Why every South African website needs proper terms and conditions. Covers ECTA disclosure obligations, CPA cooling-off rights, POPIA privacy notices, and the clauses that protect SA online businesses from liability.
Running a website in South Africa that sells goods, provides services, or collects information from users triggers obligations under at least three pieces of legislation: the Electronic Communications and Transactions Act 25 of 2002 (ECTA), the Consumer Protection Act 68 of 2008 (CPA), and the Protection of Personal Information Act 4 of 2013 (POPIA). A comprehensive terms and conditions document — combined with a separate privacy notice — is how you satisfy these obligations and protect your business.
Most free website T&C templates are drafted for US or EU audiences. They reference US state law, GDPR Article numbers, or US consumer protection frameworks that do not apply in South Africa. SA-specific legislation creates different obligations, and using a foreign template leaves you exposed to the parts of SA law that the template does not address.
The Electronic Communications and Transactions Act requires any website that offers goods or services electronically to consumers to disclose certain information before or at the time of concluding a transaction. Section 43 requires disclosure of:
Failure to provide these disclosures gives the consumer the right to cancel the transaction within 14 days under ECTA.
The Consumer Protection Act applies to every supplier who offers goods or services to consumers in South Africa in the ordinary course of business. Key CPA rights that your T&Cs must acknowledge (because you cannot contract them away):
Consumers have the right to cancel a distance transaction (including online purchases) within five business days of receiving the goods without penalty, other than the cost of returning the goods. Your T&Cs must not contradict this right.
For fixed-term service contracts, the CPA gives consumers 20 business days to cancel a direct marketing arrangement.
Suppliers warrant that goods are safe, of good quality, free from defects, and fit for the purpose for which they are generally intended. You cannot disclaim this warranty for consumer transactions.
All consumer-facing documents must be in plain language that the average consumer can reasonably understand. Dense legalese in your T&Cs may be unenforceable.
The CPA prohibits certain contract terms as unfair or unconscionable. These include terms that:
POPIA requires that you notify data subjects (your users, customers, subscribers) when you collect their personal information. This notification must include:
This notification is typically delivered through a Privacy Policy (separate from the T&Cs) and a cookie consent notice. However, the T&Cs should reference the Privacy Policy and confirm that users accept both.
State how users accept the T&Cs (browsing, creating an account, making a purchase) and when the current version took effect. Users must be able to print or save the T&Cs.
While you cannot disclaim the CPA's implied warranties for consumer transactions, you can limit liability for:
Assert your rights over website content, trademarks, and software. Prohibit unauthorised copying, scraping, or redistribution.
Specify that South African law governs the agreement and that disputes will be resolved in South African courts (typically the Magistrate's Court or High Court depending on the value).
Consider including a mediation or arbitration clause before litigation. The Consumer Goods and Services Ombud handles CPA complaints at no cost, and your T&Cs should acknowledge the consumer's right to access the Ombud.
Describe how you will notify users of material changes. Under POPIA, changes to data processing practices require updated consent.
For a South African website, ensure you have:
Last reviewed: 2026-03-03. This article is informational only - verify requirements with official sources before acting.
ElyForma articles are written for informational use and practical guidance. They do not replace advice from a qualified legal professional for your specific case.
Expert in SA internet law, ECTA compliance, POPIA, and CPA digital obligations.