cookie Policy helps you explain what cookies you use and why, and it also supports transparency if a customer asks questions about tracking.
One practical tip: your marketing plans and your privacy compliance should be designed together. If you bolt privacy on at the end, you often have to redesign your customer journey anyway.
Product Compliance, Advertising Rules, And Common Ecommerce Pitfalls
Once your store is live, the biggest risks for many small online sellers aren’t dramatic legal disputes - they’re repeatable, everyday issues that turn into chargebacks, complaints, negative reviews or regulator attention.
Make Sure Your Products Are Safe And Properly Described
Product compliance can vary depending on what you sell. For example, cosmetics, food, supplements, children’s products, electricals and certain imports can come with extra labelling, safety, or standards requirements.
Even if you’re sourcing from overseas, customers buy from you. So it’s worth doing due diligence on:
- product testing and safety certifications (where relevant)
- labelling (ingredients, warnings, instructions)
- claims you’re making (for example, “hypoallergenic” or “clinically proven”)
- batch tracking and recalls (where relevant)
This is also why your supplier terms matter - if there’s a defect trend, you’ll want a clear pathway to recover costs from your supply chain where appropriate.
Be Careful With Marketing Claims
Online marketing moves fast, but the legal rules still apply - including on TikTok, Instagram, email campaigns, and product listings.
As a general rule:
- avoid exaggerated or unprovable claims
- don’t use fake scarcity (“only 2 left!”) unless it’s true
- ensure “sale” pricing is legitimate
- be clear about delivery timelines (especially for pre-orders)
If you use influencers or affiliates, you also need to make sure ads are labelled properly and that your contracts cover content ownership, usage rights, and brand protections.
Returns, Refunds, And Customer Support: Set The Process, Not Just The Policy
Many ecommerce businesses have a returns page, but no real internal workflow. That’s where things break down: the customer gets frustrated, disputes the transaction, and you lose the product and the money.
A practical returns/refunds setup usually includes:
- clear written terms for change-of-mind returns (including timeframes and product condition requirements)
- a separate approach for faulty goods and damaged-in-transit items
- templates for customer support responses (so your team doesn’t improvise legal commitments)
- a process for partial refunds, replacements, store credit, and return postage
Remember: your policies need to be consistent with consumer law. If you want to offer a more generous “goodwill” returns policy, that can be a smart commercial decision - but it should be written clearly so it’s actually workable as you grow.
Key Takeaways
- The online selling rules and regulations UK businesses need to follow depend on whether you sell to consumers, what you sell, and how your checkout works.
- If you sell online to consumers, you’ll usually need to comply with the Consumer Rights Act 2015 and the Consumer Contracts Regulations, including clear pre-contract information and (in many cases) a 14-day cancellation right.
- Your website should make pricing, delivery costs, delivery timeframes, returns and cancellation rights clear before the customer buys - not hidden in FAQs.
- Strong Online Shop Terms and Conditions help reduce disputes by clearly setting out how orders are formed, what happens if something goes wrong, and what your customers can expect.
- UK GDPR compliance matters for ecommerce because you’ll almost always collect personal data - a tailored Privacy Policy and clear cookie practices are key foundations.
- Don’t treat refunds and returns as an afterthought - build a process that’s legally compliant and operationally realistic, especially as your order volume grows.
- If you’re unsure which rules apply to your specific store (especially for digital goods, subscriptions, pre-orders, or regulated products), getting tailored legal advice early can save you a lot of time and cost later.
If you’d like help getting your online store legally protected from day one, you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.


