Disclaimer

In accordance with the rules of the Bar Council of India, ProSquad Legal is prohibited from soliciting work or advertising in any manner. By clicking on "I AGREE", the user acknowledges the following:

  1. The user seeks information about ProSquad Legal, its practice areas, and its attorneys solely for personal use and understanding.
  2. The information provided on this website is made available only at the user's specific request. Any material downloaded or accessed is done at the user's discretion, and the transmission, receipt, or use of this site does not create a lawyer-client relationship.
  3. The content on this website does not constitute legal opinions or advice.

ProSquad Legal is not liable for any consequences arising from actions taken by the user based on the information provided on this website. For any legal issues, the user is strongly advised to seek independent legal counsel.

Our Expertise  /  E-commerce & Consumer

Selling online means contracting
with everyone, everywhere.

Structuring, compliance and dispute counsel in e-commerce and consumer law, from the business model down to the checkout screen.

/ 04

E-commerce & Consumer Laws

An e-commerce business is assessed on what its customers saw at the moment they paid.

Work in this area covers how the business is structured, what it publishes to the people buying from it, what it takes by way of undertakings from the sellers listing on it, and how it answers a customer unhappy enough to write in.

The Consumer Protection Act, 2019 and the Consumer Protection (E-Commerce) Rules, 2020 impose disclosure and conduct obligations that are met, in practice, through the interface. A cancellation charge, a pre-ticked add-on, a total price that only assembles itself on the payment page: each of those now carries legal weight, and none of them is usually drafted by a lawyer. They are drafted by whoever owns the conversion rate.

Very little of what draws regulatory attention began as a legal decision. It began as an experiment that lifted conversion by a point, shipped on a Thursday, and then ran in every session for a year before anyone read it as a term of the contract.

Registrations tend to be discovered rather than planned. Stock sitting in a second state brings a tax registration with it, categories such as food and cosmetics carry their own licensing requirements, and the packer declaration on the label belongs to somebody whether or not it was ever assigned.


We help e-commerce businesses sell online without collecting problems as they scale: the model, the contracts, the customer-facing policies, and the interface all of them have to agree with.

We advise on structuring e-commerce business models, including entity selection and the regulatory position that follows from it, and we support transactions end to end. For a foreign-funded business the structural question that decides most of the others is whether the model is a marketplace or an inventory model, because foreign investment policy treats the two very differently. A marketplace provides a platform on which independent sellers transact with buyers. An inventory model means the entity owns the goods it is selling. That line is easier to draw on paper than to hold in operation. Control over inventory, influence over the price a seller may list at, fulfilment services offered to one seller and not another, a related party taking most of the volume through the platform: any of these can leave a business running something other than the model its documents describe. The drift is rarely deliberate. It accumulates through commercial decisions that each looked sensible on the day, and it gets assessed later against how the business actually ran rather than how it was papered. We advise on where the line sits, on the operating habits that keep a business the right side of it, and on the records worth keeping so the position can be explained if anyone asks for an explanation.

Entity selection follows from that answer rather than preceding it, and so does a good deal of the tax analysis. Settling the model and the entity before launch avoids reworking decisions already built into the platform.

The Consumer Protection Act, 2019 reshaped this area, and the Consumer Protection (E-Commerce) Rules, 2020 made the obligations specific. An e-commerce entity has to publish its legal name and address, customer care details, and the name, contact details and designation of a grievance officer, and it has to observe the acknowledgement and redressal periods the Rules prescribe. Depending on whether the entity is a marketplace or an inventory model, listing-level requirements can include the total price with a break-up of charges, the country of origin and the seller’s details. The Rules also restrict cancellation charges where a consumer cancels after confirming a purchase, and the wording of that restriction should be read against the current text. Prices cannot be manipulated to secure an unreasonable profit, consumers within the same class cannot be discriminated against unreasonably, and marketplace entities must disclose the main parameters determining the ranking of goods and sellers. We build all of that into terms of use, seller onboarding agreements, and return, refund and cancellation policies.

The grievance function needs more than an appointment. It needs a route a customer can actually reach, authority at the first line to issue a refund or a replacement without an approval loop, and a log recording each complaint and what was done about it. That log is the material usually relied on to show what the business did.

Marketing and interface design have moved firmly into scope. Guidance from the Central Consumer Protection Authority addresses misleading advertisements and endorsements, including disclosure of material connections between a brand and the person endorsing it, and it extends to dark patterns: false urgency, basket sneaking, confirm-shaming, forced action, subscription traps, drip pricing, bait and switch. Those are design decisions with legal consequences, which puts legal review inside the product cycle rather than at the end of it. We read flows and copy alongside the growth and product teams, at wireframe where that is possible and again before a test is promoted to the default. The questions are narrow ones. Is there evidence behind the countdown. Are add-ons unticked when the page loads. Is the total price shown the first time a price appears. Is cancelling any harder than signing up was. None of that takes long to answer while the flow is still a drawing. It takes considerably longer once the flow is live and the quarter has been forecast around what it earns, which is the usual reason a business would rather not ask.

Most such practices are introduced by conversion optimisation rather than by a decision to disregard a rule. That is why an instruction not to use dark patterns achieves so little on its own.

Product-facing obligations run alongside all of this: declarations for pre-packaged goods under legal metrology rules, sector-specific labelling for categories such as food, cosmetics and electronics, and product liability under the Consumer Protection Act, 2019, which reaches product sellers as well as manufacturers. Where a platform relies on intermediary safe harbour under Section 79 of the Information Technology Act, 2000, we advise on the due diligence conditions that protection depends on, since it is conditional rather than automatic and is tested against what the platform did. Labelling obligations, meanwhile, attach to the entity named on the pack, which is not always the entity the customer bought from.

Every e-commerce business is also a data business. The Digital Personal Data Protection Act, 2023 and the Rules made under it govern customer data, with obligations commencing in phases, so what applies at a given moment has to be checked. They meet consumer law at the points customers actually notice: consent for marketing messages, retention of order and payment records, profiling for recommendations, and what happens to an account when someone asks for it to be deleted. Marketing operations sit under a third regime as well, since commercial calls and text messages fall within the telecom regulator’s framework for unsolicited commercial communication, with its own preference and sender registration. Consent design that satisfies one regime while ignoring the other two is a recurring compliance gap.

When disputes arise we act in both litigation and alternative dispute resolution. That covers consumer commission proceedings at district, state and national level, complaints raising a practice common to a whole class of transactions, investigations by the Central Consumer Protection Authority, and disputes with sellers, logistics partners and payment providers. Where a notice arrives the first response frequently shapes how the matter develops, and internal work happens at the same time: identifying every affected order or listing, preserving the records that show what the customer saw on the day, and stopping the practice under challenge where continuing it adds exposure and little else.

Most e-commerce legal work arrives out of sequence. A business builds the site, launches, and then asks for terms of use, by which time the terms have to be written around decisions already sitting in code. The order that causes least rework runs the other way: settle the model and the entity, then the money flow, then the contracts with sellers and service providers, then the customer-facing policies, and last the interface copy that has to agree with all of them. Each layer limits the one above it. Registrations belong in that early mapping too, though they are usually discovered instead. Depending on what you sell and where you hold it, the list can take in goods and services tax registration in more than one state once stock sits there, registration under the applicable shops and establishments legislation, registration as a packer or importer under legal metrology rules, and product-specific licences for categories such as food, cosmetics and drugs. Where an e-commerce operator collects the consideration for supplies made through the platform, tax collection at source under Section 52 of the Central Goods and Services Tax Act, 2017 applies, and that obligation shapes settlement mechanics with sellers, so it belongs in the seller agreement rather than in whatever the finance team has been doing informally since launch.

Two contract families decide how badly a bad day goes. The first is payments. An arrangement with a payment aggregator or gateway sits within the Reserve Bank of India’s regulatory framework for that activity, and it governs settlement cycles, rolling reserves and holds, chargeback allocation, refund timelines, and what happens to money in transit if the arrangement ends. Refund timing is where payment terms touch consumer law directly, because a refund that has not reached the customer is frequently the basis of a deficiency of service complaint, whoever happens to be holding the money at the time. Chargeback allocation deserves the same attention, since the platform usually carries the loss on a disputed transaction it did not itself mishandle. Reserve, hold and exit provisions are the terms with the greatest cash-flow consequence in these arrangements.

The second family is logistics and fulfilment. Delivery partner agreements allocate liability for loss, damage, delay and failed delivery, usually on terms a good deal kinder to the carrier than the promise the platform has made its own customers. That gap can be a sensible commercial choice. It should at least be a choice.

Selling into India from outside brings customs valuation and duty, import restrictions in regulated categories, labelling obligations that attach to the importer, and the point that Indian consumer law may apply notwithstanding a foreign governing law or forum clause, with jurisdiction and enforcement assessed on the facts. Selling out of India brings exchange control and export documentation under the Foreign Exchange Management Act, 1999 and the regulations made under it, including the requirements on realisation and repatriation of export proceeds, and then the destination country’s own consumer, tax and product law, which needs local advice.

A brand selling through third-party marketplaces signs a standard seller agreement it did not draft and lives beside unauthorised resellers. The position on parallel imports and exhaustion of rights under the Trade Marks Act, 1999 remains contested in India.

Asked most often

A marketplace provides a technology platform connecting independent sellers and buyers. An inventory model means the entity owns the goods it sells. For foreign-funded businesses the distinction decides what is permitted under foreign investment policy. The risk rarely sits in the documentation. It sits in operational drift, where control over pricing, control over inventory or one dominant related seller makes the working reality look different from the papered model. Assessment follows how the business actually runs, so a useful review reads the operations as closely as the agreements.

Consumer protection authorities have identified specific interface practices as unfair trade practices, which brings them inside enforcement powers rather than leaving them as good manners. For most businesses the exposure is cumulative rather than dramatic: complaints, an investigation, and the cost of rebuilding conversion flows that were designed around the practice. Because the conduct lives in software, one design decision repeats in every session, and that scale is what draws attention to it.

Not automatically. Safe harbour under Section 79 of the IT Act, 2000 is conditional on the intermediary meeting its due diligence obligations and acting on actual knowledge. In practice the questions are whether the platform had a working takedown and grievance process, whether it used that process promptly, and whether its own conduct took it beyond a neutral intermediary role. Safe harbour is a separate question from the brand owner’s own remedies, which remain available against the seller and, in some situations, against the platform.

Usually not. One entity can do both, and for most Indian-owned businesses the question is operational rather than structural. What changes is the contract set and the compliance map: a marketplace seller agreement you did not draft, settlement and tax collection at source handled by the operator, returns processed under the platform’s policy rather than yours. Foreign investment changes the analysis and needs separate thought, because holding inventory for online retail sale is treated differently from running a marketplace.

At a minimum, terms of use, a privacy notice, and the return, refund and cancellation policy, along with the legal name and address of the e-commerce entity, customer care contact details, and the name, contact details and designation of the grievance officer. Marketplaces publish seller information as well, and the main parameters that determine how products are ranked. Publishing is the first half of the job. The documents also have to describe what the platform does in fact.

It is prepared in writing and on the full transaction record: order, payment, delivery evidence, earlier correspondence, and the policy in force on that date. It goes out within any period the notice specifies, since silence gets characterised later as indifference. Whether the underlying complaint is sound is a separate question, and where it is not, a factual reply becomes part of the record if the matter proceeds. What a particular notice calls for depends on the facts of that matter.

The work this covers

  • E-commerce model structuring
  • Platform terms & seller agreements
  • Consumer Protection Act compliance
  • Dark patterns & interface review
  • Advertising & endorsement compliance
  • Product liability & labelling
  • Intermediary safe harbour
  • Payment aggregator & settlement terms
  • Cross-border sales & FEMA compliance
  • Consumer commission proceedings

The rules in play

Consumer Protection Act, 2019
Unfair trade practices, product liability, CCPA powers and the consumer commission structure.
Consumer Protection (E-Commerce) Rules, 2020
Seller disclosures, grievance officers, cancellation and ranking transparency.
CCPA guidance on advertising and dark patterns
Misleading advertisements, endorsement disclosure and prohibited interface practices.
IT Act, 2000, Section 79
Conditional intermediary safe harbour and the due diligence it requires.
IT Rules, 2021
Due diligence obligations for intermediaries, including grievance redressal and takedown.
DPDP Act, 2023 and DPDP Rules, 2025
Customer data, consent and data principal rights.
Legal metrology packaging rules
Mandatory declarations for pre-packaged goods sold online.
CGST Act, 2017, Section 52
Tax collection at source by e-commerce operators on supplies made through the platform.

Facing something in
e-commerce & consumer?

Every enquiry is confidential. Tell us what you’re facing and our team will come back to you.

Get in Touch