GST & Legal Compliance for Online Stores in India: What Every Shopify & Wix Seller Needs in 2026

Any online store selling to Indian customers needs GST registration once turnover crosses ₹20 lakh (₹10 lakh in special category states), or immediately if selling through a marketplace aggregator — and GST is just the starting point. Beyond that, sellers must display accurate business details, publish a clear returns and refund policy, and handle customer data in line with the DPDP Act. Miss any one of these and you risk penalties, payment-gateway holds, or a delisting notice from the platform you sell on.

This is the compliance checklist we walk every Shopify and Wix Studio e-commerce client through before launch, covering what actually gets checked — by payment gateways, by platforms, and occasionally by regulators — rather than a generic list of "best practices."

1. GST Registration and GSTIN Display

Register for GST once you cross the turnover threshold for your state, and display your GSTIN clearly on your website, typically in the footer or on an "About Us" / legal page. Most Indian payment gateways now ask for a GSTIN during onboarding, so this isn't optional if you want to accept UPI and card payments at scale.

2. GST-Compliant Invoicing on Every Order

Every order needs a proper tax invoice showing GSTIN, HSN codes for the products sold, and the correct CGST/SGST or IGST split depending on whether the sale is intra-state or inter-state. Both Shopify and Wix Studio support apps and integrations that generate compliant invoices automatically — manual invoicing is where most small sellers fall behind as order volume grows.

3. A Clear Returns and Refund Policy Page

India's Consumer Protection (E-Commerce) Rules require sellers to clearly state their returns, refunds, exchange, and cancellation terms. This can't just exist as a buried PDF — it needs its own page, linked from checkout and from the footer, written in plain language a buyer can actually understand before they pay.

4. Shipping Policy and Realistic Delivery Timelines

Pair the returns policy with a shipping policy that states delivery timelines, shipping charges, and what happens if a package is delayed or lost. Vague or missing shipping information is one of the most common reasons Indian shoppers abandon checkout.

5. Accurate Business Identity on Every Page

Your registered business name, address, and a working contact method (phone or WhatsApp, not just an email form) need to be easy to find — not hidden three clicks deep. This is required under e-commerce consumer protection rules, and it's also exactly the kind of verifiable detail that builds the trust a first-time buyer needs before entering card details.

6. Country of Origin Labeling for Products

Product listings need to state the country of origin. This became a standard requirement across Indian online marketplaces and applies to independent Shopify and Wix stores too if you're selling physical goods — add it to your product template rather than handling it product-by-product.

7. DPDP Act Compliance for Customer Data

Any data you collect at checkout — name, address, phone number, payment details — falls under India's Digital Personal Data Protection Act. You need a privacy policy that explains what you collect, why, and how long you keep it, plus a process for a customer to request their data be deleted. This isn't a copy-pasted template from a US store; it needs to actually reflect what your checkout and CRM collect.

8. Payment Gateway KYC Alignment

Razorpay, Cashfree, PayU, and similar Indian gateways require business KYC — PAN, GST (where applicable), bank account verification, and a registered business address that matches your website's displayed details. Mismatches between what your site says and what you submitted to the gateway are a common reason accounts get flagged for review mid-launch.

9. Record-Keeping for Orders and Tax Filings

Keep digital records of invoices, GST filings, and order data for the retention period your tax advisor recommends. Most e-commerce platforms store this automatically, but it's worth confirming your specific setup actually exports clean, GST-filing-ready reports rather than assuming it does.

Frequently Asked Questions

Do I need GST registration to sell on my own Shopify or Wix store if I'm below the threshold?

Not necessarily, but most Indian payment gateways will ask for GST details regardless once your volume grows, and operating without it long-term limits which gateways and later which marketplaces you can expand to.

Is a generic returns policy template enough?

No. It needs to reflect your actual return window, who pays return shipping, and your exchange process. A policy that promises terms your business doesn't actually follow is worse than no policy at all, because it hands an unhappy customer a dispute you can't win.

Does the DPDP Act apply to a small single-owner online store, or only large e-commerce companies?

It applies regardless of size. Any business collecting Indian customers' personal data needs a compliant privacy policy and a lawful basis for processing that data.

What's the fastest way to get all of this in place without redoing the whole site?

Most of this is footer links, one or two legal pages, and invoice-template configuration — it's a focused project, not a rebuild, and can usually be added to an existing Shopify or Wix Studio store in a single engagement.

Getting GST, returns, and data-privacy pages right is part of what we set up on every e-commerce build; see our digital marketing and e-commerce services for how we approach it, or get in touch if you need your existing Shopify or Wix store brought up to date before your next sales push.