Written for online shops in the UK selling on their own site or on marketplaces: direct-to-consumer brands, private-label and FBA sellers, dropshippers and subscription sellers.
The short version
- Reward any rating, never just five stars.Disclose the reward next to each review, keep evidence of how you moderate, and never hide or suppress negative reviews.
- Label paid creator posts 'Ad' up front.Money, free product or commission plus your control makes it an ad. 'Gifted' alone is not enough; you and the creator are both responsible.
- Show compulsory fees in the headline price.A must-pay handling or service fee first shown at checkout is a breach. Include it up front or drop it.
- Email only with consent or the soft opt-in.Soft opt-in: past buyers, about similar products, with a free opt-out when collected and in every email. Never market to addresses from marketplace orders.
Email lists, creators, reviews and sale prices are among the main ways an online shop wins customers, and they are exactly where consumer law now bites. Since 6 April 2025 the CMA can decide covered consumer-law breaches itself and fine up to £300,000 or 10% of global annual turnover, whichever is higher. As of Oct 2026.
Reviews
Fake and incentivised reviews are banned
It is banned to write, commission or publish fake reviews, to publish incentivised reviews without saying so, to suppress or hide negative reviews, or to present reviews misleadingly. A business that publishes reviews must take reasonable and proportionate steps to prevent and remove fake ones. As of Oct 2026.
Digital Markets, Competition and Consumers Act 2024 Sch 20; CMA fake reviews guidance
Rewarding only positive reviews is a banned practice, and so is hiding the negative ones.
Creators and influencers
A post a creator is paid for, in money, free product or commission, and that you control, is an ad and must be labelled up front with '#ad' or 'Ad'. 'Gifted' alone is not enough where you have control. You and the creator are both responsible. Put disclosure duties, a content usage licence for a stated term and approval rights in every creator agreement.
For example, a creator posts about a £35 serum after receiving free product and a 15% affiliate code, with no '#ad': both brand and creator are in breach. Get the post labelled within the day and put disclosure duties in every creator brief.
Prices and claims
Drip pricing
The headline price must include every mandatory charge that can be calculated in advance. A compulsory 'handling' or 'service' fee first shown at checkout is a breach. Delivery charges that depend on the customer's choice may be shown separately if you make clear up front that they exist. As of Oct 2026.
DMCC Act 2024 Part 4 Chapter 1; CMA unfair commercial practices guidance (CMA207)
- A compulsory fee of, for example, £2.50 on a £30 basket means showing £32.50 as the headline total, or dropping the fee.
- A 'was' price must be a genuine recent selling price at which you made real sales.
- Countdown timers that restart and untrue 'only 2 left' claims are misleading actions.
- Unqualified 'eco-friendly', 'sustainable' or 'plastic-free' claims are high risk, and the CMA can fine for misleading environmental claims. Say what is true, such as 'paper mailer; tape contains plastic'.
- Hold the evidence before any claim runs (CAP Code 3.7): 'clinically proven' needs the study, and food health claims can only come from the authorised register.
Email and abandoned baskets
The soft opt-in
You may send email or text marketing to a customer whose details you collected in a sale or negotiation, about similar products, if you offered a free opt-out when you collected the details and in every message. Everyone else needs opt-in consent, and bought lists fail. As of Oct 2026.
PECR reg 22(3)
- An email address typed at checkout without a completed sale is not a soft opt-in unless the negotiation test is met and the opt-out was offered there, so most brands ask for consent at the email field.
- Names and addresses passed to you by Amazon, eBay or TikTok Shop are for fulfilling that order. Marketing to them breaches the platform's terms and PECR.
- Advertising and retargeting pixels still need cookie consent. Since 5 February 2026, cookies used only to collect statistics to improve your own site no longer need consent, if the data is shared only with someone helping make those improvements and shoppers get clear information and a simple, free way to object. As of Oct 2026.
Apply for your trade mark before launch: from 1 April 2026 a UKIPO online application costs £205 for one class and £60 for each further class, and registration usually takes 3 to 4 months if there are no issues. As of Oct 2026.
PECR fines for breaches on or after 5 February 2026, cookie and marketing email breaches included, reach up to £17.5 million or 4% of worldwide turnover for an undertaking, whichever is higher. As of Oct 2026.
Asked in Greymill
The voucher: rewarding only five-star reviews is banned. Offer the £5 for an honest review of any rating, say so next to each review, and keep a record of how you moderate. Never hide the bad ones.
The Amazon list: those addresses are for fulfilling the order. Marketing to them breaches Amazon's terms and PECR, the email marketing rules.
Grow your own list: get consent, or use the soft opt-in: buyers on your own site, emailed about similar products, offered a free opt-out when you take the address and in every email.
The fines:
Consumer law (CMA): up to £300,000 or 10% of global annual turnover, whichever is higher (As of Oct 2026)
PECR: up to £17.5 million or 4% of worldwide turnover, whichever is higher (As of Oct 2026)
Want a review request email that stays inside the rules?
Ask it about your own business
Paste this into Greymill with your own figures, and Marketing works it through for your business.
I run an online shop in the UK. Check my marketing against the consumer and email rules: my review request [paste], a creator brief [paste], my checkout fees [list], my sale price claims [examples], and how I collect email sign-ups [describe]. Tell me what to change first.
More for online retail and ecommerce in the UK
- Knowing whether an order makes money after ads, free delivery and returnsWork out what each order really leaves behind on your VAT-exclusive price, then the ROAS you need just to break even on your ads.Read the lesson
- Paying for stock and ads weeks before the platforms pay youBuild a 13-week cash flow on each platform's real payout timing, allow for reserves, holds and chargebacks, and price any revenue-based advance before you sign.Read the lesson
- VAT when you sell on marketplaces, ship from abroad or sell into the EUWho accounts for VAT on each kind of online sale, what is changing for parcels of £135 or less (As of Oct 2026), and how to test whether the Flat Rate Scheme suits a reseller.Read the lesson
- Making sure what you import, own-brand or dropship is legal to sellIf you import, own-brand or dropship, the law can treat you as the producer: what that means for safety duties, markings, category paperwork and packaging.Read the lesson
- What your returns policy can say, and what the law has already decidedOnline customers have a right to cancel and a separate right to reject faulty goods, so write terms that match both and refund disputes stop costing you.Read the lesson
- Staffing the Christmas peak with agency pickers, temps and freelancersBlack Friday to the January returns needs extra hands: the agency, pay, safety and freelancer rules that apply to an online shop's peak team.Read the lesson
- Amazon has suspended my account and is holding my moneyHow to get a suspended marketplace account back with one complete appeal, the notice rights you have, and how to keep trading while your money is held.Read the lesson
Open the interactive lesson · Every online retail and ecommerce lesson · What Greymill knows about the trade
Sources
The primary sources behind this lesson, checked Oct 2026.
- Part 3 (enforcement) and Part 4 Chapter 1 (Unfair practices, pricing, reviews and subscriptions: DMCC act 2024)
- Government announcement published 9 Aug 2026, "PM starts roll out of everyday fixes on the cost of living" (Unfair practices, pricing, reviews and subscriptions: DMCC act 2024)
- CMA207, chapter on material pricing information (Unfair practices, pricing, reviews and subscriptions: DMCC act 2024)
- Sch 20 paras on consumer reviews; CMA fake reviews guidance (Unfair practices, pricing, reviews and subscriptions: DMCC act 2024)
- Price Marking Order 2004 (Unfair practices, pricing, reviews and subscriptions: DMCC act 2024)
- DBT PMO guidance paras 34 and 53 (Unfair practices, pricing, reviews and subscriptions: DMCC act 2024)
- Green Claims Code (Sep 2021) (Advertising, influencers, green claims and brand protection)
- Fees (Advertising, influencers, green claims and brand protection)
- Costs (Advertising, influencers, green claims and brand protection)
- CDPA 1988 s.90(3) (Advertising, influencers, green claims and brand protection)
- www.gov.uk (Advertising, influencers, green claims and brand protection)
- Trade Marks Act 12(1) and (2) (Advertising, influencers, green claims and brand protection)
- www.legislation.gov.uk (Data, cookies and email marketing)
- UK GDPR Art 12(3) (Data, cookies and email marketing)
- Art 33 (Data, cookies and email marketing)
- SI 2026/82 regs. 2 and 11; DUAA 2025 Schedule 12 (inserted PECR Schedule A1 para. 5(1)(a) to (e)) (Data, cookies and email marketing)
- Arts 4(5) and 31 (Data, cookies and email marketing)
- s.29 (Data, cookies and email marketing)
- regs 34(5), (9), (11), (12); reg 35 (Hard cases: returns, products and marketing)
- s.29(2) (Hard cases: returns, products and marketing)
- reg 28(1)(b) (Hard cases: returns, products and marketing)
- www.gov.uk (Hard cases: returns, products and marketing)
- reg 9; CPA 1987 s.2(2) (Hard cases: returns, products and marketing)
- GOV.UK, "Complete a road consignment note" (Contract red flags)