This article is general information, not legal advice. Laws differ by country, state and sometimes city, and they change. For decisions that matter, speak with a qualified professional in your area.
Why the rules apply to small stores too
An online store is a business, and businesses are generally expected to follow the laws of the places where they operate and often those of the places where their customers live. Size does not remove most obligations, though some rules have thresholds that depend on turnover or the number of customers. The practical aim for a new seller is not to become a legal expert. It is to know which topics exist, so that nothing important is discovered by surprise.
Where the rules come from
Ecommerce is rarely governed by one law. Instead, several areas overlap:
- Consumer protection: how you describe, price, sell and deliver goods.
- Privacy and data protection: how you collect and use customer information.
- Business and tax rules: registration, record-keeping and reporting.
- Product rules: safety, labeling and restrictions on certain goods.
- Advertising and email rules: what you may claim and whom you may contact.
- Accessibility: in some places, websites are expected to be usable by people with disabilities.
Because shoppers can be anywhere, it is possible to be affected by rules from more than one place. A common starting position is to follow the rules where you are based and where most of your customers live, then expand your knowledge as you reach new markets.
Consumer protection
Consumer law is about fairness between sellers and buyers. The details differ widely, but common themes include:
- Accurate descriptions. What you say about a product should be true and not misleading, including photos, sizes and claims about performance or materials.
- Clear prices. Shoppers generally need to see the full price, including mandatory charges, before they commit. Showing total costs early helps avoid unexpected fees at checkout.
- Right to cancel or return. Many places give buyers a cancellation period for distance sales, often with exceptions for certain products. This varies, so check the rules where you sell. Our topic of consumer rights in distance selling goes deeper.
- Delivery and refunds. There are often expectations around delivery times and what happens if goods never arrive or are faulty.
- Fair terms. Terms that are hidden, one-sided or unclear may not be enforceable.
If you advertise sales or “before” prices, be careful that comparisons are genuine. Some places have specific rules on this.
Privacy and data protection
A store collects names, addresses, email addresses and order histories, which is personal data. Many regions have laws setting out how such data may be gathered, used, stored and shared. Common ideas include:
- Collect only what you need.
- Tell people what you collect and why.
- Keep it secure.
- Let people ask what you hold and ask for it to be corrected or deleted, where the law provides for that.
- Be careful about sending marketing without permission.
Cookies and tracking tools can trigger consent requirements in some places. A written privacy policy is the usual way to explain your practices, and it should match what your store really does. Using an email list with permission is both good practice and, in many places, a legal expectation.
Payment card data has its own security standards separate from privacy law. If you take card payments, learn how PCI compliance applies, even if a payment provider handles most of the work.
Terms, policies and what to publish
Several pages are commonly expected on an online store:
- Terms and conditions: the rules of the sale, such as how orders are accepted, pricing, liability and governing law.
- Privacy policy: what personal data you collect and how it is used.
- Shipping information: delivery areas, timing and costs.
- Returns and refunds policy: the conditions and process.
- Contact and business details: many places require sellers to display a legal business name and an address or other contact method.
Templates can be a starting point, but they should be adjusted to fit your business and the place you operate. A copied policy that describes practices you do not follow can cause more trouble than having none. It is helpful to read about terms and conditions for online sales and how to approach writing a privacy policy before drafting your own.
Product and advertising rules
Some goods are regulated more heavily: food, cosmetics, electronics, children’s items, supplements and anything with safety implications are common examples. Rules may cover labeling, testing, warnings and what you may claim. Certain items cannot be sold or shipped at all, or only with permits, which is covered in product labeling and safety rules and in the issue of restricted items for cross-border sales.
Advertising claims, especially about health, results or “official” endorsements, can attract scrutiny. Reviews also have rules in many places: fake or incentivized reviews that are not disclosed can be a problem.
Intellectual property matters too. Using images, brand names or text that belong to someone else without permission can cause disputes, so it helps to know the trademark basics.
Business setup and records
Operating legally usually involves choosing a business structure, registering where required, keeping records of sales and expenses, and meeting tax obligations. Tax is a large enough topic to be treated separately, including how sales tax is collected and reported. Keeping tidy accounts from day one makes all of this easier.
Selling to other countries
Selling across borders can bring in consumer, privacy, product and customs rules from the destination. Many new sellers choose to limit the countries they ship to until they understand what each requires. An overview of cross border selling is a useful next step if that is your plan.
A sensible approach
- List the places you sell to and the types of products you sell.
- Check official government or regulator websites for small business and consumer guidance in those places.
- Publish clear, accurate policies that match your real practices.
- Keep records of orders, consent, and policy versions.
- Review things at least once a year, and whenever you add a product type or market.
- Consider a short consultation with a lawyer or accountant for the high-stakes questions.
No checklist covers everything, and no one source stays current forever. Treat compliance as an ongoing habit rather than a one-time task.