Natasha's Law and Online Food Sales: What UK Shopify Merchants Must Know

Natasha's Law was drafted with physical retail in mind, but the Food Standards Agency has made clear that it applies equally to food sold online. If you make and package food and sell it through Shopify to UK customers, Natasha's Law compliance is a legal requirement.

The Two-Stage Requirement for Online Food Sales

Under the UK's Food Information to Consumers (FIC) Regulation — which pre-dates Natasha's Law — food sold at a distance (including online) must provide allergen information at two stages: before the purchase is completed, and at the point of delivery. For online food businesses, this means allergen information must be on your Shopify product page (pre-purchase) and on the food's packaging when it arrives (at delivery). Natasha's Law adds the requirement for a full ingredient list with emphasised allergens on the physical packaging of PPDS products.

What Your Shopify Product Pages Must Show

For PPDS food sold through Shopify, your product pages must show allergen information before a customer can buy. The FSA recommends mirroring the allergen information on your physical label — both the full ingredient list (with allergens emphasised) and, ideally, a "Contains" summary for quick reference. Visual allergen badges significantly improve accessibility.

The Delivery Documentation Requirement

When you dispatch food to a customer, allergen information must be provided again at the point of receipt. For PPDS food, this is satisfied by the allergen information on the physical label. For other online food sales (non-PPDS), a packing slip or insert with allergen information may be needed if the physical product doesn't carry a full label.

Display Natasha's Law compliant allergen information on your UK Shopify food store.

Understanding Which Products Count as PPDS

Prepacked for direct sale (PPDS) food is food that is packaged at the same place it is offered or sold to consumers, and is offered for sale in that packaging. For Shopify merchants, the most common examples are home bakers selling cakes and biscuits, small-batch producers selling jams or sauces, and cottage food businesses dispatching products they have packaged themselves. If you are producing food in your kitchen, sealing it in a bag or box with your own label, and selling it directly to consumers through your online store, your products almost certainly fall into the PPDS category and are subject to Natasha's Law in full.

Understanding this distinction matters because the labelling requirements for PPDS food are more demanding than those for pre-packaged food produced by a third-party manufacturer. PPDS products require a name of the food, a full ingredients list, and allergen emphasis — typically bold or capitalised text — for each of the 14 major allergens present. Unlike pre-packaged food made by manufacturers supplying retailers, there is no exemption for small businesses. The law applies regardless of the size of your operation, whether you bake ten portions a week or five hundred, and whether you sell locally or across the whole of the United Kingdom.

The key test the FSA applies is whether the food was packaged by the same business that is selling it, and whether it is sold to the end consumer in that same packaging. If a product is packaged at a different site, or is packaged after an order is placed rather than before, the classification may differ. If you are genuinely unsure how your specific products are classified, your local authority's environmental health team can provide guidance tailored to your circumstances. Getting this classification right is the essential first step before addressing anything else in your compliance workflow.

How to Format Allergen Information Correctly on Shopify

The FSA's guidance on allergen emphasis requires that the 14 major allergens are distinguished from the rest of the ingredients list using a different font, style, or colour — in practice, most labels and product pages use bold text. The allergens covered are celery, cereals containing gluten, crustaceans, eggs, fish, lupin, milk, molluscs, mustard, tree nuts, peanuts, sesame, soybeans, and sulphur dioxide and sulphites above ten parts per million. Every one of these that appears in your product must be emphasised in your listed ingredients, both on your physical packaging and on your Shopify product page.

On your Shopify product page, the ingredient list should appear clearly in the product description rather than buried in a collapsible tab that a customer might miss. The FSA's two-stage requirement means that allergen information must be genuinely available before the purchase decision is made, not simply somewhere on the website. A customer should not need to click through multiple pages or expand hidden sections to find out whether a product contains milk or gluten. Placing a formatted ingredient list and a clear "Contains" summary near the top of your product description is best practice and reduces compliance risk significantly.

Many Shopify merchants also benefit from displaying visual allergen icons alongside the text-based information. Icon-based allergen matrices are widely recognised by consumers and add an accessibility layer that text alone cannot fully provide, particularly for customers who are shopping quickly or who have difficulty reading dense ingredient lists. Tools like Allergen Matrix are designed specifically to help Shopify merchants display this information consistently across all product pages without requiring manual formatting on every listing.

Managing Recipe Changes and Keeping Listings Up to Date

One of the most common compliance failures among small food businesses is not the initial setup of allergen information, but the failure to update that information when recipes change. If you substitute one ingredient for another — even a seemingly minor swap, such as changing sunflower oil for rapeseed oil, or switching to a supplier whose product contains a different allergen profile — your Shopify product pages and physical labels must be updated before you sell the reformulated product. Selling a product with outdated allergen information, even unintentionally, can have serious legal and safety consequences.

Building a simple internal process for recipe change management is well worth the time investment. Before any ingredient is changed, the allergen implications should be assessed, the physical label artwork updated, and the Shopify product description reviewed and amended. If you use a third-party ingredient or a supplier's premix, you should request up-to-date allergen declarations from your supplier on a regular basis, because their formulations can also change. Many small producers are surprised to discover that a supplier has quietly reformulated a product without direct notification, making ongoing supplier communication an important part of your compliance routine.

Keeping a simple record of your current recipes, ingredient specifications, and the date each product page was last reviewed creates a useful audit trail if your labelling is ever questioned by a trading standards officer or environmental health inspector. It also gives you confidence that what your customers are reading on your Shopify store accurately reflects what they will receive. Allergen errors that result in allergic reactions can lead to prosecution, significant fines, and lasting reputational damage — a straightforward review process is a proportionate and practical safeguard.

Precautionary Allergen Labelling and What You Can and Cannot Claim

Precautionary allergen labelling — the "may contain" statements you see on many food products — is not a substitute for accurate allergen information, and it cannot be used to replace a proper ingredients declaration. The FSA's position is that "may contain" statements should only be used where there is a genuine, assessed risk of cross-contamination from shared equipment or production environments, and that they should never be used as a blanket disclaimer to avoid the work of proper allergen management. Overuse of "may contain" statements has been criticised by allergy charities and the FSA alike, because it makes it impossible for allergic consumers to identify safe products.

For Shopify merchants producing food at home or in a small kitchen, cross-contamination risks are real and should be assessed honestly. If you make products containing peanuts and products that do not, and you use the same equipment without adequate cleaning procedures in between, a "may contain peanuts" statement on your nut-free products may be appropriate and necessary. However, if you have genuinely segregated your production environment and follow documented cleaning procedures, you are not required to add precautionary statements, and doing so unnecessarily may deter allergic customers from buying products that are in fact safe for them.

What you cannot do is make a "free from" claim — such as "gluten free" or "dairy free" — without being certain that your product meets the legal thresholds and that your production environment supports that claim. "Gluten free" has a specific legal definition in UK food law: no more than 20 parts per million of gluten. Making this claim without verified testing or robust process controls exposes you to significant legal risk. If you are considering free-from labelling, seek guidance from your local authority or a qualified food safety consultant before publishing any such claims on your Shopify store.

Enforcement, Penalties, and Why Compliance Cannot Wait

Natasha's Law is enforced by local authority trading standards and environmental health officers, who have the power to inspect food businesses, sample products, review labelling, and issue improvement notices or prosecute where serious non-compliance is found. While enforcement action against small online food businesses has so far been relatively rare, the FSA has been clear that the law applies to all PPDS food producers regardless of size or sales volume, and local authorities have both the powers and, increasingly, the awareness to act on complaints or concerns raised about online food sellers.

The penalties for non-compliance range from improvement notices requiring corrective action within a set timeframe, through to prosecution for serious or persistent breaches. Beyond formal enforcement, the reputational consequences of a publicised allergen incident — particularly one that results in a serious allergic reaction — can be devastating for a small food business. Customers who have had allergic reactions can and do report businesses to the FSA and to environmental health teams, and cases involving online food sellers have attracted significant press coverage in recent years.

Compliance with Natasha's Law is not a one-time task but an ongoing operational responsibility. Reviewing your Shopify product pages, keeping your physical labels current, training yourself and any staff on allergen awareness, and maintaining supplier allergen declarations are all part of running a lawful and responsible food business in the UK. The effort involved in getting this right is modest compared to the consequences of getting it wrong.

Try Allergen Matrix free at saltai.app — no credit card required.