Starting a marketplace website in Australia and the legal checklist before launch

Your marketplace idea is probably a familiar pitch: connect independent sellers with buyers, take a commission, and never touch the inventory. It is a genuinely scalable model, and it is also where the phrase "we're just the platform" stops being a complete legal answer. Australian consumer law, privacy rules and GST obligations all have specific things to say about the operator who sits between a seller and a buyer, and some of them will surprise you.

What a marketplace actually is, and where "we're just the platform" stops working

A marketplace website is an online platform that facilitates transactions between independent sellers or service providers and customers. You set the rules, provide the technology, and earn revenue by enabling trade. The usual categories are product marketplaces (handmade goods, niche electronics, vintage clothing), service marketplaces (trades, cleaners, tutors), B2B marketplaces (wholesale suppliers) and hybrids that combine products, services or online and offline fulfilment. In most transactions you are not the seller of record, which is what makes the model attractive. But two areas of Australian law treat you as more than a venue, and both are worth understanding before you design your platform.

The first is the Australian Consumer Law (ACL), which sits in Schedule 2 of the Competition and Consumer Act 2010 (Cth). Section 18 of the ACL provides that a person must not, in trade or commerce, engage in conduct that is misleading or deceptive or is likely to mislead or deceive. The High Court's decision in Google Inc v Australian Competition and Consumer Commission [2013] HCA 1 confirms that a platform which merely displays another trader's advertisement does not itself make the representation carried by that advertisement. But the same case draws the line that matters: once an intermediary endorses or adopts a representation, it can be liable for it. Applied to a marketplace, that means your own marketing, your promoted listings, your "verified" badges and your curated collections can turn a vendor's claim into yours.

The second is GST. Since the 2018 reforms, a marketplace operator that qualifies as an electronic distribution platform (EDP) is responsible for collecting and remitting GST on low-value imported goods with a customs value of A$1,000 or less, and on imported services and digital products, supplied through the platform. For those supplies the ATO treats you as the seller, even though the underlying seller is overseas. If your marketplace will carry imported goods or digital products, this affects how checkout and invoicing are built from day one.

Decide the model before you draft a contract

Before any drafting, make three decisions, because each one changes what your contracts need to regulate:

Revenue model: commission per transaction, listing fees, subscription tiers, featured placement, or a mix. Your terms need to say when a commission is earned, what happens to fees when a sale is refunded, and how fees can change.
Who is the supplier: for each category, decide whether the seller of record is the vendor or the platform. This determines who carries the consumer guarantee obligations, who issues the invoice, and who the customer can pursue for a refund.
Trust and safety: decide what verification, listing rules, dispute processes and takedown powers you will enforce. Whatever you promise here becomes a contractual obligation, so only commit to what you can actually deliver.

It is also worth testing demand before building: customer interviews, a simple landing page and a defined niche let you control quality on both sides of the marketplace and keep your early legal exposure contained to one category of transactions.

Do you need a company to run a marketplace?

No, you can trade as a sole trader, and many marketplaces start that way. But the choice matters more for a marketplace than for a low-risk services business, because the platform itself carries the risk of chargeback disputes, data breaches and claims over listings:

Sole trader: cheapest and simplest, but you are personally liable for the business's debts and claims. A chargeback fight, a privacy breach or an ACL action is pursued against you personally.
Partnership: the same personal exposure, shared across partners who are jointly liable. A written partnership agreement covering contributions, profit sharing and exit is essential.
Company: a separate legal entity whose shareholders enjoy limited liability. If the marketplace is sued, the company's assets are the primary target rather than your personal assets. A company also looks more credible to payment providers, vendors and investors, and gives you a clean vehicle for equity and future funding.

The practical registration steps apply to whichever structure you choose: an ABN through the Australian Business Register, registration of a business name with ASIC if you trade under a name other than your own, a business bank account, and accounting software. If you have co-founders, agree early on roles, equity, decision-making and vesting, and record it in a shareholders' agreement or co-founder agreement before it becomes a dispute.

Where the Australian Consumer Law will reach you

The ACL is the biggest single body of law a marketplace operator needs to plan around, and it reaches further than the vendor's own conduct.

Misleading or deceptive conduct

Section 18 applies to your own conduct in trade or commerce: your advertising, your pricing, your descriptions of how the platform works, and the claims you make through verification and curation. It is enforced through injunctions, damages and compensation orders rather than pecuniary penalties, but the same conduct will often also breach the false or misleading representation provisions in Part 3-1 of the ACL, which do carry penalties. Under section 224, a body corporate that contravenes those provisions faces a maximum penalty of the greater of A$100 million, three times the benefit obtained from the contravention, or 30% of adjusted turnover. For an individual the maximum is A$2.5 million. Those figures are why moderation and listing rules are a compliance function, not a customer service function.

Consumer guarantees

Where goods or services are supplied to a consumer, guarantees of acceptable quality, fitness for purpose and correspondence with description apply under Part 3-2 Division 1 of the ACL, and they cannot be excluded by contract. A "consumer" under section 3 is someone who acquires goods priced at A$100,000 or less, or goods of a kind ordinarily acquired for personal, domestic or household use, or a vehicle or trailer used principally to transport goods on public roads. Purchases for re-supply or for transformation in trade or commerce do not count. If you are the supplier in a transaction, your refund and complaints process has to line up with the guarantees; if the vendor is the supplier, your platform rules still need to make the guarantees work in practice, because the customer's first port of call is usually the platform.

Unfair contract terms

Since the 2022 amendments, section 23 of the ACL not only makes an unfair term in a standard form consumer or small business contract void, it makes proposing or relying on such a term a contravention with the same penalty exposure described above. Your platform terms and your vendor agreements are standard form contracts. Unilateral fee variation clauses, one-sided indemnities, unlimited discretion and blanket liability caps are the clauses that regulators and counterparties scrutinise first.

Product safety

Part 3-3 of the ACL sets out safety standards, bans and mandatory reporting for certain consumer goods. If your marketplace carries electronics, toys, cosmetics or other regulated product categories, you need to know which safety standards apply to listings and who in your supply chain bears the reporting obligations.

Privacy, GST and the rest of the compliance map

Privacy: the $3 million question

The Privacy Act 1988 (Cth) (the Act) applies to businesses with an annual turnover above A$3 million. Under section 6D, a business is a small business if its annual turnover for the previous financial year was A$3 million or less, and small businesses are generally exempt from the Australian Privacy Principles (APPs). Two qualifications matter for marketplaces. First, the exemption has exceptions, including businesses that trade in personal information or provide health services, so do not assume it applies without checking. Second, even if the Act does not apply to you, your payment processor and other service providers will usually contractually require you to handle personal information consistently with the APPs.

If the Act applies, the obligations that bite hardest for a marketplace are these. APP 1 requires a clearly expressed and up-to-date privacy policy. APP 5 requires notification at the point of collection, which your signup and checkout flows must build in. APP 8 limits cross-border disclosure, and your vendors, hosting, analytics and support tools all count. APP 11 requires reasonable security. On top of the APPs, Part IIIC of the Act sets up the notifiable data breaches scheme: if there are reasonable grounds to believe an eligible data breach has occurred, you must notify affected individuals and the Office of the Australian Information Commissioner as soon as practicable. Marketplaces hold driver licences, bank details and addresses from both sides of the transaction, which makes them an attractive target and makes incident response planning part of the launch, not an afterthought.

GST: when the platform becomes the seller

Beyond the EDP rules for low-value imported goods, digital products and imported services, the general GST registration threshold applies to you like any other business: registration is compulsory once your GST turnover reaches A$75,000. Decide early whether your platform is an EDP for any of its categories and build GST collection into checkout, because retrofitting tax into a payments flow is far more expensive than designing it in.

Payments, content, employment and sector rules

Four further compliance areas need decisions before launch:

Payments: use a reputable payment service provider with anti-fraud tools. Your vendor terms should state who is the merchant of record, when funds are released to sellers, how chargebacks and disputes are handled, and what reserves or holdbacks you can apply.
Content and intellectual property: your platform terms should prohibit infringing or unlawful content, give you takedown and suspension powers, and let you remove users who breach the rules. Registering trade marks for your name and logo helps you stop copycat platforms and lookalike apps.
Employment and contractors: if you hire staff, the Fair Work obligations for employers apply, including awards and minimum rates. Contractors such as developers and content moderators need agreements that clearly assign intellectual property to you.
Sector-specific rules: some categories trigger extra regulation, including alcohol, medical and financial services. If your marketplace touches a regulated industry, check the licensing and advertising rules before onboarding vendors in that category.

The documents to have in place before launch

The right document set establishes expectations, manages risk and gives you the enforcement levers your moderation and dispute processes depend on. Most marketplace operators need most of the following, tailored to their actual model rather than copied from a template:

Platform terms and conditions: the core rules for buyers and sellers, covering onboarding, fees, listings, prohibited conduct, fulfilment, refunds, disputes, takedowns, intellectual property, liability and termination. These are distinct from a simple online store's terms.
Vendor onboarding agreement: eligibility, listing standards, fee structure, authenticity and safety obligations, chargeback handling, insurance and termination. This can be embedded in the platform terms or sit separately for higher-risk categories.
Privacy policy: reflects your actual data flows across signup, payments, analytics, support and marketing, including any cross-border transfers. Required by APP 1 where the Act applies to you.
Website terms of use: acceptable use, account security, intellectual property ownership and disclaimers, sitting alongside the platform-specific terms.
Data processing agreement: governs how service providers such as hosting, analytics, email and support handle personal data on your behalf.
Content policy and takedown procedure: explains what content is prohibited, how users report it, and how removal and suspension work.
Refunds, complaints and escalation policy: a clear pathway for customers to seek remedies and for vendors to respond, aligned with the consumer guarantees.
Warranty against defects: if sellers provide their own written warranties, the document must meet the prescribed requirements for a warranty against defects under section 102 of the ACL. A warranty against defects is a representation, made at or around the time of supply, that a person will repair or replace the goods.
Supplier and contractor agreements: for technology vendors and contractors, covering intellectual property, confidentiality, service levels and termination.
Employment contracts and key policies: for staff, together with privacy and information security policies covering customer data handling.

The risks that sink marketplaces, and how to design around them

Misleading listings and unsafe products

Vendors make inaccurate claims or list unsafe goods, exposing the platform to ACL issues and reputational damage. Enforce clear listing rules, pre-approve high-risk categories, spot-check listings, and keep a fast takedown process with an easy-to-find refund and complaints pathway.

Chargebacks and payment disputes

High chargeback rates bring payment provider scrutiny, rolling reserves and, at the extreme, account termination. Robust seller verification, proof-of-delivery requirements, automated fraud checks and transparent payout schedules with holdbacks for new or high-risk sellers all reduce the rate.

Data and security incidents

A breach of the personal information you hold from both sides of the marketplace can trigger notifiable data breach obligations and destroy trust. Least-privilege access, secure coding practices, regular audits, incident response planning and due diligence over any tool that touches personal data are the baseline.

Intellectual property infringement and counterfeits

Vendors upload infringing content or counterfeit goods. Strong intellectual property and authenticity clauses in the vendor terms, proactive monitoring of flagged categories, and swift takedown and suspension procedures keep this manageable.

Buy an existing marketplace or use white-label software?

Acquiring a marketplace or licensing white-label software can accelerate the launch, but both routes need homework:

Buying an existing marketplace: review traffic quality, conversion and chargeback data, vendor churn and dispute history. Check that the contracts and policies are assignable and compliant, confirm ownership of the intellectual property, code, content and domain names, and review third-party licences and integrations before you sign.
White-label software: check the licence scope, uptime and support service levels, data location and portability, security certifications, and whether you can customise the legal flows such as acceptance of platform terms, privacy consents and refund processes.

Whichever route you take, the legal documents have to reflect how your platform actually operates, not how the software vendor's template was written.

Where a marketplace lawyer earns their fee

A lawyer's role in a marketplace launch is to make the judgement calls that an article cannot. The structure decision between a company, a partnership and a sole trader structure, the analysis of which laws apply to your particular categories, and the drafting of the document set are all tasks that reward early professional input. A lawyer can also stress-test your standard form terms against the unfair contract terms provisions before a regulator or a counterparty does, advise on whether a "verified" badge or a promoted listing makes a vendor's claim yours, and set up the incident response framework that a data breach will demand. If you are buying a marketplace or negotiating with a white-label vendor, a lawyer runs the due diligence on the contracts, the intellectual property and the assignability of the policies. Artificer Legal advises founders on marketplace structure, documentation and compliance as part of the launch process.

The line between venue and seller

The distinction that decides most of your legal exposure is whether a particular transaction or representation is yours. Google v ACCC protects the platform that merely passes on a vendor's claim, but that protection ends the moment you adopt, endorse or profit from shaping the claim, and it never applied to GST, where the EDP rules make you the seller for low-value imported goods and imported digital services. Design your badges, promotion, moderation and checkout with that line in mind, and document where you have drawn it.

The practical sequence is this: choose your structure and revenue model, decide who the supplier is for each category, map the laws that apply to your niche, put the platform terms, vendor agreement, privacy policy and dispute processes in place before launch, and monitor chargebacks, content and product safety as you scale. Getting the platform's own conduct right, and knowing where the law treats you as the seller, is what separates a marketplace that grows on its contracts from one that discovers them in a dispute.