Essential legal pages every UK e-commerce site needs

Every UK e-commerce website needs specific legal pages to operate compliantly and protect both the business and its customers. A privacy policy, terms and conditions, returns policy and cookie notice form the minimum set required to meet current expectations and regulations.

Without these pages, sellers risk complaints, disputes or regulatory action. This guide explains each required page, what it should cover, and how to create and display them on common platforms such as Shopify, WooCommerce and Magento.

Why legal pages matter for UK online stores

UK customers expect to see clear information about how their data is used, what happens if they change their mind about a purchase, and the rules that govern the transaction. Displaying the right pages builds trust and reduces the volume of support queries about refunds, data or delivery.

Platforms such as Shopify, WooCommerce and Magento make it straightforward to add these pages, but the content must be accurate for the specific business. General templates can be adapted, yet each seller should review the wording against their actual practices. Requirements can change, so it is wise to check the latest guidance on GOV.UK regularly.

Privacy policy

A privacy policy explains what personal data the site collects, why it is collected, how it is stored and with whom it is shared. It must cover website analytics, customer accounts, order information, marketing emails and any third-party tools such as payment gateways or review services.

Practical steps

List every piece of data collected on the site, including names, addresses, email addresses, payment details and browsing behaviour.
State the lawful basis for processing, such as contract, consent or legitimate interest.
Name any processors or third parties, for example payment providers or email marketing tools.
Explain how customers can request access to, correction or deletion of their data.
Include a last-updated date and make the page easy to find from the footer.

Use a template as a starting point but replace every generic clause with details that match the actual operation. A policy that does not reflect reality offers little protection.

Terms and conditions

Terms and conditions set out the contractual rules between the seller and the buyer. They typically cover order acceptance, pricing and payment, delivery arrangements, intellectual property rights and limitations of liability.

Key sections to include

How and when a contract is formed once a customer places an order.
Accepted payment methods and what happens if payment fails.
Delivery timescales, costs and responsibility for goods in transit.
Rules on product descriptions, pricing errors and order cancellation by the business.
Any age restrictions or prohibited uses of the site.

On Shopify, add the page via Online Store > Pages, then link it in the footer. WooCommerce users can create a standard WordPress page and assign it in the settings. Magento allows static pages with similar footer linking. Review the platform’s current terms because features and recommended practices evolve.

Returns and refunds policy

UK buyers have a statutory right to cancel most online purchases within 14 days of receiving the goods. A clear returns policy explains how customers exercise this right, who pays for return shipping, the condition in which items must be returned and any exceptions such as personalised goods or perishable items.

Practical content checklist

State the 14-day cancellation window and how to notify the business.
Explain the process for returning goods, including any prepaid labels or collection options.
Detail when refunds will be issued and whether original shipping costs are refunded.
List any products that cannot be returned for hygiene or other reasons.
Describe the procedure for faulty items, which may involve different rights and time limits.

Place a prominent link on the checkout page and in the footer. Update the policy whenever shipping carriers or internal processes change. Always check the latest consumer rights guidance on GOV.UK rather than relying on memory of specific rules.

Cookie policy and GDPR compliance

A cookie notice informs visitors about the cookies and similar technologies the site uses, why they are needed and how users can manage preferences. Under GDPR and the Privacy and Electronic Communications Regulations, consent is required for non-essential cookies such as marketing or analytics.

Implementation steps

Identify every cookie set by the site, plugins, analytics tools and embedded content.
Categorise them as strictly necessary, functional, analytics or targeting.
Provide a clear, accessible cookie consent banner on first visit that does not use pre-ticked boxes.
Link to a detailed cookie policy page that lists each cookie, its purpose, duration and provider.
Offer a preference centre where users can change consent at any time.

Shopify and WooCommerce have apps and plugins that help manage consent banners. Magento offers built-in tools but still requires accurate configuration. The policy must be specific to the cookies actually in use; copying a generic template risks non-compliance.

Displaying and maintaining the pages

All legal pages should be linked from the website footer so they are accessible from every page. Many stores also add links on the checkout page and in order confirmation emails. Use plain language that customers can understand rather than dense legal text.

Schedule a review of each page at least every six months or after any significant change to business practices, payment providers or third-party tools. Keep records of previous versions. If the business operates from a specific location such as an incubator or shared workspace, ensure the registered address shown on the site is accurate and up to date.

Loomworks in Liversedge offers selected early-stage founders free desks, a registered address and mentoring that can help new e-commerce sellers focus on these compliance basics without heavy initial overheads.

Getting started with templates

Begin with a recognised template for each page type, then customise every section to match the exact data flows, delivery methods and refund processes of the store. Read the platform’s help documentation for the correct way to add and link the pages. Test that the links work, the pages are mobile-friendly and the cookie banner functions correctly across devices.

Consider using a checklist that covers data mapping, third-party relationships and consent mechanisms. When in doubt about any aspect, refer directly to the official sources on GOV.UK, HMRC or Companies House for the most current requirements. Accurate, up-to-date legal pages reduce risk and demonstrate professionalism to customers from the first visit.

Frequently asked questions

Do I need a lawyer to write my e-commerce legal pages?

Many UK founders begin with well-structured templates and adapt them to their specific operations. While this can be sufficient for straightforward stores, complex business models or high-risk product categories benefit from professional legal review. Templates are a starting point, not a substitute for ensuring the content matches actual practices.

How often should I update my privacy policy and terms?

Review legal pages at least twice a year and whenever the business introduces new data collection methods, payment providers, delivery partners or product types. Record the date of the last update on each page. Changes in platform features or official guidance also justify a review.

Can I copy legal pages from another website?

Copying another site’s legal text is not advisable. Policies must reflect the exact data handling, refund processes and contractual terms of your own business. Using someone else’s wording can create misleading statements that leave the business exposed.

Where should I place links to legal pages on my store?

The footer should contain prominent links to all legal pages on every page of the site. Additional links are recommended on the checkout page, account registration and in post-purchase emails. The cookie consent banner must link to the full cookie policy.

Is a returns policy legally required?

While not strictly mandatory, a clear returns policy is expected by customers and helps meet consumer rights obligations. It reduces disputes by setting expectations about the returns process, costs and time limits. Most platforms and customers look for this information before buying.