Ecommerce Law In New Zealand: Essential Legal Checklist For Online Stores

Running an ecommerce business in New Zealand is exciting because you can reach customers anywhere, sell while you sleep, and scale quickly without the overheads of a physical store.

But the legal side can feel like a moving target. You might be adding new products, switching suppliers, running promotions, collecting customer data, and marketing across multiple channels - all while trying to keep customers happy and cash flow steady.

The good news is that ecommerce law in NZ is manageable when you approach it like a checklist. If you set up the right foundations early, you’ll be protected from day one, and you’ll avoid a lot of the common (and expensive) issues that online businesses run into.

1. Are You Set Up Properly As A Business?

Before you worry about refund policies or website terms, it’s worth checking that your business setup matches how you actually operate. In ecommerce, you’re often dealing with higher transaction volumes, consumer complaints, chargebacks, and third-party platforms - so the “easy” setup you started with might not be the best long-term fit.

Choose The Right Business Structure

Most small ecommerce businesses in NZ operate as one of the following:

• Sole trader (simple to start, but you’re personally liable for debts and claims).
• Company (more admin, but often better for limiting personal liability, bringing in investors, and building a scalable brand).
• Partnership (can work if you’re truly building together, but you’ll want clear rules in writing).

If you’re working with a co-founder, supplier-investor, or family member, it’s smart to put roles, ownership, decision-making, and exit terms in writing early. It’s usually far easier (and cheaper) to negotiate when everyone’s optimistic and aligned.

Depending on your setup, documents like a Shareholders Agreement or a Company Constitution can be the difference between a smooth growth phase and a messy dispute later.

Register And Protect What Matters

At a practical level, think about:

• Whether your business name and branding is available (and not confusingly similar to someone else).
• Whether you need to protect your name/logo as a trade mark (especially if you’re investing in packaging, influencer campaigns, or product labels).
• Whether your product names, domains, and social handles match (consistency makes it easier to build trust with customers).

Ecommerce is competitive - brand confusion is common, and it can be difficult to fix once you’ve built momentum.

2. What Consumer Laws Apply To Ecommerce In New Zealand?

If you sell products or services online, consumer law isn’t optional - it applies to you regardless of whether you’re a “side hustle” or a full-time ecommerce store.

Two key pieces of legislation come up again and again for online businesses:

• Fair Trading Act 1986 (FTA) - covers misleading or deceptive conduct, false representations, unfair practices, and advertising issues.
• Consumer Guarantees Act 1993 (CGA) - provides automatic guarantees for consumers when they buy goods or services “ordinarily acquired for personal, domestic, or household use”.

Be Careful With Advertising And Product Claims

In ecommerce, your marketing is often your storefront. Product listings, photos, influencer captions, “before and after” images, claims like “eco-friendly”, “non-toxic”, “waterproof”, “NZ-made”, or “clinically proven” can all create legal risk if they aren’t accurate or they give the wrong impression.

Under the Fair Trading Act, you need to make sure your advertising and representations are truthful and not misleading - including what you leave out. That can apply to:

• Price displays (including whether GST is included and whether shipping is extra).
• Sales and promotions (for example, “was $99, now $49” claims need to be genuine).
• Stock availability and delivery timeframes.
• Photos that are heavily edited or don’t match the product customers receive.

Refunds, Returns And “Change Of Mind” Policies

A lot of ecommerce businesses try to manage refunds by putting strict rules in place, but it’s crucial to understand what you can and can’t do.

The Consumer Guarantees Act gives customers certain rights when goods are faulty or don’t match the description. For consumer customers, you generally can’t contract out of those rights. However, if you sell to another business, there are situations where you can agree in writing to contract out of the CGA (so long as it’s fair and reasonable to do so).

You can set a “change of mind” policy (e.g. returns within 14 days, items unused, customer pays return shipping), but you need to make sure it’s clearly communicated and applied consistently.

This is one reason many ecommerce businesses implement clear website terms and a returns policy, and ensure their customer support team knows exactly how to apply it.

Shipping And Delivery: Don’t Overpromise

Delivery issues are one of the biggest causes of complaints for ecommerce businesses. If you advertise “next day delivery” or “dispatch within 24 hours”, treat that as a promise you need to be able to back up.

If delays are outside your control (couriers, customs, peak season), you can still reduce risk by:

• Using realistic delivery estimates.
• Clearly describing dispatch times vs delivery times.
• Explaining what happens if a parcel is lost or damaged.
• Keeping records of tracking, dispatch confirmations, and customer communications.

3. What Website Legal Documents Does An Ecommerce Business Need?

This is where a lot of online businesses get stuck. You know you need “some terms”, maybe a privacy policy, and perhaps a cookie banner - but it’s not always clear what actually applies to your store.

As a starting point, most ecommerce businesses should consider these core documents.

Website Terms And Conditions

Your website terms are essentially the rules of sale for your ecommerce store. They help set expectations and reduce disputes by clarifying things like:

• How orders are accepted (and whether you can cancel orders due to pricing errors or stock issues).
• Pricing, payment, and GST (where applicable).
• Shipping and delivery timeframes.
• Returns, refunds, and exchanges (aligned with NZ consumer law).
• Limitations of liability (as far as legally permitted).
• Intellectual property (your branding, images, product descriptions).

If you’re selling online, it’s common to use tailored E-Commerce Terms And Conditions rather than relying on generic templates that don’t reflect how your store actually runs.

Privacy Policy

If your ecommerce business collects personal information - like names, emails, addresses, phone numbers, purchase history, or even IP addresses - privacy law matters.

The Privacy Act 2020 requires businesses to be transparent about how they collect, use, store, and disclose personal information. A clear Privacy Policy is a practical way to communicate this to customers and reduce complaints.

Your privacy settings in practice also matter. For example:

• Only collect information you actually need.
• Store data securely (including limiting staff access and using strong passwords/MFA).
• Be careful when using overseas apps that store data offshore.
• Have a plan for handling a suspected data breach.

Cookie Disclosures And Tracking

Many ecommerce websites use cookies and tracking tools for analytics, marketing attribution, abandoned cart emails, and remarketing ads. Even if you’re not doing anything “creepy”, customers still expect transparency.

New Zealand law doesn’t have a single, universal “cookie banner” rule like some other jurisdictions. However, depending on the tracking tools you use (and where your customers are located), you may still need a cookie policy and clear disclosures to explain tracking in plain language and ensure your privacy practices match what you tell customers.

Supplier, Fulfilment And Logistics Contracts

Your customer-facing documents are only half the picture. Ecommerce businesses often rely heavily on third parties - manufacturers, dropshipping suppliers, fulfilment warehouses, couriers, and software providers.

If a supplier delivers late, sends the wrong stock, or changes pricing unexpectedly, your reputation takes the hit (not theirs). Having written agreements in place helps you manage that risk.

Depending on your model, you might need agreements covering:

• Quality control and product specifications.
• Lead times and service levels.
• Who is responsible for faulty stock and returns.
• IP ownership (for example, who owns packaging designs or custom product moulds).
• Termination terms (what happens if you need to switch suppliers quickly).

4. Are You Handling Customer Data And Payments Safely?

Ecommerce businesses live and die by trust. Customers are handing over personal details and payment information, often without ever meeting you in person. If something goes wrong, they’ll want answers quickly - and regulators may too.

Privacy Act Compliance In Day-To-Day Operations

In practice, privacy compliance isn’t just about having a policy on your footer. It’s about how your systems and team operate.

Common privacy issues for ecommerce businesses include:

• Using customer lists for marketing without proper consent or opt-out options.
• Sharing customer information with third parties without being transparent about it.
• Storing customer data longer than necessary.
• Weak internal access controls (for example, too many staff having admin access).

If you want to be proactive, having a documented process for collecting and handling personal information (and responding to customer access requests) can save you a lot of stress if a complaint comes in.

Email Marketing And Spam Rules

If you’re running ecommerce, email marketing is probably part of your growth plan - welcome sequences, abandoned cart emails, and promotional campaigns.

In New Zealand, the Unsolicited Electronic Messages Act 2007 (often referred to as the “Spam Act”) generally requires you to:

• Only send commercial emails if you have consent (express or inferred).
• Clearly identify your business in the message.
• Include a functional unsubscribe option.

This is especially important when you’re building customer lists through pop-ups, discount codes, giveaways, or partnerships.

Payment Providers, Chargebacks And Fraud

Most small ecommerce businesses rely on third-party payment providers, which can simplify compliance - but chargebacks, fraud, and disputes are still your problem to manage operationally.

Make sure your website terms and customer service processes address:

• How you confirm orders and dispatch.
• When a customer can cancel an order.
• What proof you keep for delivery.
• How you handle suspected fraudulent orders.

If your store scales, you may also want to review whether you need additional cybersecurity and privacy governance documents (especially if you’re handling larger datasets).

5. Are You Complying With Product, Labelling And Regulatory Rules?

Ecommerce makes it easy to sell almost anything - but that doesn’t mean every product category has the same rules.

Depending on what you sell, you may need to think about product safety, labelling, and category-specific regulations. For example:

• Food and beverages (labelling requirements, allergens, shelf-life information, and food safety compliance).
• Cosmetics and personal care (ingredient claims, safety, and advertising issues around “therapeutic” benefits).
• Supplements (extra caution around health claims and product representations).
• Children’s products (product safety expectations and higher risk if something goes wrong).
• Electrical goods (safety standards and importer responsibilities).

If you import goods into New Zealand, remember that “I bought it from overseas” doesn’t remove responsibility. If you’re the importer and you sell to NZ customers, you may be treated as the supplier for consumer law and product safety purposes.

It’s also worth checking your product descriptions and marketing carefully. If a product starts to sound like it’s making medical promises, you can accidentally trigger a higher level of regulatory scrutiny.

Key Takeaways

• Ecommerce businesses in NZ need solid foundations, including the right structure and clear ownership documents where relevant (especially if you have co-founders).
• Consumer law applies to ecommerce, particularly the Fair Trading Act 1986 and Consumer Guarantees Act 1993, so your advertising, pricing, delivery promises, and returns approach must be accurate and compliant.
• Your website legal documents matter - tailored E-Commerce Terms And Conditions and a clear Privacy Policy help set expectations, reduce disputes, and build trust.
• Privacy compliance is practical, not just paperwork: how you collect, store, and use customer data needs to match what you tell customers you’re doing under the Privacy Act 2020.
• Email marketing and customer lists have rules under NZ’s spam laws, so make sure you have consent and an easy unsubscribe process.
• Product and labelling obligations can vary depending on what you sell, and importers can carry extra responsibility even if the products were manufactured overseas.
• Don’t DIY legal documents if you want real protection - ecommerce businesses move quickly, and generic templates often don’t reflect your actual processes (which is where disputes usually start).

This article is general information only and doesn’t take into account your specific situation. It isn’t legal advice (and any tax-related information is general only and not tax advice). If you’d like help getting your ecommerce business legally set up (or reviewing what you already have in place), you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.