Food rules online
Selling food online? Get these right.
Food rules online are the extra things a food business must show or do when it sells through a website rather than over the counter. This guide covers allergens, hygiene ratings, halal claims, age checks, refunds on fresh food and privacy. We are not lawyers, so treat it as general guidance and check anything you are unsure of with your local authority or adviser.
The rules
Eight things to get right.
General guidance only. The Food Standards Agency, your council and the ICO publish the official detail.
01
The 14 allergens
Celery, cereals with gluten, crustaceans, eggs, fish, lupin, milk, molluscs, mustard, tree nuts, peanuts, sesame, soya and sulphites.
02
Allergens before and at delivery
Online, allergen information must be available before the customer buys and again when the food arrives.
03
Natasha's Law
Food packed on site before it is ordered, then sold from the same premises, needs a full ingredients label with allergens highlighted.
04
Hygiene rating
Showing your rating is voluntary in England but encouraged, while in Wales and Northern Ireland display is a legal requirement.
05
Halal claims
Only claim the certification you actually hold and show the certificate, and if you are not certified, do not imply it.
06
Age-restricted products
Products such as knives, alcohol or vapes need age checks when ordered and when handed over.
07
Refunds on fresh food
Perishable food is exempt from the 14-day right to cancel, but faulty or wrong food must still be put right.
08
Privacy and cookies
A privacy notice, consent for non-essential cookies, and the ICO data protection fee unless you are exempt.
Food rules
Asked often. Answered carefully.
What allergen information do I need on my website?
All 14 allergens, for every dish or product, before the customer buys and again, in writing, when the food is delivered or collected. A clear allergen note on each product, plus a sticker or menu with the order, is a common way to do it.
Does Natasha's Law apply to my shop?
Yes, if you pack food on your premises before a customer orders it and sell it from the same premises, such as pre-wrapped sandwiches or packed meat trays. That food needs a label with the name and full ingredients, allergens emphasised; food made to order is handled differently, so check with your council if you are unsure.
What if I cannot guarantee a dish is allergen free?
Say so plainly. Many kitchens add a note that dishes are made where allergens are present, and customers with allergies should be able to contact you before ordering.
Do I have to show my food hygiene rating online?
Not in England, where it is voluntary, though the Food Standards Agency encourages it. In Wales and Northern Ireland, displaying the sticker at the premises is required by law and there can be extra rules for takeaways, so ask your council what applies to you.
How should I show halal certification on my website?
Name the certifier and show the certificate you actually hold. If you are not certified, describe how you source your meat honestly, without words or logos that suggest certification, because misleading claims can break consumer law.
What if my halal certificate expires?
Take it off the website until it is renewed. Tell Adam and we will update the page the same or next working day.
Can I sell knives online from my shop?
Yes, but with an age check at the order stage and again on handover, and knives sold online have extra delivery rules. Speak to your council's trading standards team before listing them.
Do customers get 14 days to cancel a food order?
No, not for food that goes off quickly, because perishable goods are exempt from the 14-day cancellation right. Long-life goods, such as packets and tins, may still fall within it, so check with an adviser.
What if a customer's food order is wrong?
Put it right with a replacement or a refund. Customers keep their rights under consumer law when goods are faulty, not as described or not what they ordered, so keep a note of what happened.
Does my food website need a privacy notice?
Yes. If you collect names, phone numbers or addresses, UK GDPR says you must tell customers what you collect and why, so we add a privacy page to every site for you to check.
Do I need a cookie banner on my website?
Yes, if the site uses cookies that are not strictly needed, such as analytics or advertising. Shopify has a built-in consent banner, and we switch it on.
Do I need to pay the ICO data protection fee?
Usually, yes. Most businesses that handle personal data pay a yearly fee to the Information Commissioner's Office unless they are exempt, and the ICO website has a short check that tells you.
Still stuck? Message Adam. We are at Listerhills Science Park, Bradford BD7 1HR.
WhatsApp Adam →