Beyond product liability, three other types of cover form the backbone of a well-protected UK e-commerce business: public liability, cyber insurance, and goods-in-transit cover. Each protects against a different, entirely realistic scenario.
Public liability insurance: protecting against third-party harm
Public liability insurance covers claims from members of the public — customers, delivery drivers, visitors — who are injured or have property damaged as a result of your business activities, distinct from harm caused specifically by a product you sold. For an online-only retailer, this might sound less relevant than for a shop with footfall, but it still matters if you have a warehouse, a click-and-collect counter, hold pop-up events or markets, or have couriers and suppliers visiting your premises regularly.
Many UK commercial landlords, event organisers and marketplace platforms now require proof of public liability cover (commonly £1–5 million) as a condition of renting space, exhibiting at a trade show, or occasionally even trading through certain B2B wholesale channels.
Cyber insurance: covering the cost of a digital incident
Cyber insurance covers the direct costs of a data breach or cyber attack — forensic investigation to establish what happened, legal costs, the cost of notifying affected customers, credit monitoring services offered to those customers, ICO fines where insurable, and business interruption losses from downtime caused by an attack such as ransomware. Given that a serious breach can easily run into tens of thousands of pounds in response costs alone before considering reputational damage, cyber cover has moved from a nice-to-have to a standard requirement for any retailer holding meaningful customer data.
What cyber insurance typically includes and excludes
A comprehensive cyber policy typically bundles first-party costs (your own direct losses and response costs) with third-party liability cover (claims from customers or partners affected by the breach). Look closely at sub-limits within the headline cover figure — for example, the amount available specifically for ICO fines or for customer notification costs is often capped separately from the overall policy limit, and can be exhausted faster than the headline number suggests.
- Incident response and forensic investigation costs.
- Customer notification and credit monitoring costs.
- Legal costs and, where insurable, regulatory fines.
- Business interruption losses from system downtime caused by an attack.
- Cyber extortion/ransomware payments, subject to specific policy terms and increasingly tight conditions.
Goods-in-transit cover: protecting stock while it moves
Goods-in-transit insurance covers loss or damage to your stock while it's being transported — from your supplier to your warehouse, between your own premises, or in some policies while goods are with a courier en route to a customer, depending on how liability is split with the courier under their own terms. This matters particularly for high-value stock, imported goods travelling long distances, or businesses using multiple couriers or freight forwarders where liability and paperwork can otherwise become genuinely unclear after a loss.
Check exactly where your courier's own liability ends and your own goods-in-transit cover needs to begin — most courier contracts cap their liability per parcel at a modest fixed amount (often £25–£50 unless you've paid for enhanced compensation), which is rarely enough to cover a genuinely high-value shipment.
Bundling cover and controlling cost
Many UK insurers and specialist e-commerce brokers offer combined policies bundling public liability, product liability, cyber and goods-in-transit cover, which is usually simpler to manage and often cheaper than buying each separately from different insurers. Review your combined cover annually as your business changes — a growing warehouse footprint, new international shipping routes, or a significant rise in the value of stock in transit at any one time should all prompt a conversation with your broker about whether your existing limits are still adequate.
A sensible minimum for a growing UK online retailer
As a practical benchmark, most established UK online retailers carry at least £1–2 million of combined public and product liability cover, a cyber policy sized to their customer data volume and average order value, and goods-in-transit cover matched to their typical stock value in transit at any given time — treating these three as a connected package rather than three unrelated purchases makes both the cover and the cost easier to reason about as the business scales.
Putting This Into Practice
As with most things covered in Risk, Security & Compliance, public liability, cyber insurance and goods-in-Transit cover for online retailers works best when it's revisited periodically rather than decided once and forgotten. If you haven't already, Shipping Insurance and Liability for Lost or Damaged Parcels is a useful companion read on this exact point.
Finally, put a plan in writing for what happens when, not if, something goes wrong — who's notified, what's communicated to customers, and what the recovery steps are. Businesses that have already thought through this scenario respond faster and with far less damage than those working it out for the first time under pressure.
For related reading: If you haven't already, Directors' and Officers' Insurance for Limited Company Online Retailers is a useful companion read on this exact point. For the practical mechanics, see Age Verification and Restricted Goods Compliance for UK Online Sellers.