Joe is a final year law student at the Australian National University. Joe has legal experience in private, government and community legal spaces and is now a Content Writer at Sprintlaw.
Contents
Running an online small business in New Zealand is exciting - you can sell nationwide (or globally), build a brand from your laptop, and scale faster than many traditional businesses.
But the legal side matters just as much as your product, marketing, and customer experience. When you get your legal foundations right from day one, you’re not just “ticking boxes” - you’re protecting your cashflow, your reputation, and your ability to grow.
This guide is updated to reflect what online businesses are dealing with right now, including stronger expectations around transparent advertising, customer communications, and handling customer data responsibly.
So what are the three key responsibilities you should focus on first?
- Being honest and compliant in your sales and marketing (including how you describe prices, shipping, and what customers will actually receive)
- Protecting customer data and privacy (because online businesses handle personal information every day)
- Using the right contracts and legal documents (so your business can operate smoothly and deal with disputes without panic)
1. Be Clear, Accurate And Compliant When Selling Online
If you’re selling products or services online, your first big responsibility is making sure what you say (and how you sell) is legally compliant.
This is where a lot of online businesses accidentally get into trouble - not because they’re trying to mislead customers, but because the website copy, Instagram posts, and checkout process don’t line up with what the law expects.
Your Advertising Must Not Mislead Customers
In New Zealand, the Fair Trading Act 1986 is a key law for online sellers. In plain terms, it means you must not make misleading or deceptive claims - and you must not create a misleading overall impression.
This can apply to:
- product descriptions (including “before and after” claims)
- pricing (including whether a price is truly “on sale”)
- shipping timeframes and availability
- testimonials and reviews (especially if incentivised or curated)
- claims about “NZ-made”, “organic”, “medical grade”, “eco-friendly”, or performance guarantees
Even if the words on your website are technically true, the overall impression still matters. For example, if your checkout implies “free shipping” but the fine print adds a rural surcharge, you may be creating a problem.
You Need To Get Consumer Rights Right (Even When It’s Inconvenient)
If you sell to consumers (not just other businesses), the Consumer Guarantees Act 1993 is another cornerstone. It sets minimum guarantees around things like acceptable quality, fitness for purpose, and matching descriptions.
A common misconception is that an online store can “contract out” of these rights using its refund policy. In most cases, you can’t. Your policy can explain your process, but it can’t take away statutory consumer rights.
Practically, this means you should make sure your website is clear on:
- returns and refunds processes (and when refunds apply vs repairs/replacements)
- how customers contact you if something arrives damaged
- what happens if an item is out of stock after purchase
- warranty language (especially if you offer an “extended warranty”)
Don’t Forget Subscription, Auto-Renewal And Payment Clarity
Online businesses increasingly use subscriptions, memberships, digital services, and recurring payments. If you use auto-renewals or repeat billing, you have a responsibility to ensure customers understand:
- what they’re paying
- when they’re paying
- how to cancel
- whether any minimum term applies
This is where solid Website Terms And Conditions can really help, because they give you one consistent set of rules covering checkout, delivery, cancellations, and liability boundaries (as far as the law allows).
2. Protect Customer Data And Respect Privacy
Most online businesses handle personal information every single day - even if you’re “just” shipping a product.
Names, email addresses, delivery addresses, purchase history, and sometimes even sensitive information (depending on what you sell) all fall into the privacy zone.
That’s why your second key responsibility is complying with the Privacy Act 2020 and treating customer data carefully.
What Counts As “Personal Information” In An Online Store?
Personal information is broadly any information about an identifiable individual. For online businesses, this often includes:
- customer account details and passwords
- email addresses and phone numbers
- billing and delivery addresses
- order history and customer support messages
- IP addresses and device identifiers (depending on how you collect/track them)
If you run targeted ads, track conversions, or use analytics tools, you’ll likely be collecting more data than you realise.
You Should Tell Customers What You Collect And Why
Customers expect transparency, and the law supports that expectation. A clear Privacy Policy is one of the simplest ways to explain:
- what information you collect
- how you collect it (for example, checkout forms, cookies, email sign-ups)
- why you collect it (shipping, customer service, marketing, fraud prevention)
- who you share it with (like couriers, payment processors, email marketing tools)
- how customers can access or correct their information
If your privacy practices are more complex - for example, you handle customer health-related information - you’ll want tailored advice. Privacy compliance isn’t just “having a policy”; it’s aligning your operations with what the policy says.
Data Security Is Part Of Privacy (Not Just An IT Issue)
Online businesses are popular targets for scams, phishing, and credential-stuffing attacks. Even a small store can be at risk, especially if you use multiple third-party apps and plug-ins.
From a legal and risk perspective, it’s smart to have clear internal processes for things like:
- who can access customer data (and why)
- how passwords are managed (including staff access)
- how you handle customer support requests for personal details
- what happens if there’s a suspected data breach
It can feel like “big business” admin, but it’s worth it. If a privacy incident happens, your response time and process can make a huge difference to outcomes.
3. Use The Right Legal Documents (And Don’t Rely On Templates)
Your third key responsibility is having the right legal documents in place, so you can run your online business with clarity and confidence.
When you’re busy fulfilling orders and posting content, legal documents often get pushed down the list - until something goes wrong. The reality is that good documents are like good systems: they reduce confusion, prevent disputes, and keep your business moving.
Your Customer-Facing Terms Set The Ground Rules
For most online businesses, customer-facing terms are essential. They help you clearly set expectations around delivery timelines, refunds, cancellations, and what happens if something is delayed or unavailable.
Depending on your business model, this might include:
- Online store terms (checkout, delivery, returns, limitation of liability)
- subscription terms (billing cycles, cancellation, minimum terms)
- digital product terms (downloads, access limits, licence to use)
If your brand is growing, clear terms also help reduce chargebacks and payment disputes because customers can see what they agreed to at checkout.
Supplier And Contractor Agreements Protect Your Operations
Most online businesses don’t do everything themselves. You might work with:
- manufacturers (local or overseas)
- freelance designers or photographers
- social media contractors
- fulfilment centres and couriers
- developers (for your site, app, or integrations)
Every relationship like this has legal risk attached - especially around quality control, timelines, payment, confidentiality, and who owns what (particularly IP like designs and content).
If you’re engaging a freelancer or contractor, a tailored Contractor Agreement can help avoid misunderstandings and make it clear what happens if the work is late, unusable, or disputed.
Make Sure You Actually Own (Or Can Use) Your Brand Assets
Online businesses often run on brand assets: product photos, packaging designs, your logo, written content, videos, and even templates.
A classic trap is assuming that paying for work automatically means you own the intellectual property. That’s not always true, especially when contractors or agencies are involved.
If your brand name and logo are central to your growth, it’s also worth thinking about trade mark protection. Many online businesses only look into this after they’ve built momentum - and by then, rebranding can be expensive.
Trade mark registration isn’t mandatory, but it’s a strong step if you want to protect the brand you’re building (particularly if you plan to scale, franchise, or sell the business later).
Extra Responsibilities That Catch Online Businesses Off Guard
The three responsibilities above are the big ones, but there are a few “usual suspects” that regularly surprise online business owners once things start growing.
Business Structure And Personal Liability
Your business structure affects your tax position, your ability to raise funds, and your personal risk exposure.
For example:
- sole trader: simple to start, but you’re generally personally responsible for business debts and obligations
- company: more admin, but generally provides limited liability (with exceptions)
- partnership: shared management and risk, but can become messy without clear terms
If you’re starting with a co-founder (or bringing in investors later), it’s worth having the “what if” conversations early. A well-drafted Shareholders Agreement can cover things like decision-making, profit distribution, and what happens if someone wants to exit.
If you operate through a company, having a Company Constitution can also help set internal rules and make future changes (like issuing shares) more straightforward.
Email Marketing And Spam Compliance
If you collect emails and send marketing messages (newsletter launches, discount codes, abandoned cart reminders), you need to make sure you’re complying with New Zealand’s anti-spam rules.
At a practical level, keep it simple:
- only send marketing emails to people who have consented (or where you have a lawful basis)
- include clear identification (who is sending the message)
- include a working unsubscribe option
Marketing is a growth engine for online businesses, but it should be done in a way that keeps customers onside and reduces complaint risk.
Employment Obligations If You Hire Staff
Lots of online businesses start with contractors, then eventually hire staff for fulfilment, admin, customer support, or marketing.
If you’re hiring employees, you’ll want clear, compliant documentation and processes from the start - including an Employment Contract that matches the role and working arrangements.
This is also where getting advice early can save you time later, especially if the role changes quickly as your business grows.
Key Takeaways
- Your online small business must sell and advertise honestly, including clear product descriptions, transparent pricing, and realistic shipping timelines under the Fair Trading Act 1986.
- You generally can’t “override” consumer rights with a returns policy - if you sell to consumers, you need to comply with the Consumer Guarantees Act 1993.
- Privacy compliance is a core responsibility for online sellers, because you handle customer personal information every day, and you should be transparent about collection, use, and sharing.
- Legal documents are part of your business systems - customer terms, privacy documents, and supply/contractor agreements can prevent disputes and protect cashflow.
- Getting your structure right early matters, especially if you plan to grow, bring on co-founders, or raise investment.
- Templates can miss your real risks, so it’s worth getting tailored legal advice before issues arise.
If you’d like help making sure your online business is legally protected from day one, you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.
