A comprehensive checklist of mandatory and recommended legal documents required for operating an online store within the European Union, ensuring adherence to GDPR, the Digital Services Act, and consumer protection regulations.
Get targeted exposure with custom position pinning and highlighted placement.
The foundational contract between the seller and buyer, defining rights, obligations, payment terms, and liability limitations. It must be easily accessible before purchase and compliant with the EU Consumer Rights Directive to prevent unfair contractual terms.
Mandatory documentation explaining data collection practices under GDPR, including user consent mechanisms for tracking cookies. It details data subject rights, retention periods, and third-party sharing, requiring granular opt-in choices for non-essential cookies.
Clearly outlines the 14-day statutory right of withdrawal for EU consumers, including procedures for returning goods and refund timelines. It must specify who bears return shipping costs and exceptions for hygiene or custom-made products.
Legal requirement under the e-Commerce Directive to provide easily identifiable and directly accessible contact details. It must include full legal name, physical address, and official email, establishing corporate transparency for regulators and customers.
Required contract between the e-commerce platform (controller) and third-party processors like hosting providers or email marketing services. It ensures processors adhere to GDPR security standards and only process data for specified purposes.
Specific clauses for selling software, digital downloads, or streaming services, addressing access rights and warranty limitations. It differs from physical goods by clarifying that the 14-day return window may not apply if performance begins with consent.
A detailed explanation of all cookies used, categorized by purpose (necessary, analytics, marketing), separate from the main privacy policy. It must support user refusal of non-essential cookies without hindering site access, per ePrivacy Directive.
Governs comments, reviews, and uploads if the platform allows user interaction, defining intellectual property rights and moderation rules. It protects the business from liability for user postings and establishes community guidelines for conduct.
Details the two-year legal guarantee for conformity of goods under EU law, outlining repair, replacement, or refund options. It clarifies the distinction between commercial guarantees offered voluntarily and mandatory legal warranties.
Specifies delivery times, costs, carriers, and handling of delayed or lost shipments across EU member states. It must clearly state whether duties and taxes are included in the price, complying with post-Brexit and intra-EU rules.
Governs relationships with affiliate marketers, defining commission structures, tracking methods, and disclosure obligations. It must ensure affiliates comply with consumer protection laws regarding transparent advertising and honest product representation.
Internal document managing personal data of staff and freelancers, adhering to GDPR workplace data processing rules. It covers HR records, video surveillance, and access logs, ensuring lawful basis and proportionality in data handling.
Modified terms for wholesale customers, often waiving consumer rights like the 14-day return window for professional entities. It includes credit terms, bulk pricing structures, and specific liability caps suitable for commercial transactions.
Mandatory under the EU Web Accessibility Directive for public sector bodies and increasingly for private e-commerce sites. It describes measures taken to make the website accessible to persons with disabilities and contact channels for feedback.
Internal guidelines and external notices asserting ownership of brand assets, logos, and product designs. It provides a legal basis for takedown requests against infringers and clarifies licensed third-party content usage rights.
Relevant for high-value transactions or platforms facilitating financial services, outlining customer due diligence procedures. It helps prevent fraud and ensures compliance with EU financial regulations if the business handles large volumes or specific goods.
Internal documentation detailing VAT MOSS registration, IOSS for imports, and customs procedures for non-EU shipments. It ensures accurate tax collection and customs declarations to avoid penalties and shipment delays at borders.
Specific clauses for recurring billing, auto-renewal notifications, and easy cancellation processes required by the Consumer Rights Directive. It must clearly state the minimum contract duration and how users can terminate subscriptions.
Statement confirming adherence to safety standards, particularly for children's products, electronics, or toys. It assures regulators and customers that products meet EU CE marking requirements and safety directives.
Clear labeling of sponsored or affiliate links to comply with advertising transparency standards across the EU. It ensures users are aware of commercial relationships, maintaining trust and avoiding misleading practice sanctions.