Key Legal Checks Before Buying An Online Business In NZ

Seeing an online business for sale can be exciting. The numbers look good, the website looks polished, and the seller says it’s “ready to run from day one”.

But buying an online business isn’t just buying a website. You’re buying (or taking on) a mix of contracts, customer data, intellectual property, suppliers, systems, and sometimes liabilities you can’t see from the outside.

That’s why doing a few key legal checks before you sign anything is one of the smartest moves you can make. It helps you confirm what you’re actually buying, reduce surprises after settlement, and set up your new purchase so you can grow it with confidence.

Why Buying An Online Business Is Different From Buying A “Normal” Business

When you buy a physical business (like a café), it’s obvious what the assets are: the lease, fitout, equipment, stock, and the location.

With an online business, the value is often tied to things that are easy to misunderstand, hard to measure, or even easy to lose if the transfer isn’t done properly.

Common “core assets” for an online business might include:

• Domain name and hosting accounts (and the ability to control them)
• Website and backend systems (code, plugins, themes, integrations)
• Customer database and mailing list (which triggers privacy law issues)
• Brand assets (business name, logos, trade marks, social handles)
• Supplier relationships (manufacturers, dropshippers, payment providers)
• Content (product photos, blogs, videos, digital downloads)
• Contracts with customers, affiliates, contractors, or influencers
• Marketplace accounts (which may not always be transferable)

And because many online businesses are built quickly and scaled fast, it’s common to find gaps like missing terms and conditions, unclear IP ownership, or informal contractor arrangements. None of that means you shouldn’t buy it - it just means you’ll want to go in with your eyes open and structure the deal carefully.

Are You Buying The Assets Or The Company? (And Why It Matters)

One of the first questions to lock in is whether you’re buying:

• an asset sale (you buy specific business assets from the seller), or
• a share sale (you buy the shares in the company that owns the business)

Many online business deals in New Zealand are structured as an asset sale, but it depends on the business, the parties, and what’s easiest to transfer. The structure matters because it changes what transfers to you automatically, what needs third-party consent, and what liabilities you might inherit.

Asset Sale: Usually Cleaner, But Still Needs Careful Drafting

In an asset sale, you and the seller agree exactly what’s included (and excluded). This is helpful for online businesses because you can make a detailed list of assets like:

• domain name and website files
• social media accounts
• customer list (subject to privacy compliance)
• stock, supplier list, packaging designs
• content libraries and digital products

Even in an asset sale, though, you still need to confirm things like whether supplier contracts can be assigned, whether software subscriptions can be transferred, and whether the seller can actually transfer what they’re promising.

Share Sale: Simpler Transfer, But Higher Liability Risk

In a share sale, the company stays the same - you’re just taking over ownership. This can feel simpler operationally (because contracts and accounts may remain with the same legal entity), but it can also mean you inherit liabilities inside the company, including:

• tax obligations (it’s worth getting accounting/tax advice on this)
• historic consumer complaints or disputes
• privacy compliance issues (including past data handling)
• employee or contractor issues
• debts, chargebacks, refunds, warranties

If you’re weighing up the structure, it’s worth getting advice early. It can affect your risk exposure, tax position, and what your sale documents need to cover. If you’re still deciding, the distinctions in a Share Sale vs Asset Sale approach are especially important for online businesses.

Legal Due Diligence: The Checklist That Protects You From Nasty Surprises

Legal due diligence is basically the process of verifying what the seller says is true, and identifying the risks hidden in the business.

It can feel like “extra paperwork”, but in practice it often answers the questions that matter most:

• Do they really own the assets?
• Can those assets legally transfer to you?
• Are there any liabilities you’re about to take on?
• Is the business compliant with key NZ laws?

For an online business for sale, here are some of the key due diligence areas to focus on.

1. Ownership Of Core Digital Assets

Ask for evidence and access verification for:

• Domain name registration (who is the registrant, and how will it be transferred?)
• Website hosting details and admin access
• CMS / store platform admin access (and whether it’s in the seller’s personal name)
• Key third-party tools (email marketing, analytics, support desk, inventory tools)

If the website was built by a developer or agency, check whether the business actually owns the site build and underlying code, or only has a licence to use it.

2. Intellectual Property (IP): What You Can Use After Settlement

IP is often the real value in an online business - branding, content, product designs, and digital products.

You’ll want to confirm:

• who created the logos, images, and written content
• whether contractors assigned IP to the seller (if not, the seller may not own it)
• whether the business name or brand is trade marked
• whether there’s any risk of infringement (e.g. copied content or too-similar branding)

Where relevant, an IP Assignment helps make sure ownership actually transfers to you (rather than relying on assumptions or informal emails).

3. Financial And Operational Contracts

Online businesses rely heavily on third parties - payment providers, suppliers, contractors, and platforms. You’ll want to review:

• supplier agreements (pricing, exclusivity, lead times, termination rights)
• contractor/freelancer arrangements (who does the work, what happens if they leave?)
• customer terms (refund policies, subscriptions, delivery timeframes)
• affiliate or referral deals (commission obligations)

It’s also worth checking whether any “key accounts” are personally held by the seller and can’t be transferred without the provider’s consent.

4. Litigation And Disputes (Including Chargebacks)

Ask the seller to disclose any:

• current disputes with customers, suppliers, or contractors
• pending refund obligations or warranty issues
• chargeback patterns (a big red flag in some industries)
• complaints to the Commerce Commission or disputes tribunal claims

This is also where the warranties and indemnities in your sale documents do a lot of heavy lifting (more on that below).

If you want a structured process for this stage, a Legal Due Diligence Package can help you cover the typical risk areas without missing the essentials.

The Sale Agreement: The Document That Makes (Or Breaks) The Deal

If there’s one document you shouldn’t DIY, it’s the agreement for buying the business. A well-drafted sale agreement doesn’t just record the price - it sets out:

• exactly what assets are included in the sale
• what must happen before settlement (conditions)
• what the seller promises is true (warranties)
• what happens if something goes wrong after settlement (indemnities and remedies)
• restraints on the seller competing with you
• handover obligations (training, introductions, access credentials)

For an online business, the agreement should usually include a detailed “assets list” schedule, and very clear handover steps (including timelines for transferring logins, DNS records, content libraries, and admin rights).

It’s also common to include “earn-out” clauses or deferred payment terms for online businesses (where you pay part of the price later if the business performs). If that’s on the table, make sure the measurement rules are unambiguous - otherwise it can easily become a dispute.

When you’re ready to lock in the deal terms, a properly tailored Business Sale Agreement is the safest way to make sure the sale matches what you think you’re buying.

Don’t Forget Conditions: Give Yourself A Safe Exit

Buyers often feel pressure to sign fast. Instead, try to negotiate conditions that give you a safety net, such as:

• subject to legal due diligence (satisfactory to you)
• subject to finance (if you’re borrowing)
• subject to assignment/transfer of key contracts
• subject to verification of traffic, revenue, and ad accounts

These conditions can help you avoid being locked into a deal before the key checks are complete.

Data, Consumers, And Marketing: The NZ Laws You’ll Need To Comply With

Buying an online business doesn’t just mean taking over assets - it often means stepping into an existing compliance footprint. Here are the main legal areas that often come up.

Privacy Act 2020: Customer Lists Aren’t “Free To Use”

If the business collects customer information (names, emails, addresses, purchase history, behavioural data, etc), New Zealand’s Privacy Act 2020 applies.

Key things to check include:

• whether the business has a clear privacy policy and collection notices
• whether customers were told how their data would be used and disclosed
• whether customer data can be transferred to a new owner (and whether customers should be notified)
• how data is stored and secured (especially if there’s sensitive information)

Even if the seller hands you a spreadsheet of customer emails, you still need to be careful about whether you can legally use it for marketing and ongoing operations. In many cases, tightening up your compliance and updating your Privacy Policy should be on your “immediate post-settlement” checklist.

Fair Trading Act 1986 And Consumer Guarantees Act 1993

If the business sells products or services to consumers, you’ll need to comply with New Zealand consumer law, including:

• Fair Trading Act 1986 (no misleading or deceptive conduct, including advertising claims)
• Consumer Guarantees Act 1993 (products must be of acceptable quality, match description, and be fit for purpose)

As a buyer, it’s worth reviewing how the business currently advertises. For example, if the website makes strong performance claims, “before and after” promises, or “limited time” pricing, you’ll want to be comfortable those claims can be backed up.

Email Marketing And Spam Compliance

If the business relies on email lists, newsletters, and automated campaigns, check that its marketing practices follow New Zealand’s Unsolicited Electronic Messages Act 2007 (anti-spam law).

Practically, this means making sure the business can show:

• consent (express or inferred) to receive marketing emails
• clear identification of the sender
• a working unsubscribe function

If consent is unclear, you may need to “clean” the list or re-confirm subscribers after the acquisition.

What Contracts And Documents Should You Update Right After Settlement?

Even if the seller has some documentation, it’s common for online businesses to have gaps (or documents that don’t match how the business actually operates). Once you’ve taken over, you’ll want to make sure your legal foundations are solid.

Website Terms And Customer-Facing Policies

If you’re selling online, clear customer terms help reduce misunderstandings about refunds, delivery timeframes, chargebacks, subscriptions, and acceptable use.

Depending on the model, you might need updated:

• terms and conditions of sale
• subscription terms (if recurring billing is involved)
• returns and refunds policy
• delivery and shipping policy
• acceptable use rules (especially for digital products or community features)

As a starting point, having properly drafted Website Terms and Conditions can help you align what you promise customers with what you can actually deliver.

Supplier, Contractor, And Service Agreements

If the business depends on contractors (developers, customer support, creatives), make sure you have clear agreements that cover:

• scope of work and deliverables
• payment terms and ownership of work created
• confidentiality
• termination and handover obligations

This is especially important if the seller was heavily involved day-to-day and you’re planning to replace them with contractors.

Assignment And Transfer Documents

Online business purchases often involve transferring rights, not just “handing over” passwords. Depending on the deal, you might need:

• deeds of assignment for IP, domains, or key contracts
• consents from suppliers or software providers
• updated customer-facing legal documents under the new owner

Getting the transfer mechanics right helps avoid the situation where you’ve paid for the business, but can’t legally use or control a critical asset.

Key Takeaways

• When you’re looking at an online business for sale, make sure you’re buying more than just a nice-looking website - confirm ownership of domains, content, systems, and accounts.
• Work out early whether the deal is an asset sale or a share sale, because the structure changes what transfers and what liabilities you might inherit.
• Do legal due diligence on the “real value” assets of the business: IP ownership, customer data, supplier relationships, platform accounts, and existing disputes.
• A properly drafted sale agreement should clearly list what’s included, set out conditions, and include warranties/indemnities to protect you if something isn’t as promised.
• Check compliance with key NZ laws, especially the Privacy Act 2020, Fair Trading Act 1986, Consumer Guarantees Act 1993, and spam rules under the Unsolicited Electronic Messages Act 2007.
• After settlement, update your customer-facing documents and contracts so you’re protected from day one and ready to scale with confidence.

If you’re considering buying an online business (or you’ve found one you want to move quickly on without missing the legal essentials), we can help. Get in touch with Sprintlaw on 0800 002 184 or email team@sprintlaw.co.nz for a free, no-obligations chat.