Building a Natasha's Law Compliant Shopify Store: Complete Guide

Natasha's Law came into force in October 2021. Over four years later, many UK food businesses selling on Shopify still have compliance gaps — allergen information that is incomplete, inaccurate, or not accessible in the format the law requires. This guide covers exactly what Natasha's Law requires of online food businesses and how to implement it on a Shopify store.

What Is Natasha's Law?

Natasha's Law is the informal name for the UK Food Information Amendment 2021, which amended the Food Information Regulations 2014. It was named after Natasha Ednan-Laperouse, who died in 2016 after an allergic reaction to a pre-packed sesame baguette. The label did not declare sesame.

The law requires food businesses producing PPDS food (pre-packed for direct sale) to label every individual item with the food's name and a full ingredient list with the 14 major allergens emphasised.

What Is PPDS Food?

Pre-packed for direct sale food is food that is packed by the food business and sold directly to consumers without being opened or repacked. Examples include:

Sandwiches made and packaged at your premises
Cakes and baked goods wrapped and labelled in your kitchen
Ready meals prepared and sealed in your facility
Meal prep boxes assembled and packaged for direct delivery

PPDS does not include food that is packed in front of the customer at the point of sale (loose food), or food manufactured by a third party and resold (pre-packed food from a supplier, which has its own labelling requirements).

The Online Sales Requirement

For food businesses selling PPDS food through an online store, Natasha's Law's label requirement applies to the physical label on the item. But the UK Food Information Regulations 2014 (which Natasha's Law amends) also require that allergen information is available to online customers before they complete their purchase.

This means your Shopify product pages must display allergen information for every PPDS product you sell. Customers must be able to see which allergens the product contains before they add it to their basket and before they check out.

What "Emphasis" Means Online

UK food law requires allergens to be emphasised when they appear in ingredient information. On a physical label, this typically means bold text, a different typeface, or a different colour. On a product page, the same principle applies: allergens in your ingredient lists must be visually distinguished from non-allergen ingredients.

A plain text ingredient list with allergens mixed in without emphasis does not meet the requirement. If your Shopify product descriptions include ingredient information, the allergens in that information must be emphasised.

Common Compliance Mistakes on Shopify Food Stores

One of the most frequent compliance failures is burying allergen information inside a product description tab that customers must actively click to expand. If allergen information is hidden behind a tab or accordion that is not immediately visible when the product page loads, there is a genuine question about whether it is sufficiently accessible. The standard the law sets is that allergen information must be available before purchase — regulators and enforcement bodies interpret this to mean clearly available, not technically retrievable if the customer knows where to look.

A second common mistake is copying a supplier's allergen information onto your product page without verifying it applies to your specific production process. If you are buying an ingredient from a supplier and then incorporating it into a product you assemble, pack, and sell yourself, your allergen obligations are based on your finished product — not your supplier's product. Cross-contact risks from your own kitchen, shared equipment, or production environment must be assessed independently and reflected in what you display to customers.

A third mistake is treating allergen information as a marketing task rather than a compliance task. Allergen records should not be managed through product description text fields in the same workflow as writing copy or uploading images. They require a separate, controlled process with version history and defined ownership. When allergen information is managed informally, recipe changes and ingredient substitutions often go undocumented, creating gaps between what is displayed on the product page and what is actually in the product at the time of sale.

Understanding "May Contain" and Cross-Contact Declarations

Cross-contact precautionary allergen labelling — commonly expressed as "may contain" — is not currently a legal requirement under Natasha's Law, but it is strongly recommended practice and widely expected by allergen-aware customers. Cross-contact occurs when an allergen is unintentionally transferred to a product during production, typically through shared equipment, shared surfaces, or airborne particles. If your kitchen processes products containing peanuts and also produces peanut-free products, a cross-contact risk exists and customers with peanut allergies need that information.

When you include precautionary allergen statements on your Shopify product pages, they must be accurate and based on a genuine assessment of your production environment — not added as a blanket disclaimer to avoid liability. The Food Standards Agency has been clear that using "may contain" statements indiscriminately, without a genuine risk assessment behind them, is not acceptable practice. Customers with severe allergies rely on these statements to make decisions about whether a product is safe for them. Inaccurate precautionary labelling — whether understating or overstating risk — has real consequences.

Allergen Matrix allows you to record both confirmed allergen presence and cross-contact risk separately for each product. This distinction matters both for the accuracy of what you display to customers and for your internal records. When a Trading Standards officer asks how you assessed and communicated cross-contact risk for a specific product, having a structured record that separates deliberate inclusion from cross-contact assessment is far more defensible than a product description written by hand.

The Allergen Matrix Implementation

Implementing Natasha's Law compliance on a Shopify store using Allergen Matrix:

Step 1: Build your allergen records. For every PPDS product in your Shopify catalogue, create an Allergen Matrix record covering all 14 UK allergens: celery, cereals containing gluten (wheat, rye, barley, oats), crustaceans, eggs, fish, lupin, milk, molluscs, mustard, peanuts, sesame, soybeans, sulphur dioxide and sulphites, tree nuts.

For each allergen, record: present (deliberately included), may contain (cross-contact risk), or absent.

Step 2: Configure allergen display. Allergen Matrix generates allergen information on your Shopify product pages with proper emphasis formatting. Configure which information is displayed and how it appears on product pages.

Step 3: Add ingredient list information. Where you include ingredient lists on product pages, ensure allergens are emphasised. Allergen Matrix supports this through its display configuration.

Step 4: Implement a change management process. Every time a recipe changes, Allergen Matrix records must be updated before the next order is placed. Build a process: recipe change → allergen review → Allergen Matrix update → product page verification.

What Happens During a Trading Standards Inspection

Trading Standards officers have the authority to inspect food businesses, review labelling and online product information, and issue improvement notices or prosecution referrals where non-compliance is found. For an online food business, an inspection is likely to include a review of your Shopify product pages — what allergen information is displayed, whether it is emphasised correctly, and whether it matches the physical labels on your products. If you cannot demonstrate that your displayed information is accurate and kept current, you are exposed.

The most important thing you can demonstrate during an inspection is that you have a process. Officers are not just checking whether your product pages look correct on the day they visit — they are assessing whether you have controls in place that make compliance systematic rather than accidental. A documented workflow for reviewing allergen records when recipes change, combined with an audit trail showing when records were last updated and by whom, is evidence of a managed process rather than a best-effort approach.

Having an audit trail also matters when something goes wrong. If a customer reports an allergic reaction and your allergen information is disputed, your ability to show exactly what was recorded, when it was recorded, and what the product page displayed at the time of sale is significant. The audit trail in Allergen Matrix timestamps every record change and associates it with the user who made it, giving you documentation that is credible under scrutiny rather than reconstructed after the fact.

The 14 UK Allergens Reference

For completeness, the 14 major allergens under UK food law:

Celery (including celeriac)
Cereals containing gluten (wheat, rye, barley, oats, spelt, kamut)
Crustaceans (prawns, crabs, lobster, crayfish)
Eggs
Fish
Lupin
Milk
Molluscs (clams, mussels, oysters, scallops, squid)
Mustard
Peanuts
Sesame
Soybeans
Sulphur dioxide and sulphites (over 10mg/kg or 10mg/litre)
Tree nuts (almond, hazelnut, walnut, cashew, pecan, Brazil nut, pistachio, macadamia)

Ongoing Compliance

Natasha's Law compliance is not a one-time task. Allergen information must stay current. Supplier ingredient changes, recipe reformulations, and new product additions all require allergen record reviews.

The audit trail in Allergen Matrix documents every record change with timestamp and user. This documentation is valuable if Trading Standards conduct an inspection — it demonstrates that allergen management processes are in place and actively maintained.

Keeping Allergen Records Current as Your Product Range Grows

Seasonal menus, limited edition products, and ingredient substitutions due to supply chain disruption are all routine realities for small food businesses. Each one is a potential compliance event. When a product changes — even temporarily — its allergen record must be reviewed before the updated product goes on sale. A substituted ingredient that introduces a new allergen, or removes a previously declared one, changes what must be displayed on the product page. Treating recipe changes as production decisions rather than compliance events is one of the most common ways allergen information drifts out of accuracy.

Building a consistent internal process around product changes significantly reduces this risk. The trigger for an allergen review should not be a customer complaint or a scheduled audit — it should be built into the recipe change workflow itself. Before a new version of a product enters production, someone with responsibility for allergen records should review the change, update the record if required, and verify the product page reflects the update. This does not need to be complicated, but it does need to be consistent.

As your Shopify catalogue grows, managing allergen records in a structured tool rather than in spreadsheets or product description fields becomes increasingly important. The more products you have, the harder it is to track which records were last reviewed and when. Allergen Matrix keeps all records in one place, linked directly to your Shopify products, so the scope of what needs to be managed is always visible — not spread across documents, email threads, or the memory of whoever wrote the original product description.

Build a Natasha's Law compliant Shopify store with Allergen Matrix at saltai.app

Try Allergen Matrix free at saltai.app — no credit card required.