Embeth is a Senior Lawyer at Sprintlaw. Having previously practised at a commercial litigation firm, Embeth has a deep understanding of commercial law and how to identify the legal needs of businesses.
Buying or selling an online business can be an exciting move. Whether you’re acquiring a thriving eCommerce store or exiting a digital brand you’ve grown from scratch, it’s a big decision that deserves careful planning.
Online businesses are different from bricks-and-mortar ventures. Your most valuable assets are often intangible - your domain, brand, customer data, content, code, SEO rankings and supplier relationships. That means the risks and the legal protections you need are a little different, too.
In this guide, we’ll walk through how to protect yourself on both sides of the transaction - as a buyer and as a seller - so you can move forward with confidence.
Why Online Business Sales Are Different (And What That Means For You)
When you buy or sell a physical business, much of the value sits in tangible assets such as stock, equipment and the fit‑out. Online, the value sits in intangible assets and intellectual property (IP).
That changes how you structure the deal, what you review during due diligence, and the warranties and restraints you’ll want in your contract.
Key online assets to identify and verify
- Domain names and handles: Confirm who legally owns each domain and social media handle and how they’ll be transferred on completion.
- Brand and IP: Check trade marks, logos, product images, copy, code, databases and content are owned by the seller and can be transferred without third‑party restrictions.
- Traffic and SEO: Understand the sources of traffic, current rankings and any risks (e.g. penalties from questionable backlink strategies).
- Customer data and lists: Ensure the collection and use of customer data has complied with Australian privacy law and that consents allow lawful transfer.
- Supplier and platform accounts: Confirm assignability of key contracts (payment gateways, marketplaces, SaaS, hosting, fulfilment).
- Revenue and performance: Verify financials, cohorts, churn, refunds and chargebacks, as these metrics can significantly affect value.
Because the value is so tied to these intangibles, your contract should clearly identify each item, state who owns it now, and set out how ownership will pass at completion.
Should You Buy Shares Or Assets?
There are two main ways to purchase a business in Australia: an asset sale or a share sale. Each has pros, cons and different risk profiles.
In an asset sale, you buy selected assets (like the domain, trade marks, customer lists and stock) out of the seller’s entity. In a share sale, you buy the shares in the company that already owns the business, so you inherit everything inside that entity (including liabilities and contracts).
If you’re weighing up which path suits your situation, it’s worth reading a short overview of a Share Sale vs Asset Sale so you understand the practical differences before you negotiate.
When an asset sale often makes sense
- You want to cherry‑pick assets and leave behind legacy liabilities or unwanted contracts.
- Key platform or supplier agreements can be re‑signed or assigned to you on completion.
- You prefer a cleaner structure for tax or integration reasons.
When a share sale may be better
- The business relies on licences or contracts that are hard to assign, so it’s simpler to keep them in the same entity.
- Continuity is critical (for example, marketplace seller ratings tied to a particular legal entity).
- You’ve completed thorough due diligence and are comfortable taking on the entity’s history.
Whichever route you choose, the contract should include robust warranties, indemnities and post‑completion restraints to protect the business’ value.
Step-By-Step: How To Protect Yourself When Buying An Online Business
As a buyer, your goal is to get exactly what you think you’re buying - no surprises. Here’s a practical process to reduce risk and set you up for a smooth transition.
1) Scope The Deal And Agree Heads Of Terms
Start with a brief term sheet or heads of agreement covering price, structure (asset or share sale), what’s included, timeframes, exclusivity, and any conditions (like finance or satisfactory due diligence). This early alignment helps avoid later disputes.
2) Conduct Targeted Legal Due Diligence
Due diligence for online businesses should focus on ownership, assignability and compliance. Ask for evidence of domain ownership, trade mark registrations or applications, original content ownership, contractor IP assignments, software licences, supplier contracts, platform terms, privacy practices and customer consent records.
If you need a structured process, consider a Legal Due Diligence Package so key risks are assessed methodically before you commit.
3) Lock In A Tailored Sale Agreement
Your contract is your safety net. For online businesses, it should clearly list all assets, include detailed IP assignments, set out data transfer and privacy compliance steps, and include seller warranties about traffic sources, IP ownership and the accuracy of financials.
For asset sales, buyers commonly use an Online Business Sale Agreement that is built around IP, goodwill and digital assets.
4) Confirm Security Interests Are Cleared
Before completion, run searches of the Personal Property Securities Register (PPSR) and ensure any registered security interests over the assets are released. Not sure what that is? Here’s a quick primer on what the PPSR is and why it matters to transactions.
5) Plan A Practical Handover
Agree a detailed completion checklist: domain registrar transfers, admin access to CMS, redirect settings, DNS and hosting, merchant accounts, marketplace logins, analytics, email service providers, social accounts, licencing keys and fulfilment systems.
Don’t forget operational documents like brand guidelines, shipping templates, customer service scripts, supplier contacts and inventory reports. Build these into your deliverables for completion.
6) Protect Your New Brand And Data
After settlement, protect core assets quickly. Register your name or logo as a trade mark and align your site’s compliance stack (Privacy Policy, Website Terms) with your practices and the Australian Consumer Law.
If you don’t have protection in place yet, it’s wise to register your trade mark for key brand elements, publish a compliant Privacy Policy and update your Website Terms and Conditions to reflect the way the business operates.
Selling Your Online Business? Key Protections To Include
As a seller, you want to maximise price, reduce your post‑sale risk and minimise disruption. The right preparation - and a balanced agreement - will help you achieve all three.
Prepare your business for sale
- Clean IP ownership: Make sure every contractor or freelancer has signed IP assignment terms so ownership is clear before buyers start due diligence.
- Organise your assets: Maintain a clean asset register of domains, accounts, licences, trade marks and subscriptions with transfer instructions.
- Tidy data practices: Ensure your privacy notices reflect actual data use and that records show consent and opt‑out processes have been followed.
- Stabilise supplier relationships: Check that key supply, fulfilment or platform agreements allow assignment or renewal.
Negotiate a fair contract
A well‑drafted sale agreement helps avoid endless back‑and‑forth later. Address scope (what’s included/excluded), mechanics (what happens at completion), and the promises you’re comfortable making (warranties) about traffic, IP, stock, revenue and compliance.
Expect buyers to request restraints of trade for a reasonable period and territory to protect the goodwill they’re paying for. Work with your lawyer to ensure any restraint is reasonable and doesn’t unfairly restrict your future plans.
Manage handover expectations
Spell out the post‑completion assistance you’ll provide - for example, two weeks of email support or specific introductions to key suppliers. Define clear time limits and communication channels so it’s helpful and manageable.
Release and finalisation
Confirm PPSR releases, settle any adjustments (for pre‑payments or gift cards), and document the transfer of all login credentials securely. Use a completion checklist so nothing is missed.
What Legal Documents Will You Need?
Every deal is different, but most online business transactions rely on a handful of core documents and policies. Here are the common ones and why they matter.
- Online Business Sale Agreement (Asset Sale): Identifies the digital assets being sold (IP, domain, data, accounts), sets the price and completion mechanics, and includes warranties, indemnities and restraints to protect value.
- Share Sale Agreement (Share Sale): Used when you’re buying the company that owns the business, with detailed warranties and limitations of liability to allocate risk.
- Disclosure Letter: The seller’s opportunity to disclose exceptions to warranties so both parties are clear on known issues before completion.
- IP Assignment Deeds: Assigns specific IP (trade marks, content, code, images, databases) to the buyer so title is clear and enforceable.
- Data Transfer/Privacy Compliance Plan: Confirms that transferring customer data aligns with the Privacy Act and published notices, and sets out how customers will be notified if required.
- Completion Checklist: A practical list of handover items (logins, DNS, analytics, payment gateways, marketplaces, social accounts) to ensure a smooth go‑live.
- Website Terms and Privacy Policy: Updated policies for the buyer post‑completion so the business remains compliant and customer‑friendly.
If you’re the buyer, it’s also prudent to build your post‑purchase compliance stack early - for example, a current Privacy Policy and updated Website Terms and Conditions once the business changes hands.
What Laws And Ongoing Compliance Apply?
Online businesses in Australia operate under a mix of federal and state laws. Here are the key areas to keep top of mind during and after a sale.
Australian Consumer Law (ACL)
The ACL applies to your advertising, pricing and customer rights (including guarantees and refunds). Ensure the site’s claims (for example, “lifetime warranty” or “next‑day shipping”) are accurate and operationally achievable post‑sale.
Privacy And Data Protection
If the business collects personal information (most do), it needs clear and accurate privacy notices, reasonable security measures and processes for access/opt‑out requests. Review how email lists were built and whether consents allow transfer to a new owner.
Intellectual Property
Confirm ownership of all content, images, code and branding and consider trade mark protection for the brand name or logo. Registering trade marks helps defend the brand you’re buying and reduces the risk of copycats.
Contracts And Assignments
Check whether key supplier, SaaS, marketplace and payment gateway agreements can be assigned to a buyer. If not, factor in timing to re‑sign new agreements or plan workarounds before completion.
Tax And Accounting
Plan for GST, stock valuation and adjustments (for prepaid subscriptions or gift cards). Ensure settlement statements are clear on what’s included and how adjustments are calculated.
Security Interests (PPSR)
Clear any PPSR registrations over assets being sold and obtain release documentation. Buyers should not complete until these are resolved to avoid inheriting someone else’s security interest.
Practical Tips For A Smooth Transaction
- Define “what’s included” early. A precise asset list helps avoid gaps or misunderstandings.
- Insist on evidence. For each key asset or claim (trade marks, traffic, supplier pricing), ask for documentation that proves ownership and performance.
- Balance warranties with disclosure. Sellers should disclose known exceptions; buyers should review those disclosures against what matters to value.
- Map the handover. Create a living checklist of logins, credentials, DNS steps and platform changes, and rehearse them if the site is high‑traffic.
- Set reasonable restraints. Protect goodwill without creating unenforceable restraints; reasonableness makes them more likely to stand up.
- Protect brand and policies post‑completion. Update trade mark applications and your website legal documents quickly so you’re covered from day one.
Key Takeaways
- Online business sales revolve around intangible assets - IP, brand, data and accounts - so your contract and due diligence must focus on ownership and transferability.
- Choose a structure that fits your risk profile: an asset sale lets you cherry‑pick assets, while a share sale offers continuity but comes with the entity’s history.
- Buyers should use a tailored Online Business Sale Agreement with robust warranties, IP assignments and a detailed completion checklist.
- Sellers can maximise price and minimise risk by cleaning up IP ownership, privacy practices and supplier contracts before going to market.
- Post‑completion, protect your position by registering trade marks and updating your Privacy Policy and Website Terms and Conditions to reflect how the business operates.
- Clear any PPSR registrations, verify key assets and ensure your restraints and disclosures are balanced and enforceable.
If you’d like a consultation on buying or selling an online business in Australia, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no‑obligations chat.








