Taking Orders in DMs: What the Rules Require

Taking orders in DMs, through Instagram, Facebook Messenger or WhatsApp, doesn't step outside consumer law any more than a website checkout does. The order is still a sale. The same information is still owed to the customer, and a message that gets missed doesn't undo a duty that already existed before it arrived. What a message thread actually changes is how easy that duty is to meet, and how much quietly goes missing along the way.

Does an order taken in a DM count as a proper sale?

Yes. UK consumer law defines a distance contract by how it's made, not by which app carries it. The Consumer Contracts Regulations 2013 set the test as "an organised distance sales or service-provision scheme", with no meeting in person and everything agreed through one or more means of distance communication. A one-off favour arranged between friends over text doesn't meet that bar. A business that regularly takes orders through Instagram, Messenger or WhatsApp as its normal way of trading does, just as squarely as one running a website checkout.

What actually goes missing once an order lives in a DM?

Two things, mostly. The first is the message itself. A DM from someone who doesn't already follow the account is commonly sorted into a separate requests folder rather than the main inbox, and doesn't trigger the same notification a message from an existing contact does. An order can sit unread for days without anyone noticing it arrived at all.

The second is the record. A DM thread has no built-in stages the way a proper order form does: no paid, confirmed or ready-for-collection status, just a scroll of messages that has to be remembered rather than looked up. And that's before a phone changes hands, an account gets logged out, or the conversation gets buried under a hundred others.

Do you have to confirm the order in writing?

Yes, and this is the part a message thread rarely does properly. Once a distance contract is made, regulation 16 requires the trader to give the customer confirmation "on a durable medium", covering what was agreed, the price and the cancellation rights that apply, no later than delivery of the goods or before a service begins. A reply typed back into the same DM thread is a weak version of that: nothing about it is saved anywhere the customer controls, and nothing stops it scrolling out of view within days. An email, a saved PDF or a printed receipt does the job properly. A message that vanishes into a feed does not.

Does a custom cake or a made-to-order jumper still carry a cancellation right?

No, and it's worth knowing before promising otherwise. Regulation 28(1)(b) takes goods "made to the consumer's specifications or... clearly personalised" out of the usual 14-day right to cancel altogether, on the reasoning that a business can't simply resell a cake with someone else's name iced on it. Standard, off-the-shelf items don't get that exemption just because they were ordered by DM, so the distinction is about the item itself, not the app it was ordered through.

What does a simple order form actually fix?

It forces the missing pieces to happen automatically, rather than depending on someone remembering to type them out every time. A short form on a website, even a single page, can ask for exactly what's needed to fulfil the order, send the customer an automatic confirmation the moment they submit it, and keep a record neither side has to scroll back through a feed to find. None of that stops a business taking the first enquiry on Instagram, where people are already looking. It just means the order itself gets written down properly once someone says yes, the same way a booking tool does for an appointment rather than a phone call.

Building one in is a standard part of how we put a site together. We render the whole thing from a short questionnaire, send a private preview link, and only take payment if you keep it. Setup is from £495, and ongoing care afterwards is from £69 a month.

A form doesn't fix a message that never gets read in the first place. That's a related but separate problem, covered in a guide on what makes a contact form actually reach someone, and it's worth checking both ends: the message getting through, and the order getting written down once it has. Sitting inside a proper website makes both easier to get right, which is the wider case a website that actually earns its keep makes. If DMs are still where most orders start, get in touch about adding a simple form behind them.

Frequently asked questions

Does this apply if I only take the odd order from a friend or neighbour?

Not in the same way. The regulations are built around an organised distance sales or service-provision scheme, which points at a business's normal way of trading rather than a one-off favour. Once taking orders by DM is genuinely how the business runs, the same rules apply as they would to a website checkout.

What actually counts as a durable medium for the confirmation?

Anything the customer can keep and look back at without it changing, which is what makes a DM reply a weak version of one. An email, a saved PDF or a printed receipt all count. A message inside a feed that can scroll out of view does not.

Do I need a full online shop to comply with this?

No. A short form that emails a confirmation the moment it's submitted meets the same duty a much bigger checkout does. What matters is that the confirmation happens automatically and lands somewhere the customer keeps, not how elaborate the system behind it is.

Does it matter that payment happens on collection rather than online?

No. The rules turn on how the order itself was placed and agreed, not on when or how it's paid for, so cash on collection doesn't remove the confirmation duty.

Can I keep taking orders on Instagram once there is a form?

Yes, and most businesses should. The form doesn't replace Instagram as the place people first get in touch. It just gives the order itself somewhere proper to land once someone says yes.