Launching an online marketplace in Australia and your legal setup checklist

You have decided to build an online marketplace: a platform where third-party sellers list goods or services and you run the infrastructure that makes the transactions work. One question shapes every contract, every refund policy and every tax return you will prepare, so it is worth answering before you brief the web developer. Are you the merchant of record who supplies what customers buy, or the neutral facilitator who simply brings buyers and sellers together? Everything in this guide hangs off that distinction, so we will start there and work through the decisions in the order you actually have to make them.

Decide what your platform actually is

A marketplace can sit anywhere on a spectrum. At one end you merely introduce buyers and sellers and step away from the transaction. At the other you take the money, hold the stock and deliver the goods, which makes you the supplier in the eyes of customers and, often, the law. Between the two are the models most Australian founders actually build:

Product marketplace: multiple sellers list goods and fulfil orders themselves, while you provide the storefront, the payment rails and the rules.
Service marketplace: providers list services and customers book and pay through the platform, from trades to tutoring to professional advice.
Hybrid or curated marketplace: you onboard, vet or co-brand with sellers, hold funds, or handle fulfilment and returns for at least some categories.

The label matters less than the operational detail: who sets the price, who takes the payment, who fulfils, who handles returns, and who issues the invoice. Each of those answers shifts risk between you and your sellers. A marketplace that controls the price, receives the payment and arranges delivery looks much more like a supplier than one that runs a listings board and lets buyers and sellers transact directly.

Work through those questions now, in writing, because they determine who gives refunds, who carries the consumer guarantee obligations, who is treated as the supplier for GST, and whether you must report seller income to the Australian Taxation Office. A one-page decision memo is enough at this stage; just make the calls consciously.

Pick a structure and get registered

Most marketplaces end up operating through a company, because a company is a separate legal entity and the founders are not personally liable for its debts. That matters once sellers, buyers and payment processors start making claims. But the right structure depends on where you are:

Sole trader: cheap and simple, but you are personally liable for everything the business owes, including claims arising from platform activity.
Company: separate legal entity, limited liability, the structure investors and most large sellers expect, and the one that lets you raise capital cleanly. It brings director duties and annual ASIC reporting obligations.
Partnership or joint venture: workable with co-founders, but you need written decision-making, profit-sharing and exit rules, because partners are generally jointly liable for the venture's debts.

Whichever structure you choose, you will need an ABN, applied for through the Australian Business Register, and if you trade under a name that is not your own individual name, a business name registered with ASIC. Business name fees are indexed each year from 1 July, and company registration through ASIC carries a modest government fee. If you are forming a company, you can rely on ASIC's replaceable rules or adopt a tailored constitution, and if you have co-founders, a shareholders agreement covering ownership, roles, decision-making and exit scenarios is the document most startups skip and most later regret.

Protect the brand and the code

Your brand and your platform are the two assets that make the business worth anything, and both need protection before you start trading. A registered trade mark gives you exclusive rights to use your brand in Australia for the goods and services you register, and the right to use the registered symbol. Under IP Australia's process, an application costs from around $250, takes at least seven months to progress through examination and acceptance, and your registration lasts up to 10 years before it needs renewal. File as soon as you are confident in the name, because in a crowded category the first applicant usually wins, and search existing marks first so you do not invest months in a brand that belongs to someone else.

The code is a separate problem. Copyright in software and content does not automatically belong to the person who pays for it. Your agreements with developers, designers and copywriters need to assign the intellectual property to your company in writing, or the creator can retain rights in what they built for you. Do this before the work starts, not after you are trying to raise capital and a contractor is claiming ownership of the platform.

Draft the contracts that run the marketplace

Your marketplace is governed by its documents, and most platforms need a core set:

Platform terms for buyers: account rules, acceptable conduct, payments, refunds, suspension and termination, dispute handling and limitations of liability.
Seller agreement: fees and commissions, settlement timing, listing standards, fulfilment and returns obligations, what sellers warrant about their products and images, data access, and the grounds on which you can deactivate an account.
Customer terms: separate terms for any goods or services you sell directly, so those transactions are not confused with marketplace facilitation.
Website terms of use: the rules for browsing and user-generated content outside the transactional flow.
Privacy policy: what personal information you collect, why, and how users can access or correct it.
Data processing agreement: if you pass customer details to sellers or store order data on their behalf, this allocates privacy responsibilities between you and them.

One drafting caution applies to all of them. These are standard form, click-accept contracts, exactly the kind the unfair contract terms regime targets, so keep them balanced and transparent rather than one-sided. A term that lets you change fees unilaterally, suspend sellers without notice, or disclaim liability for anything at all is precisely what a regulator or a court will scrutinise. You can read more about the regime below, but the drafting principle is simple: give notice, build in rights to exit, and keep clauses as narrow as the business genuinely needs.

Get GST, payments and ATO reporting right

Decide how money flows before you launch: a payment gateway that passes funds straight to sellers, a marketplace payment solution with split payments, or an escrow arrangement where you hold funds until fulfilment. That choice interacts directly with tax, because it helps determine who is the supplier and who issues tax invoices.

On GST, the starting point is registration. If your GST turnover reaches $75,000 in a 12-month period, you must register, and the ATO requires you to do so within 21 days of becoming required. Ride-sourcing platforms must register from the first dollar of income regardless of turnover. Penalties apply if you fail to register when required, so this is not a decision to defer.

Then there are the electronic distribution platform rules, which flip the usual GST answer for cross-border sales. If you operate an electronic distribution platform (an EDP), you will generally be responsible for GST on sales made through your platform if you are registered or required to be registered for GST and the sale is of low value imported goods, meaning a customs value of A$1,000 or less, supplied to a consumer where you or the merchant help get the goods to Australia, or the sale is of an imported service or digital product to an Australian consumer. In those cases you are treated as the supplier for GST purposes. You are not an EDP simply because you process payments or sell advertising, and a classifieds-style site where you do not control the terms of the sale generally falls outside the rules. An EDP can also agree in writing with an Australian merchant to take responsibility for GST on digital products sold through the platform.

Separately, the Sharing Economy Reporting Regime (the SERR) requires EDP operators to report income earned by suppliers when payments flow from customers to suppliers through the platform, under Subdivision 396-B of Schedule 1 to the Taxation Administration Act 1953 (Cth). Reports are due twice a year, by 31 January for the previous July to December and by 31 July for January to June. The regime started on 1 July 2023 for taxi and ride-sourcing services and short-term accommodation, and from 1 July 2024 it was expanded to all other reportable transactions, which is the point at which most general marketplaces came into scope. If your platform handles those transactions, build the reporting into your operations now rather than discovering the obligation at lodgement time.

Plan for the Australian Consumer Law before your first sale

The Australian Consumer Law (the ACL) sits in Schedule 2 of the Competition and Consumer Act 2010 (Cth), and it applies to you even where you think of yourself as just the platform. Three parts matter most:

Misleading or deceptive conduct: Section 18 of the ACL prohibits conduct in trade or commerce that is misleading or deceptive, and it catches the platform's own behaviour: claims in your marketing, how you describe listings, undisclosed paid placement, and ranking that quietly favours sellers who pay you more. If your platform makes the representation, your disclaimer does not protect you.
Consumer guarantees: Goods and services supplied to consumers carry statutory guarantees: goods must be of acceptable quality and match their description, and services must be provided with due care and skill. The critical question is who the supplier is. If you sell your own stock or act as merchant of record, you carry the guarantees and you cannot contract out of them. If a third-party seller supplies the goods, the seller is the supplier, but the more you control price, payment and fulfilment, the harder it becomes to argue you are a mere bystander. A refund policy that says "all sales final" is not a defence if the guarantee applies; it is evidence against you. Relatedly, the ACL requires a single all-inclusive price to be displayed for many consumer purchases, so build that into your checkout rather than adding fees at the last step.
Unfair contract terms: From 9 November 2023 the ACL prohibits businesses from proposing, using or relying on unfair terms in standard form contracts with consumers and small businesses, and courts can now impose substantial penalties. The maximum penalty for a body corporate is the greatest of $50 million, three times the benefit reasonably attributable to the conduct, or 30 per cent of adjusted turnover during the breach period, and individuals face up to $2.5 million. The definition of small business also expanded to businesses with fewer than 100 employees or annual turnover under $10 million, and the old contract value threshold was removed, per the ACCC's guidance on the changes, so your click-accept platform terms are squarely within reach. The changes apply to contracts made or renewed on or after 9 November 2023 and to terms varied or added after that date. An unfair term is void, and the rest of the contract continues if it can operate without it. For a marketplace whose terms sit between you, thousands of buyers and thousands of sellers, this is the regime that makes balanced drafting a compliance issue, not a style preference.

Treat privacy as core infrastructure

The Privacy Act 1988 (Cth) and the Australian Privacy Principles (the APPs) regulate how you collect, use and disclose personal information, and the common startup assumption is that the small business exemption means none of it applies. The exemption covers businesses with an annual turnover of $3 million or less, but the Office of the Australian Information Commissioner is clear that several categories are covered regardless of turnover: health service providers, businesses that trade in personal information, contractors providing services under a Commonwealth contract, operators of residential tenancy databases, credit reporting bodies, reporting entities under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth), and businesses related to an entity the Privacy Act covers.

Trading in personal information is the exception that catches marketplaces. If your business provides a benefit, service or advantage to another entity in exchange for collecting, using or disclosing personal information, you are trading in it and the exemption is lost. A marketplace that sells customer data, or shares seller data beyond what the transaction requires, can trip this test well under the $3 million threshold. The practical answer for most founders is to plan for APP compliance from day one even if you believe you are exempt: publish a clear privacy policy, collect only what the transaction needs, secure the data, and put limits on what sellers can do with the customer information you pass to them.

The Notifiable Data Breaches (the NDB) scheme sits on top of the APPs for entities the Privacy Act covers. An eligible data breach is unauthorised access to or disclosure of personal information, or its loss, where that is likely to result in serious harm to an individual and remedial action cannot prevent that risk. If you suspect one, you must assess quickly, and if it is an eligible data breach you must notify affected individuals and the OAIC. A documented breach response plan, even a short one, is what lets you do that under time pressure instead of improvising.

Set the rules for trust, safety and competition

The marketplace that fails on trust fails on everything else, so your platform rules need to cover listing standards, review moderation, complaint handling and escalation paths. If your categories include regulated goods such as alcohol or therapeutic goods, check the listing-specific requirements before you onboard those sellers, because a marketplace that facilitates illegal listings is not shielded by its terms. The same goes for content: publish acceptable use rules and a notice-and-takedown process for infringing or unlawful content, and follow it consistently.

Competition law deserves a mention even at launch. The Competition and Consumer Act 2010 (Cth) prohibits agreements that substantially lessen competition, and clauses that lock sellers in, such as exclusivity arrangements or most-favoured-nation pricing that stops them selling cheaper elsewhere, can raise real concerns as your platform grows. The safe approach is to keep seller agreements focused on what the platform needs, disclose any paid placement or self-preferencing rather than hiding it, and get advice before you impose restrictions on how sellers can trade outside your platform.

When to bring in a lawyer, and what they will do for you

Several of the calls above are judgement calls the article cannot make for you, and they are exactly where a commercial lawyer earns their fee. A practitioner can map your actual operating model to the supplier question and tell you who carries the consumer guarantees, who issues tax invoices, and whether your payment flow makes you an EDP for GST and SERR purposes. They can draft the platform terms and seller agreement calibrated to your specific flow of funds rather than a template, review your standard form contracts against the unfair contract terms regime, build the privacy documents, and make sure your developer and designer agreements assign the IP to your company. If you are raising capital, they can also clean up the records investors will scrutinise, from shareholder agreements to vendor contracts. The point of the exercise is not paperwork for its own sake; it is that each document allocates a risk that will otherwise land on you by default.

Why the supplier question decides whether your launch holds up

If you remember one thing from this guide, make it the supplier question. Whether you are the merchant of record is the through-line that connects the refunds you give, the consumer guarantees you carry, the GST you collect on cross-border sales, the tax invoices you issue, and the seller income you report under the SERR. Most marketplace founders drift into answering it by accident, adding fulfilment or taking payment control feature by feature until they have become a supplier without ever deciding to be one. Decide it deliberately, document it, and revisit it every time you change how money moves through the platform, because each change can quietly reassign legal risk from your sellers to you.

In short: define the model, choose a structure and register, protect the brand and the code, put balanced platform contracts in place, sort out GST and ATO reporting including the EDP and SERR rules, plan for the ACL including the unfair contract terms regime, treat privacy as core infrastructure rather than an afterthought, and get advice on the judgement calls before they become liabilities.