Online Store Legal Requirements in South Africa

Selling online does not exempt you from the rules that apply to shops. South Africa has consumer protection, electronic transaction and privacy laws that affect how you run an online store. This article is a practical overview to help you ask the right questions. It is not legal advice, so have an attorney review your terms and policies, especially if you sell regulated products.

The main laws that touch an online store

The Consumer Protection Act (CPA) sets rules on fair marketing, pricing, product quality, returns and contracts.
The Electronic Communications and Transactions Act (ECTA) covers online contracts, information you must show customers and, for many distance sales, a cooling-off right.
The Protection of Personal Information Act (POPIA) governs how you collect, use and protect customer data.
Tax law, including VAT and income tax obligations, applies to your online sales as it does to your shop.

Industry-specific rules may also apply, for example for food, cosmetics, supplements, electronics, alcohol, medicines or firearms.

Business information to show

ECTA expects online sellers to give customers clear information about who they are. A sensible store shows, in the footer or on a dedicated page:

Full legal name and, if a company, its registration number.
Physical address and contact details.
Email address and telephone number.
VAT number, if you are registered.
Website and membership of any relevant trade body or code of conduct.

Putting this on every page footer is a simple habit that also builds trust.

Clear pricing

The CPA requires fair, transparent pricing.

Show prices in rand, and make clear whether VAT is included.
Do not hide mandatory costs until the last moment. Include delivery fees and other charges before the customer commits.
Make sure advertised prices are the prices charged. If a price is a mistake, deal with it according to your terms and legal advice rather than simply cancelling orders.
Be honest with sale pricing. Do not invent a fake "was" price.

Terms and conditions

Your website terms of sale should explain, in plain language:

How orders are placed and accepted.
Payment methods and when you charge.
Delivery times, costs and what happens if something is delayed.
Risk and ownership of goods during delivery.
Returns, refunds and cancellations.
Warranty or guarantee terms.
How you handle complaints and disputes.
Your privacy approach, linking to your privacy policy.

The CPA restricts unfair or one-sided terms, so avoid copying boilerplate that tries to exclude liability you cannot lawfully exclude. Plain, balanced wording is safer and easier for customers to trust.

Returns, refunds and cooling-off

This is where many stores need the most care.

Cooling-off for distance sales. In many online sales, ECTA gives the consumer a short period, commonly seven days from receipt of the goods, to cancel without giving a reason, with certain exceptions for specific categories. Check what applies to your products and what costs the customer must bear.
Defective goods. Under the CPA, a consumer can return goods that are unsafe, defective or not fit for purpose within a statutory period and request a repair, replacement or refund. Your own policy cannot reduce these rights.
Change of mind. Beyond legal minimums, you may offer a more generous return policy as a selling point. Whatever you promise, honour it and state the conditions clearly.
Process refunds promptly and back to the original payment method where possible.

Publish a returns policy that is easy to find and written in plain language. It reduces disputes and increases confidence at checkout.

Marketing and customer communication

POPIA and the CPA restrict unsolicited direct marketing.

Get consent before sending marketing emails or messages to people who are not existing customers, and let them opt out easily.
Do not pre-tick consent boxes.
Keep records of consent.
Honour unsubscribe requests promptly.

See email and WhatsApp marketing for online stores for practical guidance.

Privacy and data security

Your store collects names, addresses, phone numbers and order history, which are personal information.

Publish a privacy policy that describes what you collect and why.
Collect only what you need.
Keep data secure, with HTTPS, updated software and restricted access.
Use a reputable payment gateway so you never store card details.
Have a plan for reporting a data breach.

Our guide to POPIA and your business website goes into detail, and online store security and backups covers the technical side.

Advertising claims and reviews

Do not make claims you cannot support, such as "best in South Africa" or health claims.
Do not fake or incentivise misleading reviews.
Be clear about whether goods are new, used or refurbished.
If you use influencers, make sure paid promotion is disclosed.

Delivery obligations

Say when goods will arrive and meet that promise. If a delay occurs, communicate promptly and offer options. Our shipping guide explains how to set realistic expectations.

Tax and accounting

Register for VAT if you are required to, and keep proper records of every sale, refund and fee. Connecting your store to accounting software reduces mistakes and makes reporting easier; see connecting your accounting software to your store and CRM. Ask your accountant how to treat income from sales across payment gateways and in different channels.

A legal readiness checklist

Registered business and tax compliance
Company details on every page footer
Terms of sale written and reviewed
Returns and refund policy published
Prices in rand, with VAT and delivery clear
Privacy policy and consent for marketing
Secure payment gateway
Product claims you can back up
Any industry-specific licences in place

Laws and regulator guidance change, so review your policies at least once a year. If you are earlier in the process, begin with how to start an online store in South Africa.