Every UK ecommerce business must have certain legal pages on its website to meet regulatory requirements and protect both the company and its customers. These include a privacy policy, terms and conditions, cookie notice, accessibility statement and clear trading information.
Putting the right pages in place from the start reduces risk, builds customer trust and helps avoid complaints or enforcement action. This guide explains what each page should cover, why it matters and practical steps to create them.
Why legal pages matter for UK ecommerce
UK law requires online sellers to provide specific information to customers before, during and after a sale. Missing or inadequate legal pages can lead to customer disputes, negative reviews or intervention by regulators. A well-written set of pages also helps demonstrate that the business takes its obligations seriously.
Start by listing every piece of personal data you collect, every way you communicate with customers and every promise you make on the site. This forms the foundation for the content of your legal pages. Review the pages at least once a year or whenever you change how the business operates, such as adding new payment methods or expanding to new markets.
Privacy policy
A privacy policy explains what personal data your site collects, why it is collected, how it is stored and with whom it is shared. UK ecommerce businesses must comply with data protection law when handling customer names, addresses, email addresses, payment details or browsing behaviour.
Write the policy in clear language. Include sections on the lawful basis for processing data, how long you keep records, customer rights to access or delete their data, and how to contact you. If you use third-party tools such as analytics, advertising pixels or email marketing services, name them and explain what data they receive. Provide a way for customers to request a copy of the policy or ask questions. Update it whenever you introduce new data practices.
Terms and conditions
Terms and conditions set out the rules that govern use of your website and the contract between you and the customer. They typically cover order processing, delivery times, returns, refunds, intellectual property rights and limitations of liability.
Make the terms specific to your business model. For example, if you sell handmade goods, state your policy on custom orders and cancellations. If you use a marketplace platform, ensure your terms do not contradict the platform’s rules. Place a clear link to the terms at checkout and on the footer of every page. Require customers to agree to them before completing a purchase. Keep a dated copy of each version in case a dispute arises about which terms applied at the time of sale.
Cookie policy and consent
UK law requires websites to obtain consent before placing certain cookies or similar technologies on a user’s device. A cookie policy describes the types of cookies used, their purpose and how users can manage them.
Implement a consent banner that appears on first visit and allows users to accept, reject or customise categories such as analytics or marketing cookies. The banner should link to the full cookie policy. Explain which cookies are strictly necessary for the site to function and why consent is not required for them. Provide instructions on how to withdraw consent later. Test the banner on different devices and browsers to ensure it works correctly and records consent choices.
Accessibility requirements
UK ecommerce sites must make reasonable adjustments so that disabled users can access the same information and complete the same transactions as other customers. This includes providing alt text for images, sufficient colour contrast, keyboard navigation and clear heading structures.
Produce an accessibility statement that explains the steps taken to improve accessibility, any known limitations and how users can request information in an alternative format. Test the site with automated tools and manual checks such as tabbing through forms without a mouse. Consider the needs of users with visual impairments, hearing loss, motor difficulties or cognitive differences. Review the statement whenever significant changes are made to the website design or functionality.
Trading standards and required information
UK law requires online traders to display their business name, full postal address, contact details and company registration number where applicable. Product descriptions must be accurate, pricing must be clear and inclusive of taxes, and delivery costs must be shown before a customer enters payment details.
Include a dedicated ‘Legal’ or ‘Compliance’ page that brings together all mandatory information. State the trading name, registered office address if different, email address and telephone number. If you are a limited company, display the company number and VAT number if registered. Provide clear pre-contract information about the right to cancel, how returns work and who pays for return postage. Ensure that all policies are easy to find from the homepage and checkout flow.
Practical implementation steps
Begin by drafting each page yourself using the structure above, then have the drafts reviewed by a legal professional familiar with UK ecommerce. Many free or low-cost templates exist, but they must be adapted to reflect your actual practices. Publish the finished pages on your website with prominent links in the footer and at key customer journey points.
Document the date each policy was last updated. Set calendar reminders to review them regularly. If you sell on third-party platforms, check their current terms for any additional information they require you to display. Test the complete customer journey to confirm that all legal information is visible before purchase. Keep records of customer consent for cookies and marketing communications.
Founders based in West Yorkshire can access free desk space, a registered address and mentoring at Loomworks in Liversedge to help turn these compliance tasks into a solid foundation while they build their business.
Frequently asked questions
Do I need a lawyer to write my privacy policy and terms?
You can draft your own policies using reliable templates as a starting point, but it is wise to have them checked by someone with knowledge of current UK law. This helps ensure the wording accurately reflects what your business actually does with customer data and orders.
How often should I update my website legal pages?
Review your legal pages at least once a year and whenever you change business practices such as adding new payment providers, marketing tools or delivery options. Keeping them current reduces the risk of providing outdated or misleading information to customers.
What information must appear on every UK ecommerce website?
You must display your business name, geographic address, contact details, company number if applicable and clear pricing including taxes. Links to privacy policy, terms, cookie policy and accessibility statement should be easy to find from every page.
Can I copy legal pages from another ecommerce site?
Copying another site’s wording is not advisable because it may not match your actual operations and could contain clauses that do not apply to your business. Always create policies that describe your specific processes for handling data, orders and customer rights.
Where should I place links to legal pages on my site?
Place links in the website footer so they appear on every page. Also include them on the checkout page before payment, in the account registration flow and within order confirmation emails where relevant.
Related reading: Building and nurturing an email list as a UK startup, Social media strategy for UK side-hustle businesses, Smart inventory management for UK ecommerce startups. Browse all starting a business guides or apply to Loomworks.