There is no single UK law requiring every website to publish terms and conditions, but overlapping regulations mean most commercial sites need them. Getting your website terms and conditions right protects against liability and satisfies obligations under the Consumer Rights Act 2015 and the Electronic Commerce Regulations 2002. At ApexCounsel, our Cambridge-based solicitors help UK businesses understand exactly what is required and how to comply.
Are Website Terms and Conditions Legally Required in the UK?
No single piece of legislation mandates that all websites publish terms and conditions, but the reality for any commercial site is that several overlapping laws effectively make them essential. According to the UK Business Data Survey 2026 published by DSIT, 78% of UK businesses now have a website, meaning the vast majority of UK trading entities are already subject to these compliance obligations, whether they are aware of them or not.
The regulatory framework governing UK commercial websites draws from several overlapping sources:
- The Electronic Commerce (EC Directive) Regulations 2002, which require information society service providers to make specific disclosures before a visitor enters a contract
- The Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013, which set out pre-contract information requirements for all distance and off-premises sales
- The Consumer Rights Act 2015, which governs the fairness of terms in consumer contracts and requires plain, intelligible language throughout
- The Digital Markets, Competition and Consumers Act 2024, which from April 2025 gives the Competition and Markets Authority direct fining powers for consumer law breaches, including unfair contract terms
- The UK General Data Protection Regulation and Data Protection Act 2018, which require a separate privacy policy but frequently intersect with T&C provisions
Citation capsule: The Electronic Commerce (EC Directive) Regulations 2002 require any information society service provider operating in the UK to disclose its name, geographic address, contact details, and VAT registration number before a visitor enters a contract. These disclosures must be directly and permanently accessible on the website. Failure to comply can render a contract unenforceable and expose the business to regulatory action. (Source: legislation.gov.uk)
[SOLICITOR INSIGHT] Many small businesses assume that using a third-party platform, whether Shopify, Wix, or Squarespace, means the platform’s terms cover their legal obligations to customers. They do not. The platform’s terms govern your relationship with the platform. You need your own terms and conditions regardless of how your website is built or hosted.
What Must Your Website Terms and Conditions Include?
The content required depends on your business model, sector, and whether you contract with consumers or other businesses. That said, most website terms and conditions for UK businesses should address eight core areas as a minimum. In its first year using direct enforcement powers under the Digital Markets, Competition and Consumers Act 2024, the CMA issued 157 advisory and warning letters to businesses about consumer-facing terms and pricing practices, making clear that enforcement is no longer theoretical.
- Identity and contact details: your legal business name, registered address, company number (if incorporated), and VAT registration number
- Description of goods, services, or digital content: a clear account of what you provide and how it is delivered
- Pricing and payment: total prices inclusive of VAT, accepted payment methods, and when payment is charged
- Cancellation and returns: for consumer sales, the 14-day cancellation right under the Consumer Contracts Regulations 2013 and any conditions that apply
- Intellectual property: ownership of website content and what users are and are not permitted to do with it
- Liability limitations: what your business accepts and excludes liability for, within the limits the law permits
- Governing law and jurisdiction: confirmation that English law governs the contract and which courts have jurisdiction
- Dispute resolution: how complaints are handled and, for consumer contracts, how a consumer can escalate an unresolved dispute
If you sell subscriptions, digital downloads, or run a marketplace, additional clauses will be needed. You can begin drafting your own document using the ApexCounsel Document Creator, then have a solicitor review it before it goes live on your site.
Mandatory Disclosures for UK Commercial Websites
Beyond contract terms, certain information must appear on your website regardless of whether visitors ever reach your T&Cs page. These statutory disclosure requirements arise under the Companies Act 2006 and the Electronic Commerce Regulations 2002 and apply across all commercial website types, whether you are a limited company, partnership, or sole trader.
| Required Disclosure | Legal Basis | Recommended Location |
|---|---|---|
| Registered company name | Companies Act 2006 | Footer / all pages |
| Registered office address | Companies Act 2006 | Footer / contact page |
| Company registration number | Companies Act 2006 | Footer / T&Cs |
| Place of registration (England & Wales) | Companies Act 2006 | Footer / T&Cs |
| VAT registration number | VAT Act 1994 | T&Cs / invoices |
| ICO registration number | UK GDPR / Data Protection Act 2018 | Privacy policy / footer |
| Professional body membership (regulated sectors) | Sector-specific (FCA, SRA, etc.) | T&Cs / about page |
Sole traders are not subject to the Companies Act requirements for a company registration number, but must still display their full personal name and a correspondence address under Business Names Act provisions if trading under a name other than their own.
How Does the Consumer Rights Act 2015 Affect Your T&Cs?
The Consumer Rights Act 2015 applies to all contracts between a trader and a consumer and gives courts the power to treat unfair terms as unenforceable. Under section 62 of the Act, a term is unfair if it creates a significant imbalance in the parties’ rights and obligations, to the detriment of the consumer. The CMA published updated guidance on unfair contract terms in July 2026, reflecting its expanded enforcement powers: from April 2025 it can impose fines of up to 10% of global annual turnover for consumer law breaches without issuing court proceedings.
Citation capsule: Under section 62 of the Consumer Rights Act 2015, any term in a consumer contract that creates a significant imbalance in the parties’ rights and obligations, to the detriment of the consumer, is unenforceable. The Act requires all terms to be expressed in plain, intelligible language, and any ambiguous term must be interpreted in favour of the consumer. (Source: Consumer Rights Act 2015, legislation.gov.uk)
[ORIGINAL ANALYSIS] The plain and intelligible language requirement in the CRA 2015 is consistently underestimated. A term drafted in dense legalese may be entirely valid in substance yet fail in practice, because any ambiguity is resolved against the party that drafted it. Terms copied verbatim from a generic template, or written for a different business model, carry exactly this risk. The specific wording matters more than the length or apparent comprehensiveness of the document.
Terms the CMA has identified as potentially unfair in consumer contracts include:
- Blanket exclusions of all liability for loss or damage
- Unilateral price variation provisions without a corresponding right for the consumer to exit the contract
- Automatic renewal clauses with inadequate advance notice to the consumer
- Disproportionate early termination or cancellation penalties
- Terms that restrict or discourage consumers from pursuing legal remedies in court
- Vague “subject to change” provisions that grant the business unlimited discretion to alter terms at will
What Can You Legally Exclude from Liability?
UK law draws a precise line between what businesses can and cannot limit in their terms, and the rules differ depending on whether you are contracting with consumers or other businesses. Under the Consumer Rights Act 2015 and the Unfair Contract Terms Act 1977, certain exclusions are void regardless of what your T&Cs state. A recent ICO analysis found that fines for data-related breaches by UK businesses rose to an average of £1.45 million in 2025, up from £150,000 in 2024, illustrating that liability for online operations is a real and growing exposure.
| Type of Liability | B2C (Consumer Contract) | B2B (Business Contract) |
|---|---|---|
| Death or personal injury caused by negligence | Cannot exclude | Cannot exclude |
| Fraud or fraudulent misrepresentation | Cannot exclude | Cannot exclude |
| Statutory rights (satisfactory quality, fitness for purpose) | Cannot exclude | May limit if reasonable |
| Consequential or indirect loss | Only if fair under CRA 2015 | If satisfies reasonableness test |
| Website availability or uptime | Limited, subject to fairness | Generally permissible if reasonable |
| Third-party content or linked sites | Permissible if clearly expressed | Permissible if reasonable |
For B2B contracts, the Unfair Contract Terms Act 1977 requires any exclusion clause to satisfy a test of reasonableness assessed at the time the contract was made. Courts consider the relative bargaining power of the parties, whether the clause was negotiated individually, and standard industry practice. A boilerplate limitation clause between parties of significantly unequal size may still fail this test.
How Should Website Terms and Conditions Be Displayed and Accepted?
Publishing your T&Cs on a webpage does not automatically incorporate them into a contract. For terms to be legally binding, they must be brought to the other party’s attention before or at the point of contracting. UK courts have taken an increasingly critical view of passive notice mechanisms: where a consumer is not positively directed to the T&Cs during the transaction process, those terms may not bind them even if technically accessible via a footer link.
[CAMBRIDGE PERSPECTIVE] In advising Cambridge-based technology businesses and SaaS founders, the single most common contractual gap we identify is not the content of the T&Cs but the acceptance mechanism. A “by using this site you agree” banner is treated inconsistently by courts. For any transactional website, a genuine unticked checkbox at account creation or checkout, placed beside a working hyperlink to the full T&Cs, is the minimum standard that reliably holds up under scrutiny.
Best-practice acceptance methods for UK websites include:
- An unticked checkbox at checkout or sign-up with wording such as “I have read and agree to the Terms and Conditions”
- A timestamp and logged record of acceptance stored per user, including the T&C version number accepted
- A version number and “last updated” date displayed prominently on the T&Cs page itself
- Email confirmation of the agreed terms version sent on first purchase or account creation
- Prominent placement during the transaction flow, not solely a small-font footer link
E-Commerce Websites: Additional Requirements Under the Consumer Contracts Regulations 2013
If you sell goods, services, or digital content to consumers online, the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 impose specific pre-contract information requirements. These regulations remain in force in UK law. Where a business fails to provide the required information, the consumer’s cancellation period extends automatically from 14 days to up to 12 months and 14 days, a material commercial exposure for any subscription-based business.
Citation capsule: Under the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013, UK online sellers must give consumers clear pre-contract information covering the total price inclusive of taxes, the trader’s complaints address, and the 14-day cancellation right. For digital content supplied before the cancellation period expires, the consumer must give explicit prior consent. Failing to provide these disclosures extends the cancellation window to 12 months and 14 days. (Source: legislation.gov.uk/uksi/2013/3134)
Required pre-contract disclosures for consumer e-commerce sites include:
- Main characteristics of the goods, services, or digital content being sold
- Total price inclusive of all taxes, delivery charges, and any other fees
- Trader’s full name, geographical address, and telephone number for complaints
- Delivery arrangements and the date by which goods will be provided
- The right to cancel within 14 days, including the procedure and any applicable conditions
- Where a right to cancel does not apply (for example, for personalised or perishable items), a clear statement to that effect
- After-sales support and any commercial guarantees offered
- For digital content: technical protection measures, functionality, and interoperability information
Our solicitors can advise on structuring these disclosures for your specific business model. Explore our services at apexcounsel.co.uk/services or book a consultation at apexcounsel.co.uk/contact.
Frequently Asked Questions
Do I need website terms and conditions if I only run a blog or informational site?
A purely informational site with no transactions, user accounts, or data collection can operate with minimal terms, though a basic copyright notice and disclaimer are advisable. The moment you collect personal data, run a mailing list, carry advertising, or sell anything, you will need proper T&Cs and a privacy policy. Most informational sites add commercial features over time, so drafting terms early avoids a compliance gap further down the line.
Can I copy terms and conditions from another website?
Copying another business’s T&Cs creates two risks: copyright infringement of the original document, and terms that do not accurately reflect your business model. A mismatch between your stated terms and how you actually operate is often more damaging than having no terms at all, because it creates conflicting obligations that courts will resolve against the party who drafted them. Templates can be a reasonable starting point but should always be reviewed and tailored by a solicitor before use.
How often should I review and update my website terms and conditions?
Review your T&Cs whenever your business model changes materially, when relevant legislation is updated, or at least once a year as standard practice. The Consumer Rights Act 2015, UK GDPR, and the Consumer Contracts Regulations 2013 have all been subject to CMA and ICO guidance updates since 2025. If your terms have not been reviewed since the Digital Markets, Competition and Consumers Act 2024 came into force in April 2025, that review is now overdue.
What is the difference between terms and conditions and a privacy policy?
Terms and conditions govern the contractual relationship between your business and users, covering what you sell, how disputes are resolved, and the liability each party accepts. A privacy policy explains how you collect, store, use, and share personal data. Both are required for most commercial UK websites, but they serve different legal purposes and must be kept as separate documents. Merging them into a single document creates ambiguity about which provisions are contractual and which are regulatory notices.
What happens if a court finds a clause in my T&Cs to be unfair?
Under the Consumer Rights Act 2015, an unfair term is simply unenforceable: the court treats it as if it were absent, and the remainder of the contract continues to apply. In practice, this can leave you bound by an obligation you believed you had excluded. The CMA also has the power under the Digital Markets, Competition and Consumers Act 2024 to issue enforcement notices and impose fines of up to 10% of global annual turnover for continued use of unfair terms, without the need for court proceedings.
Do B2B-only websites need terms and conditions?
Yes. The consumer protections in the Consumer Rights Act 2015 do not apply to B2B contracts, but business-to-business agreements are still subject to the Unfair Contract Terms Act 1977. That Act requires any exclusion or limitation clause to satisfy a test of reasonableness assessed at the time the contract was formed. Boilerplate B2B terms that attempt to exclude all liability often fail this test, particularly where there is a significant disparity in bargaining power between the contracting parties.
