• PL
  • EN
  • Proud Member of Alliott Global Alliance — Chambers Top Ranked Global 2023

    E-commerce Legal Services

    We guide online shops and platforms through e-commerce law — terms, GDPR, consumer rights, IT contracts and disputes. In plain language, and we track the changes for you.

    Home Services E-commerce

    We advise companies selling and providing services online: online shops (B2C and B2B), platforms and marketplaces, app and SaaS providers, and D2C brands. We secure your business from the design stage of the shop — from the terms and conditions to consumer relations.

    E-commerce law changes fast: the Omnibus Directive, the new warranty regime for goods and digital content, the DSA, GPSR and KSeF. We translate them into concrete wording in your terms and procedures — no jargon, in plain language your team and your customer will understand.

    We work on specifics: we audit the shop, draft documents that hold up against a consumer and in court, and stay on hand for complaints, UOKiK proceedings and disputes. Legal safety day to day, not just on paper.

    What we do

    Store documents & compliance

    Store terms and e-service regulations

    We draft and audit terms for your sales model — one-off, subscription, marketplace or dropshipping. Consumer-law compliant, readable for the customer, and resistant to clauses being struck down as unfair.

    Privacy policy, cookies and GDPR documentation

    We prepare the full set: privacy and cookie policy, consents, the record of processing activities (RoPA) and a compliant cookie-consent banner in line with current requirements.

    Consumer law 2026

    Withdrawal, complaints, conformity of goods and digital content

    We set up your returns (14 days) and complaints under the new "conformity with the contract" regime — which also covers digital content and services (SaaS, e-books, apps, subscriptions). You know when the right of withdrawal does not apply.

    Omnibus Directive: prices, promotions and reviews

    We implement Omnibus duties: the lowest 30-day price on promotions, authentic and verified reviews, and transparency of offer ranking. We protect you from a UOKiK fine for a "fake discount".

    Contracts & intellectual property

    IT and commercial contracts: SaaS, freelancer, IP transfer

    We draft and negotiate contracts with IT vendors, agencies and freelancers — SaaS, implementation, data-processing and copyright transfer — so the code, graphics and content actually belong to you.

    Intellectual property and content

    We organise rights to photos, product descriptions and trademarks, and respond to content copying and counterfeits. Your content is an asset — we treat it as one.

    Data & marketing

    Data protection in practice: processing, RoPA, transfers

    We set up data-processing agreements with vendors (hosting, marketing, payments), assess transfers outside the EEA, and keep your GDPR documentation audit-ready.

    Marketing and consent: newsletter, cookies, contests

    We set up marketing consents (email, SMS, phone), marketing cookies and rules for promotions and contests, so a campaign does not end in a complaint or a fine.

    Product safety & platforms

    Product safety (GPSR) and seller duties

    We help meet GPSR requirements: product and responsible-person information, traceability, warnings and recall procedures. Key when importing and selling under your own brand.

    Platforms, marketplaces and the DSA

    We advise intermediaries and marketplaces on DSA duties: the notice-and-action procedure, terms for sellers, transparency and content moderation beyond the "passive hosting" model.

    Ongoing support & disputes

    Ongoing advice and complaint handling

    We take document updates off your plate and support you in responding to complaints and consumer letters. A lawyer on hand, rather than looking for help only once there is a problem.

    Consumer disputes and UOKiK proceedings

    We represent you in disputes with consumers, before ombudsmen and in UOKiK proceedings — from the reply to a notice through to defending against a fine of up to 10% of turnover.

    For whom

    • Online shops (B2C and B2B) — terms, GDPR, complaints, promotions.
    • Platforms, marketplaces and user-content services — DSA, seller terms, moderation.
    • App and SaaS / digital-content providers — contracts, licences, the new warranty regime.
    • D2C brands and multichannel sellers — product safety (GPSR), IP, marketing.
    • Agencies and IT vendors — implementation contracts, data processing, IP transfer.

    Why WLAW

    We don't sell templates. We draft terms and procedures for your real sales model — subscription, marketplace, dropshipping, D2C — and explain them in plain language, so your team and your customer understand them. We track legal change (Omnibus, DSA, GPSR, KSeF) and update the documents before an inspection does — and when a dispute comes, we are on your side of the table.

    How we work

    1

    Audit

    we review the shop, terms and documents for compliance and risk.

    2

    Documents

    we draft terms, policies and templates fitted to your model.

    3

    Rollout

    we help implement the changes with you and your IT vendor.

    4

    Ongoing support

    complaints, questions and document updates day to day.

    5

    Disputes

    representation before the consumer, the ombudsman and UOKiK.

    Legal landscape 2026

    E-commerce law has changed sharply over recent seasons. We track it for you:

    • Omnibus Directive — the lowest 30-day price on promotions, authentic reviews, ranking transparency (in force in Poland since 2023).
    • "Conformity with the contract" regime — one complaints system for goods and for digital content and services (goods and digital directives).
    • DSA — actively enforced in 2026; duties for platforms, marketplaces and user-content services.
    • GPSR — general product safety, in full application in 2026 (information, traceability, recalls).
    • KSeF — mandatory e-invoicing: from 1 February 2026 for large firms (turnover over PLN 200m), from 1 April 2026 for the rest; a penalty-free transition runs to the end of 2026.

    Legal position: July 2026.

    Frequently asked questions

    What must the terms of an online shop contain in 2026?

    The terms must cover, among other things, how the contract is concluded, prices, delivery and payment, the right of withdrawal (14 days), the complaints procedure under the conformity regime, and the seller's details and contact. Add GDPR requirements (a link to the privacy policy) and out-of-court dispute resolution (ODR/UOKiK).

    We write the terms for your real sales model and so that clauses are not treated as unfair. Outdated or "copied" terms are the most common source of fines and lost complaints — so we audit and update them on every material change in the law.

    How did the Omnibus Directive change how prices and promotions are shown?

    On every price reduction you must show the lowest price of the item in the 30 days before the promotion — otherwise the "promotion" breaches consumer law. Omnibus also requires you to mark verified reviews, not publish fake ones, and disclose the criteria for ranking offers.

    Breaches carry UOKiK fines of up to 10% of annual turnover. We set up your pricing mechanics, promotion banners and review collection so they are compliant — and show you where shops most often slip up.

    How does a complaint about goods differ from one about digital content (SaaS, e-book, app)?

    Since 2023 a single "conformity with the contract" regime applies, but digital content and services have their own rules — including a duty to provide updates and liability for lack of conformity throughout the supply period. The consumer no longer relies on the old statutory warranty but on rights to repair, replacement, a price reduction or withdrawal.

    If you sell subscriptions, online courses or apps, your terms and complaints procedure must reflect this. We set them up to be compliant while not giving away more than the law requires.

    How long does a consumer have to withdraw, and when does the right not apply?

    As a rule a consumer has 14 days to withdraw from a distance contract without giving a reason — and if you fail to inform them properly, that period extends up to 12 months. There are exceptions, though: made-to-order goods, sealed products opened after delivery, or digital content supplied with the consumer's express consent.

    Well-drafted exceptions and a proper withdrawal notice protect you from mass returns and disputes. We identify which of your products fall under exclusions and how to communicate that correctly in the shop.

    What GDPR documents must an online shop have?

    The minimum is a privacy policy, a cookie policy with a consent mechanism, a record of processing activities (RoPA), and data-processing agreements with vendors who handle your customers' data. Add information clauses in forms and a procedure for handling rights (e.g. access, erasure).

    A bare "I accept" cookie banner without real consent and without documentation is a typical gap the data-protection authority picks up. We prepare the full set and keep it audit-ready.

    Do I have to issue invoices in KSeF, and from when?

    The duty to issue invoices in KSeF starts in stages: from 1 February 2026 for large firms (sales over PLN 200m), and from 1 April 2026 for the remaining businesses. Receiving invoices in KSeF is required from February 2026, and a penalty-free transition period runs to the end of 2026.

    For a shop this means changes to settlements with vendors and to your payment terms. We tell you exactly from when the duty applies to you and how to adapt contracts and invoicing processes.

    Our experts

    The team that will handle your e-commerce matters — from terms and GDPR to complaints and disputes.

    Marta Solarska-Kaleńczuk

    Marta Solarska-Kaleńczuk

    Partner, Chief Operating Officer,
    Data Protection Officer

    Marta leads data protection and new-technologies law — GDPR, documentation and compliance for online stores.

    Contact MartaClick the card for the full profile ›
    Kinga Miller

    Kinga Miller

    Partner, Advocate, Approved Compliance Expert, Approved ESG Officer

    Kinga runs disputes and compliance advisory — complaints, consumer law and proceedings in online trade.

    Contact KingaClick the card for the full profile ›
    Oliwia Koper

    Oliwia Koper

    Associate, Advocate

    Oliwia combines e-commerce, intellectual property and data protection — terms, IT contracts and digital services.

    Contact OliwiaClick the card for the full profile ›
    Katarzyna Płonkowska

    Katarzyna Płonkowska

    Associate, Attorney-at-law

    Katarzyna advises on consumer law and commercial contracts — terms, complaints and shop compliance.

    Contact KatarzynaClick the card for the full profile ›

    Let's talk about your shop

    Tell us what you sell and where you are — we'll flag the risks and the next step.

    Contact us