Online advertising can be one of the fastest ways to get your small business in front of the right people.
But it can also be one of the easiest ways to accidentally cross a legal line - especially when you’re moving quickly, testing new campaigns, working with influencers or agencies, or using customer data to target ads.
The good news is that you don’t need to be a lawyer to run compliant online advertising. You just need to understand the key risk areas, set up strong contracts, and build a simple internal process so your marketing stays accurate, fair, and defensible if anyone ever challenges it.
Below, we’ll walk you through the big legal issues Australian small businesses should consider when running online advertising - including misleading claims, consumer guarantees, privacy and data use, spam and marketing consent rules, and what to lock in with contractors, agencies, and platforms.
What Counts As Online Advertising (And Why The Legal Risk Is Higher Than You Think)
When people hear “online advertising”, they often think of paid ads that appear on search engines or social media.
In reality, online advertising is broader than that, and your legal obligations can apply across many different formats, including:
- Paid ads (search, display, social media ads, shopping ads)
- Retargeting and behavioural advertising (ads served based on browsing behaviour)
- Influencer marketing (paid or gifted product promotions)
- Email marketing (especially where content is promotional and targeted)
- SMS marketing (promotional texts and campaigns)
- Affiliate marketing and referral programs
- Landing pages, advertorials, and “native” ads that look like content
- Website claims that are part of the customer acquisition journey (pricing, features, “limited time” offers)
The legal risk is higher online because:
- claims spread quickly and are easily screenshot/saved;
- ads are often short, simplified and more likely to omit important conditions;
- you may be relying on third parties (agencies, freelancers, influencers) to communicate your offer accurately; and
- your campaigns often involve collecting or using personal information for targeting.
Even if you outsource your marketing, you’re still usually responsible for what is said about your business and products.
Misleading Or Deceptive Conduct: The Biggest Compliance Trap In Online Advertising
Most online advertising disputes come down to one key issue: whether the ad misled customers (even unintentionally).
In Australia, the Australian Consumer Law (ACL) prohibits misleading or deceptive conduct in trade or commerce. This applies to advertising across pretty much every channel you use.
Misleading conduct is not only about outright lies. It can also include:
- claims that are technically “true” but give the wrong overall impression;
- missing key conditions (like extra fees or important limitations);
- “before and after” claims that imply results most customers won’t get;
- exaggerated claims about performance, availability, endorsements or customer outcomes; and
- pricing statements that don’t match what customers actually pay at checkout.
Common High-Risk Advertising Claims For Small Businesses
If you want a practical compliance checklist, these are the claims we often recommend you review closely before running ads:
- Price claims: “From $X”, “50% off”, “Cheapest”, “Best price”, “No hidden fees”
- Time pressure claims: “Ends tonight”, “Last chance”, “Limited stock” (especially if it’s not really limited)
- Guarantees and warranties: “2-year warranty”, “Lifetime warranty” (make sure it matches what you actually provide and doesn’t conflict with consumer guarantees)
- Results claims: “Lose 5kg in 2 weeks”, “Double your sales”, “Guaranteed approval”
- Comparisons: “Better than X”, “#1 in Australia”, “Award-winning” (you’ll need evidence)
- Testimonials and reviews: endorsements should be genuine and not misleading in context
If you’re not sure whether a claim is “too strong”, a good rule is: could you prove it, quickly, if a regulator or customer asked?
Don’t Let Your Terms Undercut Your Advertising
Sometimes the issue isn’t the ad itself - it’s the mismatch between what the ad implies and what your terms actually deliver.
If your online advertising makes broad promises, you should make sure your E-commerce Terms and Conditions (or other customer terms) clearly explain the scope of what customers are buying, delivery timeframes, limitations, and refund processes.
This doesn’t give you a “free pass” to advertise loosely, but it does help align customer expectations with what you actually provide.
Pricing, Discounts And “Free” Offers: How To Avoid Getting It Wrong Online
Pricing is one of the most heavily scrutinised parts of online advertising, because it’s where customers make quick decisions.
Common pricing mistakes include:
- advertising a low “headline” price, but adding unavoidable fees later;
- showing a discount against an inflated “was” price that wasn’t genuinely charged for a reasonable time;
- saying something is “free” when customers must pay for something else to get it;
- advertising “from $X” where the majority of customers can’t realistically get that price; and
- using “limited time” discount language when the discount runs continuously.
Be especially careful when you run multiple campaigns across different channels. If your social ads say one price and your landing page says another (or your checkout adds mandatory costs), you increase the risk of complaints and refunds, and you also increase the risk that the overall impression is misleading.
If you use online advertising to drive customers to a website, your Shipping Policy should also match what you say in ads about delivery timeframes and costs (particularly for “free shipping” offers or time-critical promotions).
Privacy And Data Compliance In Online Advertising: Cookies, Tracking And Targeting
Most modern online advertising relies on data - even if you’re not consciously “collecting data”, your website and tools may be doing it in the background.
This can include:
- website cookies and analytics identifiers;
- ad tracking pixels and conversion tracking;
- customer lists used for targeting or “lookalike” audiences;
- lead forms collecting names, emails, phone numbers and preferences; and
- CRM data used to segment and target customers.
As a small business, you should treat this as a core part of your compliance set-up, not an afterthought. Even if you’re under the Privacy Act threshold today, privacy expectations (and customer complaints) don’t wait until you “get big”.
What Should You Have In Place?
As a starting point, if you’re collecting personal information online (for example through enquiries, a newsletter sign-up, bookings, or online sales), it’s important to have a Privacy Policy that accurately explains what you collect, why you collect it, and who you share it with.
If you’re using cookies and tracking technologies (which is common with online advertising), a Cookie Policy can be a helpful way to clearly explain how tracking works on your website and what choices customers have.
Privacy risk often increases when you share customer data with third parties - like marketing agencies, email marketing tools, or analytics services.
From a practical risk-management perspective, you want to know:
- what data you are giving them (and how);
- where the data is stored;
- whether data is transferred overseas; and
- what security measures and access controls are in place.
This is also where your contracts matter (more on that below). A well-drafted agreement can set expectations around confidentiality, data handling, and what happens if something goes wrong.
Email And SMS Marketing: Spam Act Rules You Can’t Ignore
If your online advertising includes promotional emails or text messages, you also need to comply with the Spam Act 2003 (Cth).
In general, marketing messages must only be sent with consent (express or inferred), must clearly identify your business (or the sender), and must include a functional unsubscribe option.
This matters even if you’re “just” sending:
- newsletter campaigns with offers or promotions;
- discount codes and abandoned cart messages;
- product launch announcements; or
- SMS campaigns to customer lists.
If you’re using an agency or a marketing platform to send campaigns, it’s still important to make sure your list collection and messaging practices meet these requirements.
Influencers, Affiliates And Sponsored Content: Your Disclosure Obligations
Influencer marketing can feel “informal”, but from a legal perspective it’s still advertising - and your obligations don’t disappear because the promotion is happening on someone else’s page.
If an influencer is paid, receives free products, gets a commission, or receives any other benefit in exchange for content, the content should be clearly disclosed as sponsored/advertising.
For small businesses, the key risks here tend to be:
- unclear or missing disclosures (customers can be misled if it looks like a genuine personal recommendation);
- unapproved claims (influencers overpromise results or make statements you can’t prove);
- copyright and usage issues (who owns the content and whether you can reuse it); and
- brand and reputational risk if the influencer acts in a way that reflects badly on your business.
Put It In Writing (Even For “Small” Collaborations)
If you’re relying on online advertising through influencers, it’s worth documenting the relationship properly. This can be as simple as a short agreement that covers:
- what content must be posted and by when;
- mandatory disclosure requirements;
- what claims are allowed (and what is prohibited);
- content approval rights (for you);
- intellectual property ownership and reuse rights; and
- termination rights if things go off-track.
If you’re building longer-term creator partnerships or brand ambassador arrangements, a dedicated contract becomes even more important because the content can create ongoing legal risk for your business.
Depending on what you sell, there may be additional rules that apply to how you advertise online. For example, there are often stricter requirements around advertising in areas like health and therapeutic goods, financial products and services, alcohol, and other regulated categories.
If you operate in a regulated space (or you’re not sure), it’s a good idea to get advice before launching campaigns that make strong claims or target vulnerable audiences.
One of the most practical ways to reduce online advertising risk is to use the right contracts.
When things go wrong in marketing (missed deadlines, unexpected spend, ad disapprovals, inaccurate claims, poor lead quality), the dispute usually comes back to: what was agreed and who is responsible.
Marketing Agency Or Freelancer Agreement
If you’re engaging someone to run online advertising for you, a written agreement can help set expectations around deliverables, budget, and legal compliance.
Depending on your set-up, this might look like a service agreement, consultancy agreement, or contractor agreement.
Key clauses to consider include:
- Scope of services: what channels they manage, what they deliver, what they don’t do
- Approvals process: who approves ad copy and landing pages (and how fast)
- Ad spend controls: who controls the ad account, daily/weekly caps, what happens if overspend occurs
- Ownership of accounts and data: who owns the ad account, pixels, audiences, creative assets, and reporting
- Confidentiality: protecting your pricing, customer lists, and strategy
- Compliance warranty: requiring them to comply with applicable laws and not publish misleading claims
- Indemnities and liability allocation: how risk is shared if the business gets hit with claims or regulator complaints
- Termination and handover: what happens when you part ways (especially access to accounts and assets)
If you don’t have this in writing, you may discover too late that:
- the agency “owns” the ad account, and you can’t take it with you;
- you can’t access reporting or historical data;
- you don’t have clear rights to use creative assets after the relationship ends; or
- there was never a clear agreement on who is responsible for legal compliance.
Website And Customer-Facing Legal Documents
Online advertising usually pushes customers to a website, landing page or online store - and that’s where customers decide to buy (or complain).
To support your online advertising and reduce disputes, consider whether you need:
This doesn’t just “tick a box” - it can genuinely reduce customer disputes because it makes your processes and limitations transparent.
Employment And Internal Controls (If Your Team Runs Ads In-House)
If you have an internal marketing team (even a small one), you’ll often want basic guardrails around:
- who can publish ads;
- who can approve claims and pricing;
- how customer data can be used; and
- how brand assets and creative are stored and accessed.
This becomes especially important when staff have access to customer information, social accounts, ad accounts, and payment methods.
Where relevant, a tailored Employment Contract can help set expectations around confidentiality, intellectual property created in the role, and acceptable use of business systems.
How To Build A Simple Online Advertising Compliance Process (Without Slowing Down Your Marketing)
Most small businesses don’t need a complicated legal approval pipeline to run online advertising.
What you do need is a simple, repeatable process that helps you catch common issues before you spend money pushing ads out to thousands of people.
A Practical Pre-Launch Checklist
Before launching a campaign, you can run through these questions:
- Can we prove our key claims? (results, performance, comparisons, “best”, “#1”)
- Is the offer clear? (price, inclusions, exclusions, ongoing fees, renewal terms)
- Are any key conditions missing? (minimum spend, eligibility, geographic limits, limited stock that isn’t truly limited)
- Is the landing page consistent with the ad? (no contradictions in pricing, delivery, what’s included)
- Are testimonials and reviews genuine and representative?
- Are we collecting personal information? If yes, is it covered by our Privacy Policy and collection practices?
- Are we sending email or SMS marketing? If yes, do we have consent and a clear unsubscribe process?
- Are we working with third parties? If yes, do we have an agreement, and do they know what they can and can’t say?
Keep Evidence Of Your Claims
A simple but powerful habit is to store evidence for your bigger claims in a shared folder (for example: product testing results, supplier specs, screenshots, customer survey methodology, or a dated record of your “was” price before a discount).
If you ever need to respond to a complaint, platform review, or regulator query, you’ll be able to move quickly - and that alone can reduce risk.
Update Your Ads When Your Business Changes
Online advertising is often set-and-forget, but your business changes constantly - prices shift, stock availability changes, delivery times vary, service inclusions evolve.
Make it part of your routine to review your highest-performing ads regularly. These ads are often seen by the most people, which means any compliance issue is magnified.
Key Takeaways
- Online advertising is broader than “paid ads” - it includes influencer marketing, landing pages, email and SMS marketing, and any promotional messaging that drives sales.
- Misleading or deceptive conduct is one of the biggest legal risks in online advertising, and it can include half-truths, missing conditions, and misleading impressions (not just obvious lies).
- Pricing, discounts, and “free” offers are high-risk areas, so your ads, landing pages and checkout flow should be consistent and transparent.
- Privacy compliance matters in online advertising because tracking, retargeting, lead forms and customer lists often involve personal information, so you’ll typically need a Privacy Policy and clear cookie disclosures where relevant.
- Email and SMS campaigns are also subject to the Spam Act, including consent and unsubscribe requirements.
- Some industries have extra advertising rules (for example health or financial services), so you may need additional checks before running campaigns.
- Strong contracts with agencies, freelancers and influencers can prevent disputes and clarify who owns ad accounts, creative assets, data, and who is responsible for compliance.
- A simple internal compliance checklist helps you move fast while reducing the chance of costly mistakes, refunds, platform takedowns or legal complaints.
This article is general information only and not legal advice. If you’d like help setting up your online advertising contracts and compliance, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.
