Is Your Online Store Compliant? The Complete Checklist

The core compliance checklist

Review each item against your store. Every line is drawn directly from the E-Commerce Law or the regulations tied to it.

• Provider disclosure: the entity's legal name, commercial registration number, and a working contact channel (email or phone) shown clearly in the store.
• All-inclusive price: display the total price inclusive of VAT (15%) and any extra fees, so the customer knows the final amount before paying.
• Right of withdrawal and return: a clear statement of the consumer's right to return the product within the legal period and conditions, and the refund mechanism.
• Published terms and conditions: a terms page the customer can read before completing the order, covering delivery, payment, cancellation, and liability.
• Non-misleading advertising: product descriptions and images are truthful and match reality, with no false claims or fake discounts that breach the advertising rules.
• Data protection: a privacy policy stating what data is collected and why, with the customer's consent, in line with the Personal Data Protection Law.
• Order record: providing the customer with an order summary and confirmation, and issuing a valid simplified tax invoice on purchase.

Disclosing the provider's identity

The law requires every store to disclose the provider's identity to the consumer before contracting, so the customer knows who they are dealing with and how to reach them if a problem arises. The absence of this information is among the most common violations, and among the easiest to fix.

• The full legal name of the entity as it appears in the commercial register.
• The commercial registration number (or the entity's unified number).
• A direct contact channel the customer can actually use.
• The entity's national address where applicable.

All-inclusive price and the right of return

The customer must see the final price they will pay, inclusive of VAT and any fees, with no surprises at checkout. The right of withdrawal and return must also be clearly stated, along with the cases where this right does not apply by law (such as certain digital products or made-to-order goods).

Advertising and protecting customer data

Advertising rules prohibit misleading descriptions, false claims, and fake discounts. Images and descriptions must reflect the actual product. As for customer data, it may not be collected, used, or retained except for the stated purpose and with the data subject's consent, while keeping it secure under the Personal Data Protection Law.

• Keep the privacy policy at a visible, easy-to-reach link.
• Obtain explicit consent before sending marketing messages.
• Do not collect more data than needed to complete the order.
• Review discounts and offers so they are genuine and provable.

How to apply the checklist to your store

1. Create a standalone terms-and-conditions page using template D-02 and fill in your entity's details.
2. Add the disclosure details (legal name, registration number, contact) in the site footer and the About page.
3. Configure price display to show VAT-inclusive amounts, and enable issuing a simplified tax invoice on purchase.
4. Publish a clear return and withdrawal policy and a privacy policy, and link both from a visible link.
5. Run through every line in the core checklist, and close any item you cannot tick.

Frequently asked questions