Legal requirements for an online store: an orientation

Search "legal requirements for online stores" and the first results will hand you a confident checklist of seven things to do. Read two of them side by side and they disagree, because one was written for a reader in one country and the other for a reader somewhere else, and neither says so.

So the honest answer first: there is no universal list. What is universal is the set of questions, and they are surprisingly stable from one country to the next. What varies — enormously — is every specific answer: which registration you need, what you must display, how long a customer has to change their mind, what counts as personal data, what you owe in tax and when. This post gets you oriented on the questions. It cannot answer them for you.

Why generic legal checklists go wrong

Three reasons, and they compound.

First, ecommerce advice online is overwhelmingly written for one or two large markets, because that is where the traffic is. If you trade elsewhere the vocabulary alone misleads you: "sales tax" and "VAT" are not the same mechanism, "LLC" does not exist everywhere, and the regulators and acronyms quoted as authority in one country carry no force in another.

Second, your obligations do not follow where you are. They often follow where your customer is. Ship one order across a border and you may have stepped into a second country's consumer and data rules, which is the part that surprises people most.

Third, thresholds and rates change on budget cycles. Any specific figure in a blog post was true when someone typed it, and nothing on the page tells you whether that was last month or four years ago. That is why there are no figures in this one.

The eight areas to get oriented on

1. The business itself

What legal form are you trading as, and did that require registering anything? The options and names differ everywhere — sole trader, sole proprietor, individual entrepreneur, limited company, LLC, partnership — and so do the consequences for your personal liability, your tax treatment and your paperwork burden.

Ask: do I need to register a business or a trading name before I sell? Is the structure I have the right one once I have employees, or a partner, or inventory worth protecting? Am I liable personally if something goes wrong?

2. What you have to tell customers about yourself

Commercial websites are widely expected to identify who is behind them — a legal name, a trading address, a way to reach a human, sometimes a registration number. The strictness ranges from a formally defined page to a general expectation of transparency.

Ask: what identity and contact details must appear on my site, and where? Is a contact form enough, or is a postal address required?

3. Terms of sale, and when the contract forms

Your terms say when a sale becomes binding, what happens if you cannot fulfil it, how you handle pricing errors, and which law applies. Default rules exist whether or not you write any of this down, and they are rarely the ones you would have chosen.

Ask: at what point am I contractually committed — the order, the payment, or the dispatch? Can I cancel an order priced wrong by a decimal point?

4. Returns, refunds and cancellation

Separate from your own returns policy, many places give consumers a statutory right to cancel or return within some window, with carve-outs for things like perishables, personalised goods or digital downloads. Your published policy can be more generous than the statutory right. It generally cannot be less.

Ask: is there a statutory cancellation right where my customers are? What is excluded? Who pays return shipping, and what must I disclose before checkout?

5. Pricing and advertising claims

Whether prices must be shown inclusive of tax, how shipping must be disclosed, what you can say in a sale ("was" prices, "only two left", countdown timers), and what you can claim a product does. Health, cosmetic, financial and children's products usually attract extra rules.

Ask: must displayed prices include tax? What evidence do I need before claiming a discount or a product benefit?

6. Data and privacy

Your store collects more personal data than you think — not just names and addresses, but analytics identifiers, cookies, ad-platform IDs, support chat transcripts. Several major regimes govern this, and they tend to apply based on where the person is, not where your server is. We cover the practical inventory in what a privacy policy for ecommerce has to cover.

Ask: which regimes apply to the people I actually sell to? What do I need consent for, as opposed to notice?

7. Tax

Income or corporation tax on your profit, and consumption tax — sales tax, VAT, GST, under various names and very different mechanics — on your sales. The second one is where online sellers get caught out, because the obligation can be triggered by selling into a place rather than being established there. See sales tax for online stores for the concepts.

Ask: what am I registered for now, what might selling across a border trigger, and who files what?

8. What you sell, and whether it is yours to sell

Restricted categories — alcohol, supplements, cosmetics, electronics, anything for children, anything medical — carry licensing, labelling, safety and testing requirements. Separately: do you hold the rights to the brand name, the designs, the photographs and the fonts on your site? Print-on-demand sellers run into this constantly.

Ask: does this category need a licence or specific labelling? Do I own or license every asset on the site, images and typefaces included?

Where the variation actually bites

Read that right-hand column as the reason not to copy a checklist: every row of it is a question whose answer changes the work.

What a professional will need from you

An hour with a lawyer or an accountant costs real money, and most of it gets spent on questions you could have answered in advance. Arrive with:

• Where you are established, and the countries or states you currently ship to.
• What you sell, specifically, including anything consumable, wearable, electrical or aimed at children.
• Your current structure and any registrations you already hold.
• Roughly what you turn over, and what you expect in a year.
• Whether you hold inventory, dropship, or sell digital goods or services.
• Every third party that touches customer data: platform, payment gateway, shippers, email tool, analytics, ad platforms, any AI features you use.
• Whether you have staff or contractors, and whether anyone else has admin access to the store.
• A link to your live store, and drafts of any policies you already have.

That list is worth preparing even if you never book the call, because assembling it is how you discover which of the eight areas above you have not thought about at all.

The honest limits of DIY

Some of this is fine to do yourself. Writing a clear returns policy, listing your contact details, keeping order records tidy and reading your own government's small-business guidance are all reasonable unaided work. Official guidance pages are usually free, accurate for that jurisdiction, and almost never the thing people read first.

Some of it is not. Choosing a business structure, selling in a regulated category, selling across borders at volume, taking on staff, or handling a complaint that has become a dispute are all cases where a cheap answer from a search result is the expensive option. The pattern: risk stays low while everything is small and local, and rises sharply with volume, with borders, and with anything that goes into or onto a human body.

What a platform can and cannot do here

A platform can host your policy pages, show your contact details, record what you charged on each order, and keep your order history where you can retrieve it. mAutomate's AI will draft page copy for you, and as with everything else it generates, nothing publishes until you approve it — which matters more on a legal page than anywhere else on the site, because you are the one making the statement.

What no platform can do is tell you what the law requires of your business. A template is a starting shape, not a compliance product, and a generated policy describing a business unlike yours misrepresents you to your own customers. Read every word before it goes live and change the parts that are not true. If you are still at the beginning, how to start an online store covers the commercial side; this is the half nobody enjoys.