Marketplace document stack at a glance

The founder problem: a marketplace can accidentally become more than a “platform”

A founder may describe the business as “just connecting buyers and sellers”. The contracts and product can tell a different story. The platform might collect payment, control refunds, rank sellers, make promises about quality, publish reviews, host user content, remove accounts and decide disputes. Each of those functions can change the legal analysis. The document stack should therefore follow the operating model, not the word “marketplace” in the pitch deck.

1. First decide who the contracting parties are

Before drafting terms, identify whether the operator is acting as principal, agent, intermediary, reseller or in another role for each part of the transaction. If the buyer contracts directly with the seller, the marketplace terms should say what the operator does and does not provide, while seller-facing terms should allocate obligations around listings, fulfilment, refunds, taxes and compliance. If the operator itself sells or supplies the goods/services, the legal architecture is different.

This classification is not solved by a disclaimer saying “we are only a platform”. Courts and regulators look at the substance of the model. The checkout wording, money flow, control over sellers and customer-facing promises should all be consistent with the intended legal role.

2. Consumer law applies to conduct as well as written terms

The unfair-commercial-practices provisions of the Digital Markets, Competition and Consumers Act 2024 apply to commercial practices from 6 April 2025. The CMA’s current guidance covers misleading actions and omissions, aggressive practices, price transparency and banned practices. For marketplaces that publish consumer reviews, the law also contains specific prohibited practices around fake reviews and requires reasonable and proportionate steps to prevent and remove prohibited review content.

This means a marketplace cannot treat compliance as a terms-and-conditions exercise. Search ranking, badges, seller verification claims, scarcity messages, review systems, fees and price presentation can all matter.

3. Consumer rights and checkout duties depend on the actual sale

Where buyers are consumers, identify whether the seller is a trader, who the consumer contracts with, and what the marketplace itself promises. The Consumer Rights Act 2015 governs relevant standards and remedies for goods, services and digital content, as well as unfair consumer terms. The Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 require applicable pre-contract information and, for many distance transactions, cancellation information and rights, subject to exceptions. Trader identity, prices and mandatory charges, delivery, complaint handling, and refund allocation should be clear before checkout. Seller terms may allocate contractual tasks, but cannot remove rights or obligations imposed by law on the seller or operator. The position varies with goods, services, digital content and transaction type.

4. Seller terms should do more than collect a signature

• Define eligibility, onboarding evidence and the seller’s responsibility for licences, registrations or professional qualifications where relevant.
• Require accurate listings, prices, product/service information and delivery/availability information.
• Allocate responsibility for taxes, invoices, refunds, chargebacks and customer communications.
• Set standards for prohibited goods/services, IP infringement, unsafe products, misleading claims and user conduct.
• Give the operator proportionate investigation, suspension, delisting and termination rights.
• Address fees, commission, payout timing, reserves, deductions and set-off where commercially required.
• Require cooperation with regulatory, tax, product-safety or law-enforcement requests where legally appropriate.

5. Payments can create a regulatory perimeter issue

The FCA expressly warns that online marketplaces and businesses bringing sellers and customers together may be providing payment services if they receive customer money before passing it to a seller. Whether authorisation or registration is required depends on the model and available exclusions. The commercial-agent exclusion is narrow and generally requires acting on behalf of either the payer or the payee, not both, with authority to negotiate or conclude the sale. Escrow-style activity can be particularly sensitive.

The practical founder lesson is to design the payment architecture before drafting the payout clause. Using a regulated payment provider can reduce some operational exposure, but the contractual and regulatory analysis still has to match who receives, controls and transmits funds.

6. HMRC platform reporting can require seller due diligence and annual reporting

UK digital platform operator rules can require qualifying platforms to collect and verify seller information, identify reportable sellers, report prescribed information to HMRC and provide sellers with copies of reported information. The HMRC guidance was updated in 2026 and includes due-diligence expectations and annual reporting deadlines. A marketplace onboarding flow should therefore be designed with tax-reporting data requirements in mind where the regime applies.

7. Marketplace VAT liability is different from seller tax reporting

Seller reporting to HMRC is not the same question as VAT liability. Under the separate online-marketplace VAT rules for goods, a qualifying operator may be liable to charge and account for VAT on certain sales by overseas sellers of goods located in the UK, and on eligible imported consignments with an intrinsic value of £135 or less sold through the marketplace to customers in Great Britain.

Northern Ireland and business-to-business transactions have specific rules and qualifications. The operator should test whether it meets HMRC’s marketplace definition, where goods are at the point of sale, the seller’s status, the customer’s status, invoicing and record-keeping. Not all service marketplaces or simple listing sites fall within these goods-specific rules. Map VAT before approving checkout, seller obligations and invoices.

8. User content can trigger Online Safety Act questions

A marketplace with listings, reviews, messages or other user-generated content should assess whether its actual service falls within the Online Safety Act 2023 user-to-user or search-service scope and whether a statutory exemption applies; not every feature or marketplace is automatically in scope. In-scope services have illegal-content risk-assessment and associated safety, governance, record-keeping and review duties, with particular requirements depending on service type and risk. Services likely to be accessed by children also face child-access and, where required, children’s risk-assessment and protection duties. Ofcom updated its illegal-content codes in September 2026. Content, Acceptable Use and Moderation policies can help implement platform rules, but cannot substitute for statutory risk assessments, complaints/reporting systems or technical and operational controls.

9. Product safety is a moving area for marketplaces

Physical-goods marketplaces should distinguish the current product-safety regime from proposed reforms. The General Product Safety Regulations 2005 and applicable product-sector laws already impose duties on relevant economic operators and can affect what a marketplace may supply, facilitate or promise. The Product Regulation and Metrology Act 2025 enables further reforms, including potential new online-marketplace responsibilities, but the March 2026 consultation was a proposal: do not treat uncommenced measures as operative. Check the operator’s actual role, relevant goods and territorial rules (including Northern Ireland where applicable), product alerts/recalls, and any implementing regulations before launch and immediately before publication.

10. Privacy and cookies should reflect multi-party data flows

Marketplaces commonly process personal data about buyers, sellers, hosts, service providers and visitors. UK GDPR transparency, lawful basis, controller/processor allocation, data-sharing, retention and transfer arrangements should reflect what the platform actually does. The Data (Use and Access) Act 2025 amended aspects of UK data-protection law, with the relevant changes in force by June 2026.

For cookies, pixels and other storage/access technologies, apply PECR as amended and the ICO’s April 2026 final guidance: consent remains necessary for non-exempt purposes such as most behavioural advertising, but specific statutory exceptions can apply, including qualifying statistical and appearance purposes, subject to conditions. Do not assume that every cookie requires consent or that a policy alone implements the required choices and controls.

11. Build the document stack around enforcement decisions

Marketplace documents become valuable when the platform needs to act: reject a seller, remove a listing, pause a payout, respond to a complaint, investigate a safety issue, restrict content or terminate an account. The drafting should therefore answer who may act, on what grounds, what notice is given, what evidence is required, whether appeals exist and how statutory rights are preserved.

Common marketplace mistakes and consequences

How StartWise^® Drafting fits

StartWise^® currently includes a cluster of UK marketplace and platform documents, including Marketplace Terms of Use, Host/Vendor Agreement, Platform-Focused Privacy Policy, Content Policy, Acceptable Use Policy, Marketplace Seller Terms, Platform Moderation Terms and Host Declaration. For a reasonably standard model, a founder can choose the relevant document, answer guided questions, generate a tailored first draft and review any Drafting Notes.

Drafting Notes can surface assumptions, choices to confirm and completion points, but are not legal advice and cannot resolve whether the operator owes marketplace VAT, consumer remedies, payment-services authorisation, online-safety duties, data-protection compliance, HMRC seller reporting or product-safety obligations. Determine the legal framework and operating model before choosing documents.

Frequently asked questions

Does every marketplace need separate buyer and seller terms?

Not necessarily, but separate documents are often clearer where the operator has materially different relationships with buyers and sellers. The structure should follow the contracting model.

Can I say the seller is responsible for all legal compliance?

A seller-facing allocation can be useful, but it does not automatically remove duties imposed directly on the platform operator by consumer, payment, online-safety, tax, data or product-safety law.

Do marketplace payments require FCA authorisation?

Sometimes. It depends on the money flow, whether payment services are provided as a business activity and whether an exclusion or exemption applies. This is a legal/perimeter question, not a drafting assumption.

Do I need to report sellers to HMRC?

Potentially, if you are a reporting platform operator within the UK digital-platform reporting rules. Check the current HMRC scope and exemptions.

Does the Online Safety Act apply to marketplace listings and reviews?

It may if the service has in-scope user-to-user functionality. The exact scope depends on the product and exemptions; Ofcom guidance should be checked before launch and when features change.

Can marketplace operators owe VAT as well as report sellers?

Yes, depending on the goods, seller/customer circumstances and HMRC’s online-marketplace VAT rules. Seller due-diligence/reporting and VAT accounting are different regimes.

Do marketplace terms replace consumer rights or cookie controls?

No. Consumer rights and applicable pre-contract/cancellation duties cannot simply be disclaimed. UK GDPR and PECR duties must be implemented in the actual data and technology systems, including consent where it is required and any qualified exceptions.

Can StartWise^® build the whole compliance framework?

No. It can assist with currently available documents. Regulatory analysis, risk assessments, technical controls and operational implementation sit outside guided drafting.

Author, legal-review and update information

Author / reviewer: Gabriel C. Mbanefo — Solicitor of the Senior Courts of England and Wales; Director & CEO, Entrepreneur Legal UK. Author profile: https://uk.entrep.legal/about/ (confirm final byline/legal sign-off at publication).

Planned publication date: 27 October 2026.

Current source-check date: 16 October 2026 — targeted fresh legal and StartWise^® product source review; older register items retain their recorded check dates unless separately refreshed.

Jurisdiction statement: General UK information. Platform duties depend heavily on business model, functionality and territorial scope. Not legal advice.

Sources and related Entrepreneur Legal resources

• CMA: Unfair commercial practices guidance under the DMCC Act 2024.
• CMA: Fake reviews guidance.
• HMRC: Reporting sellers to HMRC if you are a digital platform operator.
• FCA: Consider if you provide payment services; PERG 15.
• Ofcom: Online Safety Act child-protection duties.
• Product Regulation and Metrology Act 2025 and current Government consultation materials.
• Entrepreneur Legal UK: What Legal Documents Does a UK Startup Need?
• HMRC: VAT and overseas goods sold to customers in the UK using online marketplaces.