When to build your commerce reviews foundations as a retailer: rules, data, costs and a 2027 checklist

What to take away

Why the foundation date matters

Commerce reviews sit where consumer law, data protection and platform policy meet. In England all three apply at once. A review section can look fine and still breach rules if it hides negative feedback, buys reviews or stores reviewer data without a lawful basis.

The enforcement route changed. The Digital Markets, Competition and Consumers Act 2024 gave the Competition and Markets Authority stronger powers over unfair commercial practices, including fake and misleading reviews. The CMA can now decide cases itself rather than go to court for every breach.

That shift affects small sellers and large marketplaces. If a business invites reviews, it owns how they are collected and shown.

Build decision and 2027 timeline

Build now when two or more triggers apply. The triggers are a planned marketplace integration, 50 or more orders a month, an average order value of £50 or more, or a platform rule change. New CMA or ICO guidance on review data or incentives also counts.

Trigger test for when to build

Use this dated test each quarter.

If one trigger applies, document the decision and review again in six months. If none apply, keep a light collection process and revisit in January 2028.

What counts as a commerce review

A commerce review is feedback about a product or seller, published where other buyers can see it. It can be a star rating, written account, photo or video. The common thread is that it helps someone decide whether to buy, so the law treats it as commercial communication.

This reaches further than many sellers assume. A creator video praising a product counts if the seller controls or rewards it. A forum thread quoted on a product page counts once you republish it.

Marketplaces add their own layer. Amazon, eBay, Etsy and Trustpilot each publish rules on who may review, when reviews can be removed and how incentives must be disclosed. Those rules sit on top of the legal position, not instead of it.

The rules that apply in England

The Consumer Protection from Unfair Trading Regulations 2008 banned misleading actions and omissions. Fake reviews, suppressed negative reviews and undisclosed incentives all fell foul of those rules where they misled the average consumer.

The Digital Markets, Competition and Consumers Act 2024 updated the framework and gave the CMA a direct enforcement route. Its consumer protection provisions commenced on 6 April 2025. The CMA's Online reviews and endorsements: advice for businesses, published in 2015, covers incentives and checks that reviews come from real customers.

The Information Commissioner's Office governs the data side. Its guidance covers names, email addresses, device identifiers and anything else that identifies a reviewer. Review platforms need a lawful basis for holding reviewer records.

The ICO's Guide to the UK GDPR sets out that requirement, and the UK GDPR has applied in the UK since 1 January 2021. The ICO's explanation of personal information under UK GDPR is the starting point for mapping what your review system stores.

Scotland, Wales and Northern Ireland share most of this framework, but enforcement priorities and trading standards capacity differ. For an England plan, assume the CMA and local trading standards are the relevant enforcers.

Demand, market scope and sizing

Review demand follows retail demand. The ONS publishes monthly retail industry statistics covering sales volumes and the online share of retail spending. Use those releases when you size your own category.

ONS retail sales data show the online share of retail spending peaked at about 36% in early 2021 and has since settled in a typical monthly range of about 26% to 28%.

Shoppers read reviews where the purchase feels risky: higher prices, unfamiliar brands, products where fit or quality varies. Low-risk repeat purchases need fewer reviews to convert.

If you want underlying patterns rather than headline numbers, our breakdown of commerce reviews demand signals in England looks at where shoppers actually read reviews before buying.

Four groups operate here. Review platforms sell software and sometimes syndicate reviews to search engines. Marketplaces run their own systems and control the data. Agencies offer collection and moderation as a service. In-house teams build on general tools such as email and survey software.

Each model changes who owns review content and who carries compliance risk. A marketplace seller has little control over display rules. A retailer running its own platform carries the whole duty.

Our comparison of commerce reviews business models in England sets out trade-offs, including data ownership and exit costs.

Sizing starts with product pages and review volume per page. A catalogue of 200 products with a target of 15 reviews each implies 3,000 reviews. That sets collection effort and moderation load.

On revenue, the useful figure is not total retail spending but the share of your category bought online and influenced by reviews. Category online penetration is the number to argue about in a budget meeting.

ONS releases and Bank of England statistics give the macro backdrop on consumer spending. For a worked approach, including which published series to use and their limits, see commerce reviews market size in England: data and sources.

What changed recently and what it means for 2027

Enforcement changed. The CMA can act administratively rather than through the courts for every breach. That lowers the cost of action for the regulator and raises it for the seller. Platform verification has tightened, making purchased or incentivised reviews easier to detect and remove.

Buyer expectations moved too. Shoppers lean on photos, video and detailed text rather than star ratings alone. For a team, verification is now a foundation rather than a feature. Collect reviews you can prove came from real customers and keep the evidence.

If you need a planning view, our commerce reviews trends and outlook for England in 2027 sets out likely shifts and budget effects.

Build the foundations step by step

Start with the legal basis. Decide what reviewer data you hold, why, and how long you keep it. Write this down before you switch on any collection tool.

Next, choose the collection method. Post-purchase email is the workhorse. On-site prompts, QR codes on packaging and follow-up surveys all work if the invite goes to genuine buyers.

Then write a moderation policy. Say what you remove and why. Removing profanity, spam and off-topic content is normal. Removing criticism because it is negative is not.

After that, fix display rules. Show a mix of ratings, date reviews so readers can judge relevance, and label incentivised reviews clearly.

Finally, set measurement. Track review volume per product, average rating, response rate and review content on category pages. Software can automate parts of this, but moderation judgement stays human.

Choosing review software in England

Software decisions follow foundations, not the other way round. Ask three questions before any demo. Can the tool prove the reviewer bought the product? Can it export your review data if you leave? Does it let you publish negative reviews without workarounds?

Trustpilot has a free plan and paid plans, with paid tiers often quoted by contract. Judge.me offers a free Shopify app and paid plans, often around $15 a month for small stores. Yotpo uses quote-based pricing and suits larger ecommerce teams.

Reviews.io sells paid plans and targets UK retailers wanting Google Seller Ratings. Feefo sells paid contracts and invites only verified buyers. Google Customer Reviews is free and can show ratings in Google Ads and Shopping if you qualify.

Working with agencies and creators

Agencies can speed up collection but they do not absorb your legal duty. If an agency collects reviews on your behalf, honesty rules still bind your business. The same applies to creators who review products for payment or free goods. Disclosure has to be clear and sit with the content, not in a footnote.

Digital advertising context helps here. The IAB UK, which represents the digital advertising industry, publishes IAB UK's background and remit if you need to understand how ad-funded content and review content overlap.

Skills and roles to plan for

Review operations need three capabilities: legal awareness, content moderation and analytics. Few small teams have all three in one person.

The Chartered Institute of Marketing's Global Professional Marketing Framework maps competencies marketing professionals are expected to hold. That is a sensible reference when writing role descriptions or training plans for review and user-generated content work.

In practice, most England retailers start with one owner for review operations and buy in legal advice when policies change. That owner needs authority to publish negative reviews without escalation, or the policy is meaningless.

Costs to budget for 2027

Budget four lines. Software or platform fees. Moderation time, usually the largest hidden cost. Legal review when rules change. Incentives such as discounts or prize draws, if you use them.

A worked example for a small England shop with 300 orders a month and a £55 average order value, using typical public prices:

The moderation line is the one teams forget. Three hours a week is 156 hours a year. At £12.21 an hour that is £1,905, more than most small stores pay for software.

Legal costs vary with firm, region, seniority and scope, so treat that range as typical rather than fixed. The National Living Wage, and with it moderation cost, rises each April. Incentive cost scales with order volume and discount depth.

A small England retailer might pay a low monthly software fee plus a few hours of moderation a week. A larger catalogue multiplies both. Keep incentives modest, because the compliance cost of a badly run scheme outweighs the review volume it generates.

Review spending does not have to be a pure cost line. Vendors, agencies and managed services price differently. Our guide to commerce reviews commercial opportunities covers where a review programme can earn rather than only spend.

2027 checklist before you launch

Use this dated checklist. Tick each item and record the date.

Common questions

Do I need consent to publish a customer review?

You need a lawful basis under UK GDPR for holding reviewer personal data. Publishing the review text is usually part of the bargain the customer entered into, but names, photos and contact details need care.

Can I edit a review before publishing it?

You can remove content that breaches a published policy, such as profanity or personal attacks. You should not change meaning or delete criticism.

Are incentivised reviews allowed in England?

They can be, if the incentive is disclosed clearly and the review reflects the customer's genuine opinion. Hiding the incentive, or requiring a positive rating as a condition, is where businesses get into trouble.

How many reviews does a product page need?

There is no legal minimum. Conversion tends to improve as reviews accumulate, but ten verified reviews on a risky purchase usually beat a hundred unverified ones. Your own data should set the target.