Growing a digital business here comes down to three things: choosing one or two channels and working them properly, making it easy to pay you, and staying on the right side of rules that changed materially in 2026. The last of those is the part most guides skip, and it is the one that now carries real penalties.
What follows covers the channels worth your time, what selling online legally requires of you, and the marketing rules that came into force this year.
The direct marketing rules changed in 2026. Read this before you send anything.
Two separate regimes govern how you may market to people, and both apply at once.
POPIA section 69 governs electronic direct marketing. You may not send unsolicited electronic marketing to someone who is not already your customer unless they have consented, and consent must be requested in the prescribed form. You get one opportunity to ask. If they decline or ignore it, asking again is itself a contravention. Existing customers are treated differently: you may market similar products to them, provided you gave them a chance to opt out when you first collected their details and in every message since.
The Consumer Protection Act Amendment Regulations 2026 introduced a national opt-out registry, effective 15 April 2026 with no transitional period. Businesses that conduct direct marketing must register annually and cleanse their databases against the registry monthly. A registry entry overrides consent you collected earlier, so a contact who opts out nationally must be suppressed even if they said yes to you last year.
The practical consequence for a small digital business is that a purchased or scraped list is now a liability rather than a shortcut, and your database needs a monthly maintenance routine rather than an annual clean. The wider obligations are set out in our guide to POPIA.
What you must tell customers before they buy
Selling online triggers disclosure duties under the Electronic Communications and Transactions Act. Your site must carry your full legal name and registration number, physical address, contact details, a description of the goods or services, the full price including delivery and taxes, the payment terms, and your returns and refund policy. These are not best-practice suggestions. Getting the wording right is covered in our guide on how to create terms and conditions for your website.
Cooling-off rights are where most sites get it wrong, because two different periods exist and people quote the wrong one:
- ECTA section 44 gives a consumer seven days, counted as calendar days, to cancel an electronic transaction, running from receipt of the goods or from conclusion of the agreement for services.
- CPA section 16 gives five business days to cancel a transaction that resulted from direct marketing.
The two do not stack. Section 16 of the CPA expressly does not apply where section 44 of ECTA applies. For a normal online sale it is the seven-day ECTA right that governs, and writing five business days into your terms understates what you owe the customer.
Choose two channels and work them properly
A small business spread thinly across six channels loses to a competitor doing two of them well. The realistic options:
Search. The highest-intent traffic there is, because the person is already looking. It compounds slowly and takes months to show results, which is exactly why competitors give up on it. Start with the questions your customers actually ask rather than the terms your industry uses internally.
Email. Still the channel you own outright, and the only one where an algorithm change cannot cut your reach overnight. Judge it by clicks rather than opens, since open tracking has become unreliable. Note that everything in the section above applies to how you build the list.
Paid ads. The fastest route to finding out whether your offer converts. Treat a small budget as research: run it long enough to learn what people click and what they buy, then decide whether to scale.
Social. Useful for demand you have to create rather than demand that already exists. Post where your customers actually are rather than everywhere at once.
Affiliates and referrals. You pay only for outcomes, which makes the maths safer than most channels. Our guide to affiliate marketing covers how to structure a programme.
Build for mobile, and for the cost of data
Most of your traffic will arrive on a phone, often on a prepaid connection where every megabyte is paid for. A heavy site is not just slower, it is more expensive for the visitor, and they leave.
The practical version: compress images before uploading, drop the fonts and scripts you are not using, and test on an actual mid-range Android handset rather than a desktop browser window resized. Then check what the page costs to load. A homepage several megabytes deep is quietly turning away the customers least able to absorb the cost.
Make it easy to pay you
Card is not enough on its own. Instant EFT is widely used, and offering it alongside card removes a common reason for abandoned checkouts. Local options are compared in our guide to the best payment gateways for South African businesses, and each publishes its own transaction fees, which are worth comparing against your average order value rather than in the abstract. A percentage that looks small is not small on a low-value, high-volume product.
Two things to get right regardless of gateway: display the full price including delivery before checkout, and make the refund path obvious. Both reduce disputes, and both are already required of you by the disclosure rules above.
Measure what happens after the click
Traffic is not the goal, and a channel that delivers volume without sales is a cost. Track the conversion rate from visit to sale, the average order value, and what it costs you to acquire a customer through each channel. If acquisition cost exceeds what a customer is worth over their lifetime, the channel is losing money regardless of how good the traffic numbers look. Which measures to watch across the whole business is covered in our guide to KPIs every business owner should track, and how pricing feeds into all of it in our pricing guide.
Retention is the cheapest growth available. A returning customer costs nothing to acquire twice, which is why the businesses that grow steadily tend to be the ones that keep customers rather than the ones that shout loudest.
Frequently asked questions
Can I email people who have not bought from me?
Only if they have consented in the prescribed form under POPIA section 69, and you may ask for that consent once. Existing customers may be marketed similar products provided they were given an opt-out at collection and in every message.
What is the national opt-out registry?
A registry introduced by the Consumer Protection Act Amendment Regulations 2026, effective 15 April 2026. Businesses doing direct marketing must register annually and cleanse their databases against it monthly, and a registry entry overrides consent collected earlier.
How long does a customer have to cancel an online order?
Seven calendar days under ECTA section 44, running from receipt of goods or conclusion of a services agreement. The CPA’s five business days applies to direct marketing transactions and does not apply where ECTA section 44 does.
Which channel should a small digital business start with?
Whichever one your customers already use to look for what you sell. If they search for it, start with search. If they do not know the product exists, start with paid social to test the offer.
Do I need a .co.za domain?
It is not required, but it signals a local business to both customers and search engines, and it makes trust easier to establish for customers wary of buying from abroad.
Where to start
Audit your site against the ECTA disclosure list and fix the cooling-off wording in your terms. Then pick the one channel where your customers already are, commit to it for three months, and measure sales rather than traffic. That sequence puts the legal exposure behind you first and stops you spending on ads that point at a site which cannot convert.
This article was updated in September 2026.
