Rules and ethics
Mapping UK conversion rules to each store decision with separate review gates
Map UK ecommerce conversion rules to each store decision, with separate consumer, advertising, privacy, safety and supplier review gates clearly.
What to take away
- This is a review structure for organising evidence, not legal advice; the named specialist for each gate decides how the rule applies to your store.
- Assess a conversion change by what the seller said, what the interface did and which shopper it affected, not by its label.
- Run the ten gates below as separate stop gates, because a pass in one cannot offset a failure in another.
- Build the transaction map before writing a test brief, and keep a current evidence date beside every conclusion.
- Reopen each gate on a named trigger, such as a price change, claim expiry or supplier change, not only on a calendar cycle.
Build the transaction map first
A conversion change is not assessed by its label. The questions are what the seller said, what the interface did, what information or money moved, who made each decision and which shopper was affected.
Record the legal seller, the customer location rule, the product or service, the sales channel and the contracting route.
Then walk the journey in order:
- Map product view, basket, checkout, payment authorisation and capture.
- Name the party controlling each state.
- Add confirmation, fulfilment, cancellation, return and refund.
- Keep order, paid, fulfilled, cancelled, returned, refunded and disputed apart.
A marketplace, payment provider or optimisation agency is not automatically the seller, and a supplier label does not settle controller status.
GOV.UK distance-selling guidance lists the pre-order information a shopper may need: seller identity, the offer, price, delivery and cancellation. A qualified consumer lawyer applies it to the goods, services or digital content you sell.
Gate-by-gate mapping for one store decision
| Gate | Rule or source | Sign-off owner | Re-review trigger |
|---|---|---|---|
| Pre-contract information | Consumer Contracts Regulations 2013; GOV.UK distance-selling guidance | Consumer lawyer | Product, price or delivery change |
| Unfair commercial practices | CMA207 guidance on the DMCC Act 2024 duties from 6 April 2025 | Consumer lawyer | New scarcity or urgency wording |
| Price and drip pricing | CMA price transparency guidance (CMA209) | Pricing owner | Any fee, tax or charge change |
| Optional add-on charges | CMA guidance on consent for additional charges | Pricing owner | New upsell or default option |
| Advertising and claims | CAP Code Sections 2, 3 and 8 | Advertising reviewer | Claim or evidence expiry |
| Tracking and privacy | PECR; UK GDPR; ICO storage and access technology guidance | Data protection lead | New tag, pixel or audience |
| Direct marketing | ICO direct marketing guidance; PECR soft opt-in | CRM owner | New abandoned-basket flow |
| Accessibility | Equality Act 2010 service-provider duties | Accessibility specialist | New form, step or component |
| Product safety | OPSS product-safety guidance for GB and NI | Product compliance owner | New line, warning or recall |
| Payment, security and supplier | FCA register; NCSC secure online service guidance; signed contract | Finance, security and procurement leads | Provider change or renewal |
Example: a free-delivery banner through the gates
Take one change: a banner reading "Free delivery ends Sunday", a 99p handling fee added at checkout and a preselected gift-wrap box. Run it through the table above.
The pre-contract gate puts the handling fee into the information shown before the order, not at the payment step. The unfair practices gate needs the Sunday deadline to be real, not quietly restarted each week.
The CMA's price transparency guidance covers mandatory fees and drip pricing, so the 99p belongs in the headline price. The add-on gate requires express agreement for gift wrap, so the preselected box fails.
CAP Code Section 3 requires the delivery claim to be substantiated before it runs. A new countdown script that sets a cookie enters the tracking gate, and any "cart saved" email enters the marketing gate.
Tracking, marketing and claims are three separate checks
A new tag, pixel or server-side match is a data operation. State its purpose, the data involved, retention and recipients before choosing a lawful basis, and keep it inside the checkout data operation you already record.
The ICO's guide to PECR covers consent for storage and access, plus the soft opt-in that can allow email marketing to existing customers. Cart abandonment messages need that second analysis. A service message cannot carry marketing permission.
Claim checks stay with the advertising reviewer. Keep wording, evidence, source date, owner, approval and expiry together, so a content owner can withdraw a message when the evidence changes.
A pass in the price gate does not make a delivery claim substantiated, and a higher conversion rate does not make a preselected add-on lawful.
Re-review triggers and the release record
Reopen a gate when the fact behind it changes, not only at an annual review:
- Price or fee changererun the pre-contract, price and add-on gates.
- Claim or evidence expiryrerun advertising and substantiation.
- New tag, pixel or audiencererun tracking, then direct marketing.
- Payment provider, subprocessor or supplier changererun security, contract and data gates.
- Withdrawal, recall or warning changestop the test and rerun safety.
Write the release record before exposure. It names the change, the gate, the owner, the evidence date, the approval and the rollback route. The conversion supplier contract questions belong there, because a marketing page is not the contract.
Sources here were checked on 6 September 2026. Reopen the exact ICO or CMA page on the day, since individual guidance can be revised.
Common questions
Does one gate approval release a change?
No. Each gate is its own stop gate, and one approval cannot cover a different rule. A change releases only when every gate it touches has a named approval and an evidence date.
Who owns the price and add-on gates?
The pricing owner holds both, with consumer-law review. Leave service thresholds, liability positions and insurance requirements blank for the buyer and qualified counsel to set.
How often must the gates be re-reviewed?
On trigger, not on a calendar alone. A price change, claim expiry, supplier change or product withdrawal should each reopen the relevant gate.
Can conversion results show a change was lawful?
No. Statistical significance and revenue say nothing about consumer law, privacy or product safety.
In this guide
- Ecommerce conversion UK regulations: store release gatesEcommerce conversion UK regulations — the DMCCA 2024, PECR and the Consumer Contracts Regulations 2013 — mapped to store journey release gates.
- Ecommerce conversion advertising rules: claims, offers and affiliate linksCheck ecommerce conversion advertising rules before testing claims, offers or affiliate links: name the CAP Code, CMA guidance and DMCCA 2024.
- Ecommerce conversion data protection: checkout mapA practical ecommerce conversion data protection guide to mapping checkout events, purposes and roles, then checking PECR and UK GDPR before launch.
- The questions to put to a conversion supplier contract before anyone signsReview ecommerce conversion supplier contracts through non-ranked questions on scope, data, security, accessibility, charges, evidence and exit.
- Ecommerce conversion disclosure policy for storesAn ecommerce conversion disclosure policy for online stores: four label classes, a relationship register, placement rules and a checklist for every claim.
