Understanding UK consumer protection for e-commerce
The United Kingdom has a robust consumer protection framework that online sellers must understand and comply with. Non-compliance can result in enforcement action from Trading Standards, the Competition and Markets Authority (CMA), or the Information Commissioner's Office (ICO), as well as reputational damage and customer disputes. This guide covers the key regulations affecting e-commerce businesses.
Consumer Rights Act 2015
This is the cornerstone of UK consumer law. It establishes that goods must be of satisfactory quality, fit for purpose, and as described. For digital content, additional rights apply including the right to repair or replacement. If goods are faulty, consumers have 30 days for a full refund, then up to 6 months for repair or replacement (with the burden of proof on the seller). After 6 months, the burden shifts to the consumer but rights continue for up to 6 years.
Consumer Contracts Regulations 2013 (Distance Selling)
These regulations provide specific protections for online purchases:
- 14-day cancellation period: Consumers have the right to cancel an online purchase within 14 days of receiving the goods, for any reason. You must provide a cancellation form and inform customers of this right before purchase
- Refund within 14 days: Once goods are returned, you must process a refund within 14 days, including original delivery costs (standard delivery only)
- Pre-contract information: Sellers must provide full details including total price, delivery costs, cancellation rights, business identity and address before the purchase is completed
- Exemptions: Perishable goods, sealed goods that have been opened (hygiene reasons), bespoke or personalised items, and sealed audio/video or software are exempt from the cancellation right
UK GDPR and Data Protection Act 2018
The UK has its own version of GDPR following Brexit. Key requirements for e-commerce businesses include: lawful basis for processing personal data, clear and comprehensive privacy policy, cookie consent mechanisms, data breach notification to the ICO within 72 hours, customer rights to access, rectify and delete their data, and Data Protection Impact Assessments for high-risk processing. Fines for serious breaches can reach up to £17.5 million or 4% of global annual turnover.
Product safety and labelling
Products sold in the UK must comply with the relevant product safety regulations. Since Brexit, the UK has introduced the UKCA (UK Conformity Assessed) marking to replace the EU's CE marking for products placed on the GB market. However, CE marked goods continue to be accepted for most product categories during a transitional period. Product descriptions and safety warnings must be in English.
Advertising standards
The Advertising Standards Authority (ASA) regulates advertising in the UK. Online sellers must ensure that product descriptions, prices (including VAT), and promotional claims are accurate and not misleading. Comparative advertising is permitted but must be fair and substantiated.
Zunapro helps online sellers navigate UK consumer protection requirements, ensuring full compliance with distance selling regulations, data protection and product safety standards.
