Skip to main content
Find your template →
Menu

E-Commerce and Consumer Law: UK Rights, Rules and Remedies

We're not a law firm — we help you find the right legal support. For advice on your situation, speak to a legal adviser or find a solicitor.

Part ofConsumer Rights

England & Wales
Buying and selling online is now the default for most of us, yet the rules behind every click are widely misunderstood on both sides of the transaction. Whether you are a shopper wondering if you can return something that arrived damaged, or a small business owner working out what your website has to display, a specific and fairly precise legal framework governs the answer. This guide sets out the main UK rules that apply to online sales: the information a trader must give you before you buy, the 14-day cooling-off period and its exceptions, what happens when goods or digital content fall short, who carries the risk if a parcel goes missing, and what the Digital Markets, Competition and Consumers Act 2024 has actually changed so far. It is a starting point for understanding where you stand, not a substitute for advice on your own situation.

At a glance

  • Cooling-off period: 14 days from the day goods come into your physical possession (sales contracts), or 14 days from the day the contract is made (services and digital content not on a tangible medium) — Consumer Contracts Regulations 2013, regulation 30.
  • Main exceptions to cancellation: personalised or made-to-order goods, goods that deteriorate or expire rapidly, and public auctions are excluded outright; sealed hygiene-sensitive goods, sealed audio/video/software, and downloaded digital content lose the right once unsealed or started with your consent — regulation 28.
  • Return costs: you pay the cost of returning goods you simply don't want, unless the trader agreed to cover it or didn't tell you about the cost beforehand — regulation 35. Faulty-goods returns are always at the trader's expense.
  • Faulty goods, digital content or services: must be of satisfactory quality, fit for purpose and as described — Consumer Rights Act 2015, ss.9–11, 34–36 and 49. Remedies run in order: a 30-day short-term right to reject, then repair or replacement, then price reduction or a final right to reject.
  • Lost or damaged parcels: the trader carries the risk until goods reach your physical possession — Consumer Rights Act 2015, s.29 — so a missing delivery is the seller's problem to fix, not yours.
  • Pre-contract information: online traders must give clear identity, pricing and cancellation information before you buy — Electronic Commerce (EC Directive) Regulations 2002 and Consumer Contracts Regulations 2013, Schedule 2.
  • DMCCA 2024: the CMA has had direct fining powers for unfair trading, and a ban on fake or concealed paid reviews, since 6 April 2025. The Act's new subscription-contract rules are a separate, later part of the Act and were not yet in force at the time of writing.

What counts as an e-commerce sale, and who is protected

UK e-commerce law is not one statute — it is a set of overlapping rules covering pre-contract information, cancellation, product quality and data protection, built around the idea that someone buying online cannot inspect the goods, cannot always verify who they are dealing with, and is usually handing over personal data as part of the purchase.

These rules apply to almost any business selling to consumers through a website, app, marketplace listing or social media shop, whether the trader is based in the UK or overseas but targeting UK customers. A "consumer" in this context is an individual acting wholly or mainly outside their trade, business, craft or profession — buying stock for your shop does not count, but buying a laptop for personal use does, even from the same website.

Business-to-business sales fall outside most of these consumer protections, though ordinary contract law still applies. Working out which category a transaction falls into is usually the first question worth asking, because it decides which of the rules below actually apply.

Before you buy: what an online trader has to tell you

Two pieces of legislation set the pre-contract information rules for online sellers.

The Electronic Commerce (EC Directive) Regulations 2002 require anyone providing an "information society service" (in practice, any online seller) to make certain information easily, directly and permanently accessible: the trader's name, their geographic address, contact details including an email address, any trade register entry and registration number, and details of any regulator if the trader's activity requires authorisation. Prices referred to online must be shown clearly, stating whether tax and delivery are included.

The Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 go further for consumer sales specifically. Before the contract is concluded, the trader must give the consumer the main characteristics of the goods, digital content or service, the total price (including all taxes and, where they cannot be calculated in advance, how they will be worked out), delivery arrangements and costs, the trader's complaint-handling policy, and — critically — the existence, conditions and procedure for exercising the right to cancel, including who bears the cost of returning goods.

If a trader fails to give the required cancellation information, the consequence is significant: the cancellation period does not begin to run until that information is provided, subject to a longstanding maximum extension. Getting this wrong is a common and costly mistake for smaller online sellers who copy a template terms-and-conditions page without checking it matches what they actually sell.

The 14-day cooling-off period: your right to cancel

For most contracts concluded at a distance — meaning no face-to-face contact between trader and consumer at the point of sale — the consumer has a statutory right to cancel without giving a reason.

How long you have. Under regulation 30 of the Consumer Contracts Regulations 2013, the cancellation period ends 14 days after the goods come into your physical possession (for a sales contract), or 14 days after the contract is entered into (for a service contract, or digital content not supplied on a tangible medium such as a CD or memory stick). Where an order is delivered in instalments, the clock runs from the last delivery.

What is excluded. Regulation 28 removes certain contracts from the right to cancel altogether, including goods made to the consumer's specification or clearly personalised, goods liable to deteriorate or expire rapidly, and contracts concluded at a public auction. Separately, the right is lost part-way through in three situations: sealed goods that are not suitable for return for health protection or hygiene reasons, once unsealed after delivery; sealed audio or video recordings or sealed computer software, once unsealed; and goods that become inseparably mixed with other items after delivery.

Digital content is treated differently again. Under regulation 37, a trader must not begin supplying digital content that isn't on a tangible medium before the cancellation period ends, unless the consumer has given express consent and acknowledged that doing so means losing the right to cancel. Once supply begins on that basis, the right to cancel that contract is gone — this is why "I clicked download, then changed my mind" rarely succeeds for software, ebooks or streaming purchases.

Getting your money back. Once you validly cancel, regulation 34 requires the trader to reimburse all payments, including standard delivery cost (though not the extra cost of a premium delivery option you chose over the trader's cheapest option), without undue delay and in any event within 14 days of receiving the goods back or receiving evidence you've sent them. Regulation 35 puts the cost of returning the goods on you, the consumer, unless the trader agreed to cover it or failed to tell you beforehand that you would bear it — in which case the contract is treated as if the trader agreed to pay.

When something you bought falls short: your remedies

The Consumer Rights Act 2015 sets minimum standards for goods, digital content and services sold to consumers, and a clear order in which remedies become available.

Goods must be of satisfactory quality, fit for any particular purpose you made known to the seller, and match their description (sections 9–11). If they don't:

  • Within 30 days of taking possession, you have a short-term right to reject the goods for a full refund (section 22) — you don't need to accept a repair first.
  • After 30 days, or if you choose to give the trader a chance to fix things, your remedy is to require repair or replacement (section 23), which the trader must carry out within a reasonable time, without significant inconvenience, and at no cost to you.
  • If a repair or replacement doesn't fix the problem, or isn't possible, or takes too long, you can move to a price reduction or a final right to reject (section 24) — but not both.

Digital content — apps, downloads, streamed content, software — is held to the same satisfactory quality, fitness for purpose and description standards under sections 34 to 36, with remedies of repair or replacement, then price reduction, set out in sections 42 to 47.

Services, such as installation, delivery-and-assembly, or a subscription service, must be performed with reasonable care and skill, within a reasonable time if no time was agreed, and for a reasonable price if none was agreed (sections 49, 51 and 52). If a service falls short, the primary remedy is to require the trader to redo the service; if that isn't possible or isn't done properly, you can claim a price reduction.

Who's responsible if a parcel is lost, damaged, or never arrives

Under section 29 of the Consumer Rights Act 2015, goods remain at the trader's risk until they come into your physical possession, or the physical possession of someone you've named to receive them. Practically, this means a parcel that is lost, stolen from a doorstep, or damaged in transit before you receive it is the trader's responsibility to put right — by resending the item or refunding you — not something you are expected to resolve directly with the courier.

The one narrow exception is where you independently arrange your own carrier, one the trader did not offer you as a delivery option. In that situation, risk passes to you once the goods are handed to your chosen carrier. For the overwhelming majority of online orders, where you select from delivery options the trader offers, this exception won't apply.

Worked examples

A faulty item found after five weeks. Priya buys a blender online. It stops working in week seven. Because more than 30 days have passed since delivery, her short-term right to reject under section 22 has expired. Her remedy is to ask the trader to repair or replace it under section 23. If the replacement blender also fails, she can then claim a price reduction or exercise the final right to reject under section 24.

A software download that started immediately. Tom buys a licence key for design software, ticking a box confirming he understands that downloading immediately means losing his right to cancel. He downloads it, then changes his mind an hour later. Because supply began with his express consent and acknowledgement under regulation 37, his right to cancel that contract no longer applies — the trader has no obligation to refund him for a simple change of mind.

An overseas seller and a card payment. Aisha orders a £220 item from an overseas website that markets heavily to UK shoppers on social media. The item never arrives and the seller stops responding. Because she paid by credit card and the price exceeds £100, she can bring a claim against her card provider under section 75 of the Consumer Credit Act 1974, which makes the card provider jointly liable with the seller. Had she paid by debit card, she would instead rely on her bank's voluntary chargeback scheme, which is not a legal right but is often effective for non-delivery.

New consumer protection powers: the Digital Markets, Competition and Consumers Act 2024

The Digital Markets, Competition and Consumers Act 2024 (DMCCA) is being brought into force in stages, and it matters which stage applies before you rely on it.

In force since 6 April 2025: the Competition and Markets Authority gained direct powers to investigate and impose fines for breaches of consumer protection law without first taking a business to court, with penalties of up to 10% of global annual turnover for the most serious breaches. From the same date, new banned practices took effect, including posting or commissioning fake consumer reviews, and hiding a paid or incentivised relationship behind an apparently independent review.

Not yet in force at the time of writing: the Act's dedicated subscription-contract regime — new pre-contract information duties, mandatory reminder notices before a subscription renews, and a simpler exit mechanism for consumers — sits in a later part of the Act and has been repeatedly delayed, with commencement expected around spring 2027. If you are dealing with a subscription cancellation dispute today, the position is still governed by the trader's own terms, general contract law, and (for sales concluded at a distance) the Consumer Contracts Regulations 2013 cancellation rules described above — not the DMCCA's subscription provisions, which are not yet law in practice. Always check GOV.UK or legislation.gov.uk for the current commencement position before assuming otherwise, as this is an active area of change.

If you run an online shop: what the law expects of you

If you are the trader rather than the buyer, the obligations above translate into practical requirements: display your business identity and contact details prominently and permanently; state prices clearly, including tax and delivery; give complete, accurate pre-contract information, especially about cancellation rights, before the order is placed; process valid cancellations and refunds within the statutory timescales; and make sure any digital content consent-and-acknowledgement step is genuinely presented, not buried in small print.

If your business collects customer data — names, addresses, payment details, browsing behaviour — you also have obligations under the UK GDPR and the Data Protection Act 2018, covering having a lawful basis for processing, giving clear privacy information, keeping data secure, and handling subject access requests. And since 6 April 2025, any use of customer reviews needs a visible, genuine policy against fake or incentivised reviews — the CMA has been actively contacting businesses it judges non-compliant.

What to do if something goes wrong

  1. Identify what kind of problem you have. A change of mind is governed by the 14-day cancellation right and its exceptions; a fault or mismatch with the description is governed by the Consumer Rights Act 2015 remedy hierarchy; non-delivery is a passing-of-risk issue for the trader to resolve.
  2. Contact the trader first, in writing. Set out what went wrong, what remedy you are asking for, and reference the specific right you're relying on (short-term right to reject, repair/replacement, cancellation under the 2013 Regulations).
  3. Keep a paper trail. Order confirmations, delivery information, and the trader's returns policy as it appeared at the time of purchase are all useful if the trader disputes your account.
  4. Consider your payment method. For unresolved credit card disputes over £100, a section 75 claim under the Consumer Credit Act 1974 may be quicker than pursuing the trader directly. For our detailed guide on the underlying law, see Consumer Credit Act: Your Rights When Borrowing Money.
  5. Escalate to an approved alternative dispute resolution scheme if the trader belongs to one, or to the small claims track of the county court for lower-value disputes that can't be resolved directly. See our guide to Alternative Dispute Resolution for UK Consumers.
  6. Report suspected scams separately from an ordinary consumer dispute — if a seller has simply disappeared with your money rather than supplied faulty goods, see our guide on Avoiding Scams and Fraud.

Common mistakes to avoid

  • Assuming the 14-day right applies to everything. It doesn't — check the regulation 28 exclusions and the digital-content rule before assuming a return is guaranteed.
  • Confusing "change of mind" returns with faulty-goods returns. The cost of returning an unwanted item usually falls on you; the cost of returning a faulty item always falls on the trader.
  • Accepting a repair without understanding you may have a stronger right. Within 30 days of a fault appearing, you can usually go straight to a full refund rather than accepting a repair.
  • Assuming DMCCA 2024 subscription rules already apply. They don't, as at the time of writing — check current commencement status before relying on them in a dispute.
  • Chasing the courier instead of the trader when a parcel goes missing. Under section 29 of the Consumer Rights Act 2015, that is the trader's problem to fix.
  • Ignoring section 75 or chargeback options when dealing with an unresponsive overseas seller, where enforcing UK consumer rights directly can be slow or impractical.

This guide provides general information about UK e-commerce and consumer law as it applies in England and Wales. It is not legal advice and does not take account of your specific circumstances or contract terms. The position described was accurate as at August 2026 and parts of it — particularly the Digital Markets, Competition and Consumers Act 2024's phased commencement — are subject to change. Always check GOV.UK and legislation.gov.uk for the current position, and if your situation is disputed, high-value or time-critical, speak to someone who can advise on your specific facts.

Common questions

Q Does a 14-day right to cancel apply to everything I buy online?
No. The 14-day cooling-off period under the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 applies to most distance sales, but regulation 28 excludes several categories outright, including goods made to the consumer's specification or clearly personalised, goods that deteriorate or expire rapidly, and contracts concluded at public auction. Separately, the right is lost once sealed goods that cannot be returned for health or hygiene reasons are unsealed, once sealed audio, video or software is unsealed, and once digital content supplied other than on a tangible medium (a download or stream) has started with your express consent and acknowledgement that you will lose the right to cancel. Always check which category your purchase falls into rather than assuming the 14 days automatically applies.
Q I am starting an online shop. What must my website display before someone buys?
Under the Electronic Commerce (EC Directive) Regulations 2002 you must make your name, geographic address, and contact details (including an email address) easily and permanently accessible, plus any trade register or authorisation details that apply to you. Under the Consumer Contracts Regulations 2013 you must also give the consumer, before the contract is made, the main characteristics of the goods or service, the total price including taxes and delivery, how and when payment and delivery will happen, and how to cancel, including who bears the cost of returning goods. If cancellation information is missing, the 14-day period does not start running on schedule — it can extend to up to 12 months after the normal cancellation date.
Q Who pays to return goods if I simply change my mind?
You do, as the default position. Regulation 35 of the Consumer Contracts Regulations 2013 puts the direct cost of returning goods on the consumer, unless the trader has agreed to bear it or failed to tell you before the sale that you would have to. If the trader didn't give you that information, the contract is treated as including a term that the trader pays. This is separate from faulty-goods returns, where the trader must always cover the cost.
Q Who is responsible if a parcel goes missing in transit?
The trader is. Under section 29 of the Consumer Rights Act 2015, goods remain at the trader's risk until they come into the physical possession of the consumer (or someone the consumer has named to receive them). The narrow exception is where the consumer independently arranges their own carrier that the trader did not offer as a delivery option — in that case risk passes on dispatch. For an ordinary online order, a parcel lost, stolen from a doorstep before you receive it, or never delivered is the seller's problem to resolve, not something you chase with the courier yourself.
Q What are my remedies if something I bought online is faulty?
It depends how long you have had it. Under the Consumer Rights Act 2015, goods must be of satisfactory quality, fit for purpose and as described (section 9). If they are not, you have a short-term right to reject them for a full refund within 30 days of taking possession (section 22). After that, your remedy is to ask for a repair or replacement first; if that does not resolve the fault within a reasonable time and without significant inconvenience, you can then claim a price reduction or exercise the final right to reject (section 24). Digital content and services are covered by parallel rules — digital content must also be of satisfactory quality and fit for purpose (section 42), and services must be carried out with reasonable care and skill (section 49).
Q Has the Digital Markets, Competition and Consumers Act 2024 already changed online shopping law?
Partly. Since 6 April 2025, the CMA has had direct powers to investigate and fine businesses for unfair trading practices without going to court first, and new bans on fake and misleading consumer reviews are in force. However, the Act's separate subscription-contract regime — new rules on pre-contract information, reminder notices and easier cancellation for rolling subscriptions — was not in force at the time of writing and had been delayed to around spring 2027. Don't assume subscription cancellation rules have already changed; check GOV.UK for the current commencement position before relying on this.
Q What happens if I buy from an overseas website and there is a problem?
If the seller actively targets UK consumers, UK consumer protection rules can still apply in principle, but enforcing them against a trader with no UK presence is often impractical. Your payment method matters more in practice: if you paid by credit card for something costing more than £100, a Consumer Credit Act 1974 section 75 claim makes your card provider jointly liable alongside the seller. Debit card and lower-value credit card purchases don't get section 75 protection, but many card providers offer a voluntary chargeback scheme that can achieve a similar result.
Q Are fake or paid-for online reviews against the law?
Yes. Since 6 April 2025, the Digital Markets, Competition and Consumers Act 2024 has added fake and misleading consumer reviews, and concealed incentivised or paid reviews, to the list of commercial practices banned outright under UK consumer protection law. The CMA does not need to prove the practice affected a particular consumer's decision to take enforcement action, and it has published dedicated guidance for businesses on what compliant review policies look like.

Sources

This guide is based on primary UK law and official guidance.

Brad Askew, Solicitor (non-practising)

Written & reviewed by

Brad Askew Solicitor (non-practising)

Brad is on the roll of solicitors of England & Wales but does not hold a practising certificate and does not provide legal advice. LegalDocuments.co.uk is not a law firm and does not provide regulated legal advice.

Legal disclaimer
This article is for general information only. It is a tool to help you find your way — not legal advice, and not a substitute for speaking to a qualified adviser about your situation.