Buying an eCommerce Business in New Zealand: Key Legal Checks

Buying an online store can look simple from the outside. The revenue screenshots look strong, the website is live, and the seller may say you can step in and keep trading from day one. But buyers often get caught by three avoidable mistakes: assuming the website code and brand are actually owned by the seller, treating customer data like it can be handed over without restrictions, and relying on verbal promises about supplier terms, traffic sources or platform access.

If you are looking at an ecommerce business for sale in NZ, the legal work matters just as much as the financial due diligence. A good deal can turn bad if the brand is not properly assigned, the software is licensed rather than owned, or the website’s past practices create privacy or consumer law exposure for the new owner. This guide explains the key legal checks to make before you sign, where New Zealand buyers usually run into trouble, and what should be covered in the sale documents.

Overview

When you buy an ecommerce business in New Zealand, you are usually buying a bundle of assets, rights, contracts and risks, not just a website. The value of the deal depends on whether the seller can legally transfer those things to you and whether the business has been operated in a way that will not create immediate problems after settlement.

• Confirm exactly what is being sold, such as shares, assets, stock, domain names, customer lists, social accounts and software access.
• Check ownership of intellectual property, including trade marks, logos, product content, website copy, custom code and photography.
• Review supplier, fulfilment, payment gateway, marketplace and software contracts for transfer restrictions or change of control clauses.
• Assess Privacy Act compliance, especially if customer data, email lists and order histories will be transferred.
• Check consumer law issues, including refund policies, claims made on the site and any history of complaints or chargebacks.
• Verify who employs any staff or contractors and whether key people are staying after settlement.
• Make sure the sale agreement covers restraints, warranties, indemnities, handover support and what happens if promises turn out to be wrong.

What Ecommerce Business for Sale NZ Means For New Zealand Businesses

An ecommerce business for sale NZ usually refers to an online retail or service business being sold either by asset sale or share sale. That distinction matters because the legal risk you inherit can look very different depending on the structure.

In an asset sale, the buyer selects the business assets and rights it wants to purchase. This often includes the website, domain names, customer database, stock, branding, supplier relationships, social media accounts and goodwill. Asset sales can give buyers more control over what they take on, but only if the agreement is drafted carefully and each asset can actually be transferred.

In a share sale, the buyer acquires the company that owns the ecommerce business. That can be cleaner operationally because contracts, licences and trading history stay with the same company. The downside is that the company may also keep historical liabilities, such as privacy breaches, misleading marketing claims, unresolved customer disputes or unpaid contractor entitlements.

Why online businesses need special due diligence

An ecommerce acquisition is different from buying a traditional shop. A lot of the value may sit in intangible assets, and those assets are easy to misunderstand.

For example, a seller may say they “own the website”, but that can mean several different things:

• They own the domain name but not the underlying custom code.
• They paid a developer, but the development contract did not assign intellectual property.
• They use a platform subscription and theme licence that cannot be transferred.
• They rely on apps, plugins or integrations registered under a personal account.

The same issue applies to brand value. A store name, logo and product imagery may be central to the purchase price, but the buyer should check whether the brand is registered as a trade mark, whether anyone else could challenge it, and whether all creative materials were created by employees or external contractors.

What a New Zealand buyer should expect to review

Before you sign a contract, you should expect more than basic financial information. A prudent buyer will usually want a document set that lets them test whether the business can keep operating on the same footing after completion.

That often includes:

• the existing website terms and conditions, refund policy and privacy policy;
• supplier and distribution agreements;
• warehouse, logistics and fulfilment contracts;
• platform terms for ecommerce software, payment gateways and marketplaces;
• trade mark registrations or applications;
• developer, designer and contractor agreements;
• employment agreements for key staff;
• records of complaints, returns, disputes and regulator contact; and
• evidence of ownership and control of domains, social media and advertising accounts.

If a seller cannot produce these materials, that does not always kill the deal. It does mean the risk profile has changed, and the purchase price, warranties and indemnities may need to reflect that.

Legal Issues To Check Before You Sign

The main legal question is simple: can the seller transfer the business you think you are buying, free of surprises that will hurt you after settlement? Here’s where founders often get caught.

1. Deal structure, asset sale or share sale

Before you sign, pin down whether you are buying assets or shares. Buyers sometimes focus on the purchase price and assume the legal form is just paperwork. It is not.

An asset sale should specify each asset being transferred. That list might include:

• the domain name and all related domains;
• the ecommerce website and any custom code;
• trade marks, logos, product names and social handles;
• customer lists and order records, subject to privacy obligations;
• inventory and packaging assets;
• email marketing accounts and ad accounts;
• contracts that are assignable; and
• goodwill.

A share sale needs extra scrutiny because you step into the company’s history. You may inherit unresolved legal issues even if they were not obvious from a quick review of accounts.

2. Ownership of intellectual property

If the seller does not own the core IP, the business may be worth much less than it appears. This is often the biggest legal issue in an ecommerce acquisition.

Check ownership of:

• the business name and branding;
• registered trade marks in New Zealand and any overseas markets that matter;
• logos, product labels and packaging designs;
• website copy, blog content, product descriptions and downloadable content;
• photos, videos and other marketing assets;
• custom software, scripts and integrations; and
• databases and proprietary customer segmentation material.

If a contractor built the site, wrote copy or took photos, the seller should be able to show a signed agreement assigning those rights. Payment alone does not always equal ownership. If the seller only has an implied right to use the materials, your ability to keep using them may be uncertain.

3. Domain names, social accounts and platform control

Control of digital assets should be verified, not assumed. A surprising number of ecommerce stores are run through a founder’s personal email account, personal phone number or private advertising profile.

Ask for evidence of account ownership and admin access. The sale documentation should deal with transfer mechanics for domain names, platform admin rights, social pages, advertising accounts, email marketing tools and analytics accounts. If transfer is not possible, the agreement should require a proper handover and transitional cooperation.

4. Contract transfer issues

The business may depend on contracts that cannot be assigned without consent. That can affect suppliers, manufacturers, fulfilment providers, warehouse operators, payment processors and software subscriptions.

Before you rely on a verbal promise that “the contracts will come with the business”, review the actual written terms. Look for:

• assignment restrictions;
• change of control clauses;
• minimum volume commitments;
• exclusive supply arrangements;
• termination rights on notice;
• automatic renewal periods; and
• personal guarantees given by the seller.

If a key supplier can walk away or reprice after settlement, the business may not perform as expected. The sale agreement should address which consents are conditions to completion.

5. Privacy and customer data

Customer data is valuable, but it is not a free asset in the way buyers sometimes assume. In New Zealand, the Privacy Act 2020 affects how personal information can be collected, used, stored and disclosed.

If customer records, subscriber lists or order histories are part of the sale, ask:

• what personal information is held;
• how customers were told their data would be used;
• whether the existing privacy notice allows for transfer on sale;
• whether any data breach notifications have occurred;
• where the data is stored, including overseas hosting providers; and
• whether marketing consents are documented.

This is not just a technical issue. If the seller collected information without proper transparency, or sent marketing messages without a sound basis, the new owner could inherit a messy compliance problem and a damaged customer relationship.

6. Consumer law and website promises

An ecommerce store’s sales practices can create liability long after a purchase is made. What the site says about shipping times, refunds, product claims and warranties matters.

Review the site content and customer-facing terms against New Zealand consumer law expectations, including the Fair Trading Act 1986 and, where relevant, the Consumer Guarantees Act 1993. Pay particular attention to:

• refund and returns wording;
• claims about product performance or origin;
• pricing practices and discount representations;
• delivery time statements;
• subscription or recurring billing terms; and
• disclaimer language that may be unenforceable or misleading.

Past complaints, chargebacks and disputes can reveal whether the business model has a systemic issue. A low-margin store with a high returns problem can be legally and commercially painful.

7. Stock, suppliers and product compliance

If stock is included, the agreement should state what stock is being bought, how it is valued and what happens to obsolete or damaged inventory. Buyers should also check whether the products create any sector-specific compliance issues.

This may be relevant where the business sells products with safety claims, imported goods, cosmetics, food-adjacent items, children’s products, electronics or products carrying regulated statements. The right legal questions will depend on what the store sells, but the core point is the same: make sure the products can lawfully keep being sold on the same terms after completion.

8. Employees and contractors

People risk often gets missed in online business sales because the operation looks automated. But a business may rely heavily on one founder, one developer or one customer service contractor.

Check:

• who is employed by the business and on what terms;
• whether any contractors may actually look more like employees;
• whether key people have confidentiality and intellectual property obligations;
• whether restraint clauses exist and are likely to be enforceable; and
• what transitional support the seller will provide after completion.

If the seller is the face of the brand, ask whether customer loyalty is tied to them personally. If so, the agreement may need a non-compete restraint and a handover period to protect goodwill.

9. Warranties, indemnities and restraint clauses

The sale agreement is where legal due diligence turns into practical protection. If something goes wrong after completion, your rights will usually depend on what the seller promised in writing.

Common protections include warranties that:

• the seller owns the assets being sold;
• the accounts and information provided are accurate in material respects;
• there are no undisclosed disputes or regulatory issues;
• contracts disclosed are complete and current;
• the business has complied with applicable laws; and
• customer data has been handled lawfully.

Indemnities may be appropriate for known risks, such as a specific supplier dispute, a threatened IP claim or a historical privacy issue. Restraint clauses can also matter, particularly where the seller could quickly set up a competing online store using the same contacts and know-how.

Common Mistakes With Ecommerce Business for Sale NZ

The most common mistake is treating an online business purchase like a simple website handover. The legal value sits in ownership, transfer rights and risk allocation, not just the storefront design and sales numbers.

Relying on screenshots and seller summaries

Performance claims can sound convincing, but they are not a substitute for legal documents. Buyers sometimes accept a seller’s statement that they own the brand, have “good supplier relationships” or are “fully compliant” without asking for evidence.

Before you spend money on setup or transition work, verify those claims against signed contracts, registry records, account access and policy documents.

Assuming customer data can simply be handed over

This is where founders often get caught. Email lists and order histories are valuable, but privacy obligations do not disappear because a business is being sold.

If the business has weak privacy wording or unclear marketing consent records, the buyer may need to change how data is used after completion. That can reduce the practical value of the database you thought you were buying.

Ignoring software and platform licence limits

Some stores depend on a stack of third-party tools that are tied to the seller’s account, payment details or identity. If those licences cannot be assigned, you may need to rebuild parts of the operation, pay new fees or lose functionality.

That issue commonly affects:

• premium website themes;
• custom plugins;
• email automation tools;
• subscription management apps;
• inventory integrations; and
• analytics or ad platform setups.

A deal can still proceed, but the handover plan and price should reflect that reality.

Using a sale agreement that is too generic

A generic business sale template may not deal properly with online assets. If the agreement does not clearly list digital property, transfer steps, privacy issues and post-completion assistance, you can end up arguing about basic operational control on day one.

Good drafting is not about adding pages for the sake of it. It is about making sure the legal documents match the way the ecommerce business actually works.

Forgetting about post-sale competition

If the seller keeps the supplier contacts, ad know-how and customer insight, they may be able to launch a near-identical store quickly. Buyers often assume goodwill is enough protection. Usually it is not.

Restraints need to be reasonable and carefully written, but they are often worth considering where the seller could otherwise undercut the very business they just sold.

FAQs

Should I buy the assets or the company?

It depends on the business and the risk profile. An asset purchase can limit what you take on, while a share purchase may preserve contracts and operations more smoothly. The right answer usually comes from due diligence, not convenience.

Can customer email lists be transferred to me?

Sometimes, but not automatically. You should check what customers were told, what consents exist, and whether the privacy settings and sale documents properly address the transfer and future use of personal information.

Do I need the seller’s supplier contracts to be assigned?

Yes, if the business depends on them and the contracts do not continue automatically. Many agreements need consent before assignment or may allow termination on a sale or change of control.

What if the seller paid a developer to build the website?

You should still check whether intellectual property was assigned in writing. Paying for development work does not always mean the business owns the code, design or related content outright.

Can the seller open a competing online store after settlement?

Possibly, unless the sale agreement restricts that. A properly drafted restraint clause may help protect the goodwill you are buying, provided it is reasonable in scope and duration.

Key Takeaways

• Buying an ecommerce business in New Zealand means checking ownership, transfer rights and compliance issues, not just revenue and traffic.
• The first legal question is whether the deal is an asset sale or a share sale, because that changes what you acquire and what liabilities may follow.
• Intellectual property, domain control, software licences and social account access should all be verified with documents, not assumptions.
• Privacy Act issues matter if customer data, subscriber lists or order histories are part of the sale.
• Supplier contracts, fulfilment arrangements and payment platform terms may need consent before transfer or may change after completion.
• The sale agreement should cover warranties, indemnities, restraints, handover support and a detailed description of what is being sold.

If you want help with sale agreements, intellectual property transfers, privacy issues, supplier contract checks, and contract review, you can reach us on 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.