
Rules and ethics
Seven ecommerce SEO rules and ethics duties for UK stores
How ecommerce SEO rules and ethics apply to UK stores: CMA consumer law, ICO email consent, accessibility, disclosure and a compliance sequence for 2027.
What to take away
- Most ecommerce SEO teams fail on evidence rather than policy. Claims, prices and reviews go live without a dated record of what was checked and by whom, so nothing can be shown when a regulator or a platform asks.
- The CMA's consumer protection guidance covers unfair trading and online practices across the United Kingdom. Since 6 April 2025 the Digital Markets, Competition and Consumers Act 2024 lets the CMA fine a trader up to 10% of global turnover.
- Email marketing needs a lawful basis and clear consent under the ICO's electronic mail guidance, even when the campaign is really a content or SEO play. PECR fines reach £500,000.
- Accessibility is an ethical duty and an SEO advantage. WCAG 2.2 sets the W3C benchmark, and the Equality Act 2010 expects reasonable adjustments.
- Build the compliance record now, one page at a time, rather than retrofitting it during a trading standards query.
Ecommerce teams usually treat SEO compliance as a final proofread. A better habit is to treat every indexable page as a published commercial claim, with a named owner and a date. That single change prevents most of the problems set out below.
This guide covers the rules and ethics duties that touch ecommerce SEO in the UK, with England-specific notes where the law or the regulator differs. It is general guidance only, and individual cases need a qualified adviser.
The seven rules and duties in brief
Seven rules and duties
- Fair trading. The CMA's guidance on unfair trading and online practices bans misleading actions, misleading omissions and aggressive practices. The Digital Markets, Competition and Consumers Act 2024 added fines of up to 10% of global turnover from 6 April 2025.
- Honest pricing. The Price Marking Order 2004 requires a selling price, and a unit price where goods are sold by unit. Reference prices must match a genuine previous price, and the DMCC Act bans drip pricing by pulling mandatory fees into the headline price.
- Real reviews. The DMCC Act lists fake, incentivised and suppressed reviews as banned practices. The CMA publishes separate advice on online reviews, and Google's review snippet policy bars aggregate rating markup about your own business on your own site.
- Consent for email. PECR regulation 22 governs electronic mail marketing, and the ICO's guidance explains consent and the narrow soft opt-in. PECR fines reach £500,000, and UK GDPR penalties can reach £17.5 million or 4% of global turnover.
- Accessibility. WCAG 2.2 became a W3C Recommendation in October 2023, with level AA the usual target. The Equality Act 2010 requires reasonable adjustments, and the European Accessibility Act applies to ecommerce sold into the EU from 28 June 2025.
- Disclosure. CAP Code rule 2.1 requires marketing communications to be obviously identifiable, a rule the Advertising Standards Authority has applied to affiliate content since March 2011. Undisclosed paid placement is also a misleading omission under consumer law.
- Employment duties. Acas advice covers contracts, pay and status for the freelancers and translators who write pages. The National Living Wage is £12.21 an hour for workers aged 21 and over from April 2025, and off-payroll working rules decide contractor tax status.
Where ecommerce SEO rules come from
Most day-to-day decisions sit under three strands of law and guidance: consumer protection, data and electronic marketing, and accessibility. Employment duties sit behind them, because they decide who can sign off a claim and when the work is done.
Three strands of ecommerce SEO rules
- Consumer protection: CMA unfair trading guidance
- Data and marketing: ICO email consent
- Accessibility: templates and content basics
- Employment duties: who signs off claims
Consumer protection and online practices
The CMA consumer protection guidance for businesses on unfair trading and online practices sets out how the Competition and Markets Authority expects traders to behave online. It covers misleading actions, misleading omissions and aggressive practices, and it applies across the whole of the United Kingdom.
The Digital Markets, Competition and Consumers Act 2024 changed the penalty. Since 6 April 2025 the CMA can fine a trader up to 10% of global turnover, or £300,000, whichever is higher, without going to court.
For SEO, the practical risks sit in the copy written to rank. A page that implies a discount is ending when it is not can be an unfair commercial practice, even if it ranks well. The same applies to a page that hides a delivery charge until checkout.
Pressure selling has already drawn action. The CMA took commitments from hotel booking sites, including Booking.com, Expedia and trivago, in 2019 over how they displayed discounts and urgency. Local trading standards services handle many individual complaints alongside the CMA.
Your keyword research can create a compliance problem too. Target a term you cannot honestly satisfy, such as a certification you do not hold, and the ranking itself becomes the misleading claim. Map each target phrase to evidence before you brief a writer.
Category descriptions carry the same test. Words such as cheapest, official and guaranteed are testable statements. If you cannot produce the test, use plainer wording that describes what the product does.
Data, email and consent
Direct marketing by electronic mail is regulated separately from general data protection, under the Privacy and Electronic Communications Regulations 2003. The ICO's guidance on direct marketing using electronic mail explains consent, soft opt-in and the right to object.
Content marketers often send a newsletter as part of an SEO programme and assume the rules are lighter because the email reads as editorial. They are not. If the message promotes your products or services, it is direct marketing.
Keep a record of when consent was given, what the person was told, and how to withdraw. It is useful evidence if a complaint reaches the ICO. PECR breaches can attract fines of up to £500,000, and UK GDPR penalties reach £17.5 million or 4% of global turnover.
The soft opt-in exception is narrow. It applies to existing customers, to similar products, and only where the address was collected in the course of a sale. It does not cover a purchased list or a contact scraped from a directory.
List hygiene supports the same goal. Sending to people who never engaged raises complaints, and complaints are what trigger scrutiny of your consent wording in the first place. A re-engagement campaign that asks people to confirm they still want to hear from you is cheaper than a regulatory query.
Accessibility and inclusive design
The W3C's web accessibility fundamentals explain the principles behind accessible pages: content that can be perceived and operated, wording that can be understood, and markup that works across browsers and assistive technologies. WCAG 2.2 became a W3C Recommendation in October 2023, and level AA is the common target.
Many of its requirements overlap with what search engines reward, including real headings, descriptive link text, alternative text and keyboard-operable navigation.
Accessibility is an ethical duty as well as a commercial one. A store that cannot be used by a screen reader user is excluding customers and weakening its own crawlability. The fix is usually structural rather than cosmetic, which is why it belongs in the template rather than in a page-by-page tidy-up.
The Equality Act 2010 requires reasonable adjustments for disabled people. The European Accessibility Act applies from 28 June 2025 to ecommerce services sold into the EU, and the Public Sector Bodies (Websites and Mobile Applications) Accessibility Regulations 2018 bind public sector sites rather than most private retailers.
Start with your category templates and checkout flow, because those carry the most traffic and the most risk. Then fix product pages in order of revenue. This is the same prioritisation you would use for any SEO sprint.
Alt text deserves a specific rule. Describe what the image shows in the context of the page, and leave it empty for decorative images. Keyword-stuffed alt text helps nobody and creates a mismatch between the description and the picture.
Keep the work visible. A short note in the page template recording the last accessibility check, and who carried it out, turns an intention into a process. Designing to the WCAG 2.2 baseline now is cheaper than retrofitting templates later.
Applying the rules to store content
Claims, prices and reviews
Every price, discount and availability statement on a product page is a claim. Log the source of each one: supplier feed, manual check or pricing rule, with the date checked. If a claim cannot be sourced, remove it. The Price Marking Order 2004 requires a selling price, plus a unit price for goods sold by unit.
Claims, prices and reviews checks
- Source every price, discount and availability claim
- Note the date and remove unsourced claims
- Set feed price tolerance and alert owner
- Show underlying reviews behind star ratings
- Do not suppress negative reviews
- Make urgency timers and stock messages real
- Align structured data with visible page
Feed-driven pricing is the hardest case to control. If a supplier feed updates a price overnight, the page can be wrong by morning. Set a tolerance rule and an alert, and decide in advance who acts on it.
Review content needs the same discipline. Do not present a star rating as an average unless you can show the underlying reviews and how you calculated it. Suppressing negative reviews can be a misleading omission, and the DMCC Act bans fake or incentivised reviews.
Google's review snippet policy also bars aggregate rating markup about your own business on your own site.
Our guide to reviews and comparison methods for 2027 explains how to document a rating, an award or a comparison so the page stands up to scrutiny. Read it before you publish any best or top rated page.
Urgency copy deserves special care. Countdown timers, only 2 left messages and sale ends tonight banners must reflect reality. If the timer resets for every visitor, that is a misleading practice rather than a conversion tactic.
Structured data should describe the same reality as the visible page. Rating markup that carries a score the page does not show, or price markup that differs from the checkout price, is a mismatch worth fixing before a shopper or a platform notices it.
Keep a changelog. When a price or a claim changes, the previous version is often the evidence you need to show what a shopper saw on a given date.
Disclosure, affiliates and sponsored content
If a page earns money from links, that relationship should be clear to the reader. This applies to affiliate roundups, sponsored placements and paid inclusions in comparison tables. CAP Code rule 2.1 requires marketing communications to be obviously identifiable, and the Advertising Standards Authority has applied it to affiliate content since March 2011.
Placement matters as much as wording. A line buried in the footer, or revealed only after a click, does not help the reader decide whether to trust the recommendation. Put the disclosure where the recommendation is made.
Advertising claims are regulated separately from editorial content. Our guide to advertising rules in England sets out what counts as an ad and what evidence you need before making a comparative claim. SEO teams should read it because paid and organic pages often share the same wording.
The Climate Change Act 2008 is sometimes cited in environmental marketing discussions, but the Act as published on legislation.gov.UK sets emissions targets rather than marketing duties. Check a green claim against the CMA's Green Claims Code, published in September 2021, and keep the evidence for the specific claim you make.
Affiliate feeds often arrive with supplier-written copy, and that copy can carry claims your business has never checked. Treat imported descriptions as drafts, not as approved content.
Employment and contractor duties
Ecommerce businesses that use in-house writers, translators or agency staff have employment duties that touch content operations. Pay, working time and status questions sit outside SEO, but they affect who can sign off a claim and when.
Acas publishes advice on employment law covering contracts, pay and workplace rights. Use it to check your arrangements if you use the same freelancers on a schedule that looks like employment.
The National Living Wage is £12.21 an hour for workers aged 21 and over from April 2025, and off-payroll working rules decide whether a contractor's company or your payroll handles PAYE.
For SEO specifically, the risk is a page that promises a service you cannot deliver because the team behind it is not contracted to deliver it. Align the content plan with the capacity plan.
A named sign-off owner for each template is the simplest control. When that person is a contractor, the contract should say what they are accountable for and what they are not.
This section is general guidance. Employment status and tax questions need a qualified adviser.
A numbered compliance sequence
Work through these steps in order, and keep the output in one place.
Seven-step compliance sequence
- Inventory every indexable page making a claim
- Record claim, evidence, source, date and owner
- Check email flows against ICO guidance
- Audit templates for accessibility basics
- Review urgency, discount and stock messages
- Add disclosure lines to affiliate content
- Set quarterly review date with named owner
Run this sequence before peak trading, not during it. The pages that matter most are the ones with the highest traffic and the highest commercial intent.
Prioritise by traffic and by money. A single category template can carry thousands of pages, so one fix there is worth more than twenty product page edits.
Two people should be able to run the register steps. If the record lives in one person's head, it disappears when they leave.
Expect the first pass to take longer than the rest. After that, most steps are additions to work you already do: a date column in the feed, a line in the brief, a checkbox in the publishing template.
Documents worth keeping
A compliance file can be simple. Keep a claims register, a consent log, an accessibility checklist and a disclosure style guide. Store them where the content team can reach them.
Documents worth keeping
- Claims register
- Consent log
- Accessibility checklist
- Disclosure style guide
- Dated review records
- Retention notes for consent and claims
Our overview of UK regulations, data and sources lists the primary sources you can cite in that file. It is a useful starting point when you need the original wording rather than a summary.
Contract terms matter too. If an agency writes claims on your behalf, the contract should say who is responsible for checking them.
Keep the file dated. A record from three years ago does not help if the product, price or claim has changed since. Review dates are the point of the exercise.
Retention is part of the file. Keep consent records and claims evidence for as long as a complaint or a query could reasonably arise, and note the date you archived each record.
Store the file with the content plan rather than in a folder nobody opens. The people writing the pages are the people who need it, and they will not go looking for it.
Common questions
Does UK consumer law apply to blog content as well as product pages?
Yes. The CMA guidance covers commercial communications, and a blog post that promotes a product can be a commercial practice. The test is whether the content affects a consumer's decision, not which template it sits in.
Do I need consent for every marketing email?
The ICO guidance explains consent and the limited soft opt-in exception for existing customers. If you are unsure which applies to a list, treat it as requiring consent until you have checked the detail.
Is accessibility a legal requirement for ecommerce sites?
The legal position depends on the organisation and the service. The Equality Act 2010 applies to most retailers as a duty to make reasonable adjustments, and the W3C fundamentals are a practical baseline regardless. They improve crawlability and usability at the same time.
Who is responsible if an agency writes a misleading claim?
The trader publishing the claim is usually responsible, which is why contracts should state who checks what. Our guide to commercial contracts in England covers the clauses to agree before work starts.
In this guide
- Why ecommerce SEO UK regulations need documented data sourcesThe ICO issued 76 monetary penalties between 2023 and 2025, a reminder that ecommerce SEO UK regulations rest on verifiable data and source records.
- Ecommerce SEO analytics and UK data protectionEcommerce SEO analytics can involve personal data. See how UK rules affect consent, crawler logs, retention and access requests.
- Ecommerce SEO contracts: clauses to check before signingCheck an ecommerce SEO contract before signing: data protection clauses, transfer safeguards, ownership, liability and termination terms for UK stores.



