1. You are the seller — and that matters more than you think
  2. What Australian Consumer Law requires of your store
    1. The supplier caused the problem — does that change anything?
  3. When your advertising crosses into misleading conduct
  4. Product safety: compliance is not optional for online sellers
  5. Intellectual property: the risks of selling what you did not create
  6. Privacy: when the Privacy Act applies to your store
  7. GST and tax: the dropshipping-specific complication
  8. Legal documents your business should have in place
    1. Ecommerce terms and conditions
    2. Privacy policy
    3. Supplier agreement
    4. Disclaimers
  9. How Artificer Legal can help your dropshipping business
  10. The one thing most dropshippers get wrong

You have found a supplier, built a store, and you are about to start running ads. Before you do, one question keeps surfacing: is dropshipping legal in Australia?

The short answer is yes — dropshipping is a lawful business model. What trips people up is not the model itself but the obligations that come with being the seller. When a customer buys from your store, the fact that someone else packed and shipped the order does not shift your legal responsibility. Australian law puts you — the retailer — at the front of the queue for complaints, refunds, and regulatory scrutiny. Understanding exactly where that responsibility sits, and how to structure your business around it, is what separates a compliant dropshipping operation from one that is quietly accumulating risk.

You are the seller — and that matters more than you think

Dropshipping is a fulfilment arrangement: you take orders through your online store, a third-party supplier ships the goods directly to your customer, and you keep the margin. From a commercial perspective, it is efficient. From a legal perspective, the arrangement does not change who made the sale.

Under the Australian Consumer Law (ACL) — which is Schedule 2 of the Competition and Consumer Act 2010 (Cth) — the business that supplies goods to a consumer bears primary responsibility for those goods meeting the consumer guarantees. Your supplier's name appears nowhere on your customer's order confirmation. Yours does. That is the relationship the ACL recognises.

This means that when a product arrives broken, is not as described, or is never delivered, your customer is entitled to come to you — not the overseas warehouse — for a remedy. The ACCC is explicit that businesses must not direct customers to the manufacturer or supplier to resolve a problem. You deal with it, and then you sort out your supplier separately.

The practical implication: every decision you make about which products to list, how you describe them, and what delivery promises you put on your product pages creates a legal exposure — regardless of whether you ever touch the stock.

What Australian Consumer Law requires of your store

The ACL's consumer guarantees apply automatically to goods sold to Australian consumers. They cannot be excluded by a store policy, a "no refunds" notice, or a term buried in your checkout. The guarantees most relevant to a dropshipping business are that goods must:

  • be of acceptable quality (safe, durable, free from defects, fit for their ordinary purpose, and acceptable in appearance and finish)
  • match any description you applied to them in your listing or advertising
  • be fit for any particular purpose you represented them as being fit for
  • be delivered within the time you stated, or within a reasonable time if no time was stated

When a product fails to meet one of these guarantees, the remedy the customer is entitled to depends on how serious the failure is. For a major failure — where a reasonable consumer would not have bought the product had they known about the problem, or the goods cannot be easily remedied — the customer can choose a refund or a replacement. For a minor failure, you are entitled to choose to repair, replace, or refund. What you cannot do is refuse any remedy at all.

The supplier caused the problem — does that change anything?

No. Your customer's rights run against you as the retailer. You must provide the remedy and then pursue the supplier for compensation under your supplier agreement. This is one of the clearest reasons a written supplier contract matters: without one, recovering the cost of customer refunds from a supplier who shipped defective goods is largely a matter of goodwill.

A "no refunds" policy on your website is not just ineffective — it can attract ACCC enforcement action if customers are being refused legitimate remedies. Store terms must never represent that you have no refund obligations where the ACL guarantees apply.

When your advertising crosses into misleading conduct

Dropshipping stores tend to be marketing-led, and that creates a specific risk under s 18 of the ACL, which prohibits conduct in trade or commerce that is misleading or deceptive or is likely to mislead or deceive. The prohibition applies to statements, images, omissions, and the overall impression a listing creates — not just to technically false claims.

The categories of advertising conduct that most commonly create problems for dropshipping businesses include:

  • Shipping claims: stating or implying "fast shipping", "ships from Australia", or "next-day delivery" when goods are dispatched from an overseas warehouse and typically take two to six weeks to arrive
  • Stock and availability claims: advertising items as "in stock" when you have no confirmed inventory with the supplier
  • Product capability claims: asserting that a product achieves a specific result (particularly for health, fitness, or beauty products) without evidence capable of supporting that claim
  • Image accuracy: using manufacturer photos that show a product significantly different from what actually arrives, or editing photos to change apparent colour, size, or quality
  • "Australian business" branding: presenting your store in a way that implies Australian origin of goods when the product is manufactured and shipped from overseas

The test is not whether you intended to mislead — it is whether the conduct is objectively likely to mislead a reasonable member of your target audience. Before scaling your ad spend, review every product page and ad creative with that question in mind.

Product safety: compliance is not optional for online sellers

Australia has 42 mandatory safety standards covering a range of product categories. Goods sold in Australia — including goods sold online from overseas suppliers — must comply with these standards. The fact that an item is popular on an overseas marketplace is not evidence that it meets Australian requirements.

Categories where mandatory standards are most commonly encountered include:

  • children's products (toys, cots, prams, baby products)
  • electrical goods and chargers
  • personal protective equipment
  • cosmetics and therapeutic goods
  • lithium-ion battery products

If a product does not comply with a mandatory standard or is subject to a product ban, you as the retailer may be required to recall it and notify the relevant government minister within two days of becoming aware of the safety issue.

The practical steps to manage this risk — even if you never physically handle the stock — are:

  1. Order samples before listing a product and examine them against the relevant standard
  2. Request compliance documentation from your supplier: test reports, certificates of conformity, or declarations of compliance
  3. Monitor complaints actively: a spike in reports about a particular product is a signal to pause listings and investigate
  4. Delist quickly if you cannot verify compliance, rather than waiting for a formal inquiry

Taking these steps does not guarantee immunity, but it demonstrates reasonable diligence if a safety question is ever raised.

Intellectual property: the risks of selling what you did not create

Intellectual property problems are among the fastest-moving risks in dropshipping, because they can arrive without any intent on your part. The most common scenarios are:

Counterfeit and lookalike goods. A supplier may not disclose — or may not themselves know — that a product replicates a registered trade mark or protected design. Selling counterfeit goods is a serious breach of the Trade Marks Act 1995 (Cth) and can expose your business to injunctions and damages claims, even if your role was entirely as a retailer.

Using brand names in advertising. Describing a product as "compatible with [Brand]" or "similar to [Brand]" can infringe a registered trade mark, or constitute misleading conduct if the impression created is one of endorsement or affiliation.

Supplier-provided images. When a supplier provides product photographs, they may not hold copyright in those images. If the original photographer or brand asserts their rights, your store is the entity that published the content and is the target of any claim.

Your own brand. If your store is gaining traction, your brand name and logo are increasingly valuable and increasingly imitable. Registering your trade mark with IP Australia gives you a registered right to stop others using your brand in relation to the same goods or services. Registration costs from $250 per class and typically takes a minimum of seven months from filing to registration — which means the time to act is before your brand becomes worth copying, not after.

Before listing any product, run basic checks: search the ATMOSS trade mark database to confirm the product name you are using is not a registered mark owned by someone else, and verify that any images you use are ones your supplier has rights to provide.

Privacy: when the Privacy Act applies to your store

Dropshipping involves collecting personal information at every sale — names, delivery addresses, phone numbers, and often payment details. You typically share some of this information with your supplier to fulfil the order. That flow of personal information is what brings the Privacy Act 1988 (Cth) into the picture.

Whether the Privacy Act applies to your business depends on your circumstances. The OAIC notes that most small businesses with an annual turnover of $3 million or less are not automatically covered by the Privacy Act. However, the exemption is narrower than it appears. Businesses that are health service providers, that trade in personal information for benefit or advantage, or that hold certain types of accreditation are covered regardless of turnover. And the exemption can be lost if you opt in to Privacy Act coverage voluntarily.

Even if the Privacy Act does not technically apply to your business right now, there are strong practical reasons to operate as though it does:

  • Payment platforms and app stores commonly require a compliant privacy policy as a condition of use
  • Customers increasingly expect to understand how their data is used, particularly with the growth of retargeting and email marketing
  • If your turnover grows above $3 million, Privacy Act obligations apply from that point forward and you want systems already in place
  • If you sell internationally — including to customers in the European Union — the laws of those jurisdictions may impose their own obligations regardless of your Australian law position

At minimum, your store should have a privacy policy that accurately describes what personal information you collect, how it is used, who it is shared with (including suppliers and logistics partners), and how customers can access or correct their information.

GST and tax: the dropshipping-specific complication

The GST position for a dropshipping business is more nuanced than for a conventional retailer, and it is worth understanding before you start pricing your products.

The ATO requires businesses to register for GST once their GST turnover reaches $75,000 (or $150,000 for non-profit organisations). Once registered, you must charge and remit GST on your sales.

The complication specific to dropshipping arises with low value imported goods — physical goods with a customs value of $1,000 or less that are sent directly from an overseas supplier to your Australian customer. The ATO's rules for these goods make clear that if you are an Australian GST-registered supplier who drop ships goods from an overseas location, you are required to account for GST on your sale. This applies even though you never imported the goods yourself. How your pricing and invoicing should be structured to reflect this correctly is something worth confirming with an accountant before you launch, because getting it wrong affects every transaction.

Separately, you will need to consider income tax on profits, and potentially fringe benefits tax or payroll tax obligations if you take on staff. The structure you trade through — sole trader, partnership, or company — affects how these obligations interact with each other and with your personal financial position.

Legal documents for a dropshipping business are not a formality — they are the infrastructure that determines what happens when something goes wrong. The key documents to have in place before you go live are:

Ecommerce terms and conditions

Your store terms should address:

  • the scope of orders and when a binding contract is formed
  • delivery timeframes and what happens when a delivery is delayed or lost
  • the returns and refund process, expressed consistently with your ACL obligations
  • how chargebacks and disputes are handled
  • any limitations on liability that are lawful under the ACL

Terms that attempt to limit or exclude ACL consumer guarantees in relation to goods purchased by consumers are not enforceable, but that does not mean terms are worthless — they can still govern matters the ACL does not prescribe, such as order cancellation, dispute resolution processes, and your obligations in relation to digital products or subscriptions.

Privacy policy

As discussed above, a privacy policy should accurately describe your data practices. It is the document your customers will look at when something goes wrong with their data, and it is what your platform and payment provider will ask to see before approving your store.

Supplier agreement

Most dropshipping businesses operate on informal supplier relationships — a platform listing, a messaging thread, and a handshake on price. When a supplier disappears, changes terms unilaterally, ships counterfeit goods, or fails to deliver for weeks, the business that faces the customer is yours.

A written supply agreement should set out:

  • fulfilment timeframes and what happens when they are missed
  • product quality standards and any compliance certifications the supplier must maintain
  • who bears the cost of returns, replacements, and defective goods
  • intellectual property warranties — a representation from the supplier that the goods and any images provided do not infringe third-party rights
  • what happens on termination, including access to stock data and transition obligations

This document is often the most overlooked in a dropshipping setup, and the most consequential when something goes wrong.

Disclaimers

For products where outcomes vary — fitness products, nutritional supplements, productivity tools — a carefully drafted disclaimer can support your advertising claims and reduce misunderstandings about what the product does. What a disclaimer cannot do is override the ACL consumer guarantees or make a misleading claim lawful. Draft them as clarifications, not shields.

There is a category of decisions this article cannot make for you: whether your particular product range triggers specific mandatory standards, how your supplier agreement should be structured given the commercial terms you are actually operating on, whether your current advertising copy contains representations that would concern the ACCC, and what legal structure best balances your liability exposure against your tax position.

These are the judgement calls that a legal practitioner works through with you on the facts of your specific business. At Artificer Legal, we work with Australian ecommerce and dropshipping businesses on:

  • drafting or reviewing ecommerce terms and conditions and privacy policies suited to your store's specific product categories and customer base
  • preparing supplier agreements that allocate liability, set quality standards, and give you a path to recover costs when a supplier causes a customer problem
  • advising on ACL compliance for advertising claims, particularly for health, fitness, beauty, and electronic product categories
  • trade mark registration and IP due diligence before you build a brand around a product or product name
  • structuring advice for businesses considering moving from sole trader to company structure as they scale

If you are about to launch, or if you are already operating and want to confirm your current setup is sound, the right time to have that conversation is before a complaint, a chargeback dispute, or a regulator inquiry forces it.

The one thing most dropshippers get wrong

The most common mistake is treating legal compliance as something to address once the business is profitable. The ACL does not wait for profitability — your consumer guarantee obligations apply from the first sale, your advertising obligations apply from the first ad, and your product safety obligations apply from the first listing. Building compliance into your launch, rather than retrofitting it later, costs significantly less and exposes you to significantly less risk.

To summarise the key points covered in this article:

  • Dropshipping is legal in Australia, but the model does not reduce your legal responsibilities as the seller — in some ways, it increases the areas of exposure because you have less direct control over fulfilment and product quality
  • The ACL's consumer guarantees require you to provide remedies directly to customers for faulty, misdescribed, or undelivered goods, regardless of supplier fault
  • Section 18 of the ACL prohibits misleading or deceptive conduct — including claims about shipping speed, stock origin, and product capabilities that are not supported by your actual supply chain
  • Australia has 42 mandatory product safety standards; compliance obligations apply to online sellers including those selling goods shipped from overseas
  • Intellectual property risks include unknowingly selling counterfeit goods and using supplier-provided images without confirmed rights
  • The Privacy Act's small business exemption (for turnover under $3 million) is narrower than it appears and may not apply to your business; practical privacy compliance is expected by platforms and customers regardless
  • GST on low value imported goods creates a specific obligation for Australian GST-registered dropshippers to account for GST on overseas-shipped sales
  • A written supplier agreement is the most commonly overlooked and most consequential document in a dropshipping setup