Launching an ecommerce store in the UK requires attention to several legal requirements that protect consumers and ensure your business operates compliantly from day one. Meeting these obligations helps avoid disputes, builds customer trust and reduces the risk of regulatory action.
This checklist focuses on the core areas every online seller should address: understanding consumer rights, distance selling regulations, data protection under GDPR, creating a compliant returns policy and completing essential website steps. Each section provides specific, practical actions you can take.
Understanding consumer rights in UK ecommerce
UK consumers have statutory rights when buying goods online. These include the right to receive goods that are of satisfactory quality, fit for purpose and as described. If items arrive damaged, faulty or not as advertised, customers can usually request a repair, replacement or refund.
As a seller you must honour these rights. Make sure product descriptions, images and specifications are accurate. Keep records of all orders, communications and delivery evidence. When a customer contacts you about an issue, respond promptly and document the resolution. Familiarise yourself with the Consumer Rights Act by reading the guidance on GOV.UK and review it regularly because rules can be updated.
Practical step: create a simple internal checklist for your team covering common complaints such as late delivery, incorrect items or quality issues. Use this to ensure consistent handling and to demonstrate that you take compliance seriously.
Complying with distance selling regulations
Distance selling rules apply to most online sales where there is no face-to-face contact before the contract is made. You must provide clear pre-contract information including your identity, full contact details, the total price including taxes and delivery costs, and the duration of any offer.
Customers generally have a 14-day cooling-off period to cancel most purchases without giving a reason. You need to inform them of this right, how to exercise it and who pays for return postage unless you choose to cover the cost yourself. The information must be given in a clear and prominent manner before the purchase is completed.
Practical step: add a dedicated pre-order information page or section at checkout that lists all required details. Keep copies of the information provided to each customer, either through your platform’s order confirmation or by saving screenshots of the checkout flow. Check the current GOV.UK guidance on consumer contracts because requirements can change and platform terms may impose additional obligations.
Meeting GDPR requirements for online stores
GDPR governs how you collect, store and use personal data of your customers and website visitors. You must have a lawful basis for processing data such as consent or legitimate interest, and you must only collect data that is necessary for your stated purposes.
Key actions include maintaining a privacy policy that explains what data you collect, why, how long you keep it and who it may be shared with. You also need to provide an accessible way for individuals to request their data, correct inaccuracies or request deletion. If you use cookies or similar tracking technologies, you must obtain appropriate consent and maintain a cookie policy.
Practical step: review every form on your site and remove any fields that are not strictly required. Document your data processing activities in a simple register. If you use third-party tools such as email marketing services or analytics platforms, ensure you have data processing agreements in place. Revisit your policies whenever you add new features or change suppliers. Current guidance is available on the ICO website and should be checked regularly.
Creating an effective and compliant returns policy
A clear returns policy helps manage customer expectations and demonstrates transparency. While you are not required to offer a returns policy beyond the statutory 14-day cooling-off period for most distance sales, many stores choose to exceed this to improve customer experience.
Your policy should state the time frame for returns, conditions for acceptance, who pays for return shipping and how refunds will be processed. It must not contradict statutory rights. For example, you cannot refuse a return simply because the original packaging has been opened if the item is otherwise unused and in resaleable condition.
Practical step: write your policy in plain English and place a link to it in the footer, at checkout and in order confirmation emails. Test the policy by walking through example scenarios such as a faulty item, a change of mind and a late return. Update the policy if you change your practices and ensure all staff who handle customer service understand its terms. Always refer to the latest GOV.UK consumer rights guidance to confirm your approach remains compliant.
Website compliance steps before launch
Your website itself must meet several legal standards. You need to display your business name, registered address or geographic address, contact telephone number or email address and company registration number if you are incorporated.
Include clearly visible links to your terms and conditions, privacy policy, cookie policy and returns policy. Terms and conditions should cover important topics such as pricing, payment, delivery, risk and title, intellectual property and limitations of liability. Ensure all policies are easily accessible on every page, usually through the footer.
Practical steps: run a final compliance audit two weeks before launch. Check that every page has the required legal links, that prices include VAT where applicable and that the checkout process clearly shows delivery costs before payment. Test the site on mobile and desktop to confirm policies remain easy to find. If you sell to consumers in other parts of the UK or EU, verify whether additional information is needed. GOV.UK and your ecommerce platform’s help centre provide up-to-date checklists that you should review.
Putting it all together and next steps
Once you have drafted your policies, tested your checkout flow and documented your processes, schedule a final review. Read every customer-facing document aloud to ensure the language is clear. Ask a friend or colleague unfamiliar with your business to try placing a test order and then requesting a return or accessing their data. Fix any confusing areas.
Keep records of when policies were last updated and set calendar reminders to review them every six months or after any significant business change. Staying compliant is an ongoing process rather than a one-time task. As your store grows you may need to consider additional areas such as packaging recycling obligations or advertising standards, so continue checking official sources.
Founders based in West Yorkshire can explore free desk space, a registered address and mentoring at Loomworks in Liversedge, which supports selected early-stage ecommerce and AI startups with no fees or equity taken.
Frequently asked questions
Do I need a separate returns policy if I already mention returns in my terms and conditions?
It is best practice to have a dedicated, clearly labelled returns page. This makes the information easy for customers to find and demonstrates transparency. The policy can be referenced in your terms but should stand alone so customers do not have to search through legal text. Always ensure the content does not contradict statutory consumer rights.
How detailed does my GDPR privacy policy need to be?
The policy must accurately describe what personal data you collect, the lawful basis for processing it, how long you retain it, who it is shared with and the rights customers have. Keep the language straightforward. Update it whenever your data practices change. The ICO website provides templates and checklists to help you cover the required points without using overly complex legal jargon.
Can I charge customers for returning items bought online?
You can require the customer to pay return postage for change-of-mind returns provided you clearly informed them of this before they placed the order. You must refund the original delivery cost if they return the entire order. For faulty or misdescribed items you usually cover the return cost. Always state your position clearly in your returns policy and keep evidence of the information you gave at the time of sale.
What information must I display on my ecommerce website?
You should show your full business name, contact details including a geographic address or registered office, a phone number or email address, and your company number if incorporated. Links to terms and conditions, privacy policy, cookie policy and returns information must be easily visible, typically in the footer. Prices must make clear whether VAT and delivery costs are included.
How often should I review my ecommerce legal documents?
Review your policies at least every six months and whenever you make significant changes to your products, processes or third-party tools. New regulations or updates to GOV.UK guidance may require adjustments. Keeping a simple version-control log helps you demonstrate that you take compliance seriously if questions arise later.
Related reading: Creating realistic financial forecasts for UK startups, How to run a side hustle while keeping your day job in the UK, How to validate a physical product idea in the UK market. Browse all starting a business guides or apply to Loomworks.