Legal Essentials For Starting An Online Business In New Zealand

Starting an online business can feel like the best of both worlds: lower overheads, a wider customer base, and the ability to grow quickly.

But “online” doesn’t mean “informal” (or “outside the rules”). If you’re selling products, offering services, taking payments, collecting customer data, marketing by email, or hiring help to scale, there are legal basics you’ll want in place from day one.

This guide walks you through the core legal essentials for starting and running an online business in New Zealand, in a practical way that makes sense for SMEs and startups. (It’s general information only, not legal or tax advice - get advice tailored to your circumstances.)

What Counts As An Online Business In New Zealand?

An online business is any business where key parts of the customer experience happen digitally. That might include:

• an ecommerce store selling physical products
• a subscription service (digital or physical)
• a digital product business (courses, templates, downloads)
• a service business that sells and delivers online (consulting, coaching, freelancing)
• a marketplace or platform connecting users
• a “hybrid” business that sells online and fulfils locally (click-and-collect, online bookings)

The legal needs can vary depending on what you sell and how you operate. But most online businesses in NZ share a handful of common legal foundations: choosing the right structure, protecting your brand and IP, using strong terms and contracts, and complying with consumer and privacy laws.

Step-By-Step: Setting Up Your Online Business The Right Way

If you’re trying to get your online business off the ground quickly, it’s tempting to focus on the website, marketing, and sales first.

Those things matter (obviously) - but your legal setup is what lets you grow confidently without having to backtrack later.

1) Choose A Business Structure That Matches Your Risk

Your structure affects tax, liability, decision-making, and how easy it is to bring on investors or co-founders later. Common options include:

• Sole trader (simple to start, but you’re personally liable for business debts)
• Partnership (two or more people running a business together, but risks can be shared - and so can liability)
• Company (a separate legal entity, often preferred for startups and scalable online businesses)

If you’re building something that could grow fast, handle customer data, or take on staff and contractors, it’s worth thinking early about whether a company structure is more suitable.

Where a company is the right fit, having a clear Company Constitution can help define how decisions are made and what happens when things change (like issuing shares or appointing directors).

2) Decide Who Owns What (Especially If You Have A Co-Founder)

Online businesses often start as side projects - and that’s where misunderstandings can creep in. If two people are contributing time, money, code, content, design, or contacts, you’ll want clarity around:

• who owns the business and in what proportions
• who owns the website, branding, and content
• who owns the domain names and social handles
• what happens if someone leaves
• how major decisions get approved

This is exactly what a Shareholders Agreement is designed to cover (for companies). It’s one of those documents you’ll rarely “need” - until you really, really need it.

3) Sort Your Registrations And Admin Early

The specifics depend on your setup, but online businesses commonly need to think about:

• registering a company (if you’re operating as a company)
• tax registrations and settings (including GST if you meet the threshold - and sometimes earlier if it makes commercial sense; get accounting/tax advice for your situation)
• domain registration and ownership details
• payment provider onboarding (which often requires proper business details)
• any licences relevant to what you sell (e.g. regulated products or sector-specific requirements)

Good admin sounds boring, but it often becomes important when you’re opening business bank accounts, applying for funding, or selling your online business later.

What Laws Do Online Businesses In NZ Need To Follow?

Running an online business in New Zealand means your obligations aren’t just “website rules” - you’re still operating in the real economy, with real consumer protections and compliance requirements.

Here are the big ones that commonly affect online SMEs and startups.

Consumer Law: Your Refunds, Returns, And Product Claims Must Be Right

If you sell to consumers (not just to other businesses), you’ll need to comply with key consumer protections including:

• Consumer Guarantees Act 1993 (CGA) - requires that products are of acceptable quality, match description, and are fit for purpose (and provides remedies if they’re not)
• Fair Trading Act 1986 (FTA) - prohibits misleading or deceptive conduct and false representations (this affects your ads, website claims, pricing, testimonials, and “before/after” marketing)

In practice, this means your online store needs to be careful about things like:

• how you describe your products and results
• pricing displays (including shipping costs, “was/now” pricing, and discount claims)
• refund and returns policies (and making sure they don’t promise less than the law requires)
• warranties and statements about “no refunds” or “final sale” (these can be risky if they conflict with CGA rights)

If you’re not sure whether your policies match NZ consumer law, it’s often worth checking your legal terms sooner rather than later - it’s much cheaper than dealing with disputes and chargebacks at scale.

Privacy Law: If You Collect Customer Data, You Have Obligations

Most online businesses collect personal information, even if it’s just:

• names and email addresses
• shipping addresses and phone numbers
• payment-related information (even if processed via a third party)
• analytics data and cookies
• customer support messages

In New Zealand, the Privacy Act 2020 sets rules around how you collect, store, use, and disclose personal information - and how you respond if something goes wrong (like a notifiable privacy breach). Exactly what you need to do will depend on your business model and the data you handle.

Practically, this usually means you should have a clear Privacy Policy that explains what you collect and why, and you should make sure your internal practices match what you tell customers.

If you’re building a platform, using third-party software providers, or sending data offshore, it’s worth getting specific advice about risk and compliance - privacy issues can escalate quickly once you have volume.

Spam And Email Marketing Rules Still Apply Online

If you’re building an email list, running newsletters, or sending promotional emails, you’ll want to make sure you follow New Zealand’s anti-spam rules (and any platform requirements) for commercial electronic messages.

A few sensible best practices include:

• only emailing people who have consented (or where there’s another lawful basis to contact them)
• including an unsubscribe function that works
• being clear about who is sending the message

If email is a major growth channel for you, it’s also worth thinking about what you say in writing and how you handle customer complaints - it all forms part of how your business is represented in the market.

Health And Safety And Trading Standards (Yes, Even For Online Businesses)

Depending on what you sell and how you fulfil orders, you might have legal obligations beyond “website” compliance.

• If you keep stock, pack orders, or have staff working from a premises, you may have duties under the Health and Safety at Work Act 2015.
• If you import products, you may need to consider product safety standards, labelling, and who is legally responsible for compliance.
• If you sell regulated products (like certain supplements, cosmetics, or goods with restricted claims), advertising and labelling can become a legal risk area.

The takeaway is simple: when your online business touches physical goods, logistics, people, or public claims, the legal scope expands.

What Contracts And Website Terms Should An Online Business Have?

For SMEs and startups, strong legal documents aren’t about being “formal” - they’re about making sure you get paid, manage customer expectations, and protect your IP and brand as you scale.

Here are the key documents we commonly see online businesses needing.

Website Terms And Conditions (And Clear Customer Terms)

Your website terms set the rules of the relationship between you and your customers. They’re particularly important for:

• limiting misunderstandings about delivery, timeframes, and what is included
• setting expectations around refunds and cancellations (within the limits of consumer law)
• clarifying payment terms and what happens if payment fails
• explaining how disputes will be handled
• managing risk where customers misuse your product or service

If you run a platform, marketplace, or subscription product, you’ll also want terms that deal with user conduct, account suspension, and content ownership.

Many businesses start with template terms, but the risk is that your terms don’t match your business model - or worse, they say something that can’t be enforced in NZ. Tailored terms are usually a much better long-term investment.

Privacy Documents (Not Just A Policy)

A Privacy Policy is the usual starting point, but depending on your operations you may also need:

• cookie notices (if you track behaviour and run ads)
• customer consent wording (for marketing lists and promotions)
• supplier arrangements where you share or process data (e.g. customer fulfilment services)

It’s worth treating privacy as part of your customer trust strategy - not just a compliance checkbox.

Supplier, Manufacturing, And Fulfilment Agreements

If you sell physical products, the behind-the-scenes agreements matter just as much as the website.

You’ll often want written terms covering:

• lead times and delivery obligations
• quality control and what happens if stock is faulty
• who owns tooling, designs, packaging, and branding files
• responsibility for recalls, compliance, and labelling
• payment terms and currency risk (if overseas)

Without solid agreements, you can end up wearing the cost of supplier mistakes - even if you’re the one dealing with the customer complaints.

Contractor And Freelancer Agreements

Most online businesses use contractors early - developers, designers, content writers, marketers, and virtual assistants.

A proper contractor agreement helps manage key risks, including:

• clarifying the engagement terms (and reducing the risk of misclassification - whether someone is an employee or contractor depends on the real working relationship, not just the label)
• setting scope, deadlines, and payment terms
• protecting confidential information
• making sure your business owns the work product (especially IP like code, designs, and copy)

If you’re engaging help, having the right Contractor Agreement in place can save you a lot of stress later - particularly if you’re relying on that work to run your site or build your product.

Employment Contracts (When You Start Hiring)

At some point, many online businesses move from contractors to employees - especially for customer support, operations, and in-house marketing.

In New Zealand, you should have written employment agreements, and you’ll want them to match the role and the way you run your business.

Having a tailored Employment Contract can help you clearly set expectations around hours, duties, performance, confidentiality, IP created at work, and termination processes.

Protecting Your Brand, Content, And IP (So You Can Grow Confidently)

If your online business is gaining traction, your brand becomes a real asset - and you’ll want to protect it early.

Trade Marks: Protect Your Name And Logo (Not Just Your Domain)

Registering a domain name or setting up social media handles doesn’t necessarily stop someone else from using a similar name - or even registering it as a trade mark.

If your business name, product name, or logo is central to your growth, trade mark protection can be a smart move. It can also make your business more attractive to investors or buyers down the line.

If you’re ready to lock it in, Register Your Trade Mark is often the cleanest way to protect what you’re building.

Copyright And Ownership Of Your Website Content

Online businesses rely heavily on content: product photos, videos, branding, copywriting, code, blog posts, training materials, and customer resources.

A common trap is assuming “if I paid for it, I own it”. That isn’t always true - especially if you’ve used contractors and the agreement doesn’t clearly assign IP to your business.

Make sure your key relationships (co-founders, developers, designers, marketers) include clear IP clauses so the business can legally use, modify, and commercialise what’s created.

Confidentiality And Trade Secrets

Even if you don’t have patents or proprietary tech, you probably have valuable confidential information such as:

• supplier pricing
• customer lists
• marketing strategies and ad performance data
• product formulas or designs
• internal processes and automation workflows

Confidentiality clauses (and sometimes separate NDAs) are a practical way to reduce the risk of information walking out the door when contractors or staff move on.

Key Takeaways

• Starting an online business in New Zealand is exciting, but you still need solid legal foundations - online operations don’t reduce your compliance obligations.
• Choosing the right business structure early (sole trader, partnership, or company) can affect liability, tax, and your ability to scale or bring in investors.
• If you have co-founders, document ownership and decision-making clearly with a Shareholders Agreement (and consider a Company Constitution where appropriate).
• Most online businesses must comply with the Consumer Guarantees Act 1993 and Fair Trading Act 1986, particularly around refunds, product descriptions, advertising claims, and pricing.
• If you collect customer information, you’ll need to comply with the Privacy Act 2020 and have a clear Privacy Policy that matches your actual practices.
• Strong website terms, supplier agreements, and a tailored Contractor Agreement help protect your online business from payment issues, disputes, and IP ownership problems.
• Trade marks and IP protection are often key growth enablers for online businesses - especially if your brand is central to your customer trust and marketing.

If you’d like help setting up or scaling your online business with the right legal protections in place, you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.